Skip to content

feat: crypto-core Phase 2 — PRF/VOPRF/dedup surface #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
AtHeartEngineer merged 20 commits into from
Jul 4, 2026
Merged

feat: crypto-core Phase 2 — PRF/VOPRF/dedup surface #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
1e2888e
style(db): wrap test assertion to satisfy rustfmt
AtHeartEngineer Jul 4, 2026
14f9473
test(keygen_dos): raise poll ceiling to 120s to match other suites
AtHeartEngineer Jul 4, 2026
52cb1d3
test: raise keygen poll ceilings to 360s across integration suites
AtHeartEngineer Jul 4, 2026
bea2662
fix(main): consume secret env vars before the async runtime starts
AtHeartEngineer Jul 4, 2026
66cbf5d
feat(db): service_keys and dedup_entries storage with record-first re…
AtHeartEngineer Jul 4, 2026
341429e
feat(prf): RFC 9497 VOPRF core, nullifier key schedule, pairwise oracle
AtHeartEngineer Jul 4, 2026
2f28a75
feat(dedup): service-key init/import lifecycle and fail-closed boot p…
AtHeartEngineer Jul 4, 2026
b5ed914
feat(prf): mount the PRF/dedup HTTP surface with fail-closed boot and…
AtHeartEngineer Jul 4, 2026
5d18796
fix(dedup): verify the pubkey pin before sealing a pairwise import
AtHeartEngineer Jul 4, 2026
92c9532
fix(dedup): refuse init on a pinned node and boot on an orphaned pin
AtHeartEngineer Jul 4, 2026
dd1db0d
feat(handlers): re-check the PRF allow-list inside require_prf
AtHeartEngineer Jul 4, 2026
6959dde
fix(db): constant-time owner-handle comparisons on the dedup ledger
AtHeartEngineer Jul 4, 2026
0a79140
fix(handlers): drop per-request outcome status from dedup log lines
AtHeartEngineer Jul 4, 2026
846306b
perf(handlers): run PRF/dedup ledger DB work in spawn_blocking
AtHeartEngineer Jul 4, 2026
eb13086
docs(config): state what remove_var actually protects
AtHeartEngineer Jul 4, 2026
310908a
docs(identity): record the CA issuance discipline the PRF list relies on
AtHeartEngineer Jul 4, 2026
6b4d291
fix(db): make the service/group key AAD domain split explicit
AtHeartEngineer Jul 4, 2026
47d9c56
test(keygen): raise unit-test wait ceilings to 360s
AtHeartEngineer Jul 4, 2026
e284bc2
feat(interop): cross-language VOPRF harness and CI gate (interop/prf.…
AtHeartEngineer Jul 4, 2026
aef7932
style: rustfmt
AtHeartEngineer Jul 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,5 +65,13 @@ jobs:
# exact @cloudflare/blindrsa-ts FreedInk uses, and cross-version / metadata
# mismatches must be rejected. Builds the interop_tool example, installs the
# pinned TS lib, and runs the driver; prints INTEROP OK on success.
- name: Run interop harness
- name: Run blind-RSA interop harness
run: bash interop/run.sh
# VOPRF suite decision gate (ADR Phase 2 item 6): TS (@cloudflare/voprf-ts
# + noble) blind -> Rust evaluate + DLEQ -> TS finalize (DLEQ verified
# against the pinned pkS) -> byte-compare against the frozen ecosystem
# vectors; tampered-proof and wrong-key evaluations must be rejected.
# Red here means flip the ciphersuite to P256-SHA256 before anything
# depends on values. Prints PRF INTEROP OK on success.
- name: Run PRF (VOPRF) interop harness
run: bash interop/run-prf.sh
4 changes: 3 additions & 1 deletion .gitignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,8 @@
*.pem
*.key

# Node interop deps (installed on demand by interop/run.sh)
# Node interop deps (installed on demand by interop/run.sh + interop/run-prf.sh)
/interop/node/node_modules
/interop/node/package-lock.json
/interop/node_modules
/interop/package-lock.json
Loading
Loading