236 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Skipper	9ee86afc19	fix(useragent): now using new challenge format	2026-04-17 18:19:51 +02:00
Skipper	790026e93b	fix(server::tests): api surface of auth challenge changed	2026-04-17 17:58:22 +02:00
Skipper	0e09afda5d	refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database	2026-04-17 17:44:42 +02:00
Skipper	51e6571d80	refactor(server): now keeps track of useragents, instead of	2026-04-17 00:00:43 +02:00
Skipper	3b828d5874	refactor(server::grpc::vault_gate): standard approach using / traits	2026-04-16 22:15:18 +02:00
Skipper	a6f94e3115	fix(server): sending fixed vault state when on stage	2026-04-16 19:36:41 +02:00
hdbg	f49e995c2f	WIP: kameo::messages wiring for transport generalization	2026-04-16 17:18:46 +02:00
hdbg	87ee0fe87b	feat(user-agent): add VaultGate for sealed vault authentication	2026-04-12 11:53:05 +02:00
hdbg	205227a3df	fix(server::integrity): vault now differentias between expected/unexpected states for commands more granularly	2026-04-08 18:21:48 +02:00
hdbg	a4070e7df7	fix(useragent): unsafe, but working implementation of ml-dsa	2026-04-08 17:43:51 +02:00
hdbg	6b8da567dd	fix(server::user_agent): useragents now self-sign themselves on bootstrap	2026-04-08 17:40:45 +02:00
hdbg	1585f90cae	refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus	2026-04-08 12:34:16 +02:00
Stas	f3cf6a9438	Merge pull request 'Post-quantum crypto and better useragent security' (#80) from push-xrxykvkuxpsv into main ... Reviewed-on: #80	2026-04-07 19:26:54 +00:00
hdbg	a9f9fc2a9d	housekeeping(server): fixed clippy warns	2026-04-07 16:28:47 +02:00
hdbg	d22ab49e3d	refactor(server): moved shared module crypto into arbiter-crypto	2026-04-07 16:24:51 +02:00
hdbg	a845181ef6	docs: ml-dsa scheme everywhere	2026-04-07 15:02:32 +02:00
hdbg	0d424f3afc	refactor(server): migrated auth to ml-dsa	2026-04-07 14:55:31 +02:00
hdbg	1497884ce6	fix(server::bootsrapper): token compare is now constant-time	2026-04-06 18:33:47 +02:00
hdbg	b3464cf8a6	tests(server::client::auth): integrity envelope insertion for valid paths	2026-04-06 18:24:13 +02:00
hdbg	46d1318b6f	feat(server): add integrity verification for client keys	2026-04-06 18:13:11 +02:00
Stas	9c80d51d45	Merge pull request 'fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing' (#77) from push-opwuyuwxknyo into main ... Reviewed-on: #77	2026-04-06 15:42:47 +00:00
hdbg	33456a644d	tests(server): property-based testing for ordering independency for hash	2026-04-06 17:40:41 +02:00
hdbg	5bc0c42cc7	fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing	2026-04-06 16:25:32 +02:00
hdbg	f6b62ab884	fix(server): added chain_id check and covered check_shared_constraints with unit tests	2026-04-06 12:57:18 +02:00
hdbg	2dd5a3f32f	tests(server): initial cargo-mutants	2026-04-06 12:03:56 +02:00
hdbg	1aca9d4007	fix(server): simplify hash function for debug profile	2026-04-05 22:50:28 +02:00
Stas	5ee1b49c43	Merge pull request 'feat(server): integrity envelope engine for EVM grants with HMAC verification' (#51) from integrity-envelope into main ... Reviewed-on: #51	2026-04-05 16:26:51 +00:00
hdbg	00745bb381	tests(server): fixed for new integrity checks	2026-04-05 14:49:02 +02:00
hdbg	b122aa464c	refactor(server): rework envelopes and integrity check	2026-04-05 14:17:00 +02:00
hdbg	9fab945a00	fix(server): remove stale mentions of miette	2026-04-05 10:45:24 +02:00
CleverWild	aeed664e9a	chore: inline integrity proto types	2026-04-05 10:44:21 +02:00
CleverWild	4057c1fc12	feat(server): integrity envelope engine for EVM grants with HMAC verification	2026-04-05 10:44:21 +02:00
hdbg	f5eb51978d	docs: add recovery operators and multi-operator details	2026-04-05 08:27:24 +00:00
hdbg	d997e0f843	docs: add multi-operator governance section	2026-04-05 08:27:24 +00:00
hdbg	7aca281a81	merge: @main into client-integrity-verification	2026-04-05 10:25:46 +02:00
Stas	0daad1dd37	Merge branch 'main' into push-zmyvyloztluy	2026-04-05 07:57:31 +00:00
Stas	9ea474e1b2	fix(server): use LOCALHOST const instead of hard-coded ip value	2026-04-04 14:14:15 +00:00
CleverWild	c6f440fdad	fix(client): evm-feature's code for new proto	2026-04-04 14:10:44 +00:00
Stas	e17c25a604	ci(server-test): ensure that all features are compiling	2026-04-04 14:06:02 +00:00
hdbg	01b12515bd	housekeeping(server): fixed clippy warns	2026-04-04 14:33:48 +02:00
hdbg	4a50daa7ea	refactor(user-agent): remove backfill pubkey integrity tags	2026-04-04 14:32:00 +02:00
hdbg	352ee3ee63	fix(server): previously, user agent auth accepted invalid signatures	2026-04-04 14:28:07 +02:00
hdbg	dd51d756da	refactor(server): separate crypto by purpose and moved outside of actor into separate module	2026-04-04 14:21:52 +02:00
CleverWild	0bb6e596ac	feat(auth): implement attestation status verification for public keys	2026-04-04 12:10:45 +02:00
hdbg	083ff66af2	refactor(server): removed miette out of server	2026-04-04 12:10:34 +02:00
CleverWild	881f16bb1a	fix(keyholder): comment drift	2026-04-04 12:02:50 +02:00
CleverWild	78895bca5b	refactor(keyholder): generalize derive_useragent_integrity_key and compute_useragent_pubkey_integrity_tag corespondenly to derive_integrity_key and compute_integrity_tag	2026-04-04 12:00:39 +02:00
Stas	1495fbe754	Merge pull request 'refactor(protocol): split into domain-based nesting' (#45) from push-zwvktknttnmw into main ... Reviewed-on: #45	2026-04-04 08:24:16 +00:00
Stas	ab8cf877d7	Merge branch 'main' into push-zwvktknttnmw	2026-04-03 20:34:37 +00:00
hdbg	146f7a419e	housekeeping: updated docs to match current impl state	2026-04-03 22:26:25 +02:00