Skipper
|
bf63279f73
|
merge: refactor-integrity-check into main
|
2026-08-26 13:00:40 +02:00 |
|
|
|
96b4eb1d98
|
Merge pull request 'refactor(hashing): introduce Hashable derive macro and migrate server types' (#82) from hashing-proc-macro into main
Reviewed-on: #82
Reviewed-by: Stas <business@jexter.tech>
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
539265e3b1
|
docs: updated to new auth challenge format and removed stale TOCTOU race condition note
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
cddf9e02ba
|
fix(useragent): now using new challenge format
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
270e843598
|
fix(server::tests): api surface of auth challenge changed
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
0a48839321
|
refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
f6151293d4
|
refactor(server): now keeps track of useragents, instead of
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
3bbf713e67
|
refactor(server::grpc::vault_gate): standard approach using / traits
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
810656702b
|
fix(server): sending fixed vault state when on stage
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
4823a291f8
|
WIP: kameo::messages wiring for transport generalization
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
1d9b572565
|
feat(user-agent): add VaultGate for sealed vault authentication
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
af7e90dcad
|
fix(server::integrity): vault now differentias between expected/unexpected states for commands more granularly
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
97e6b1950d
|
fix(useragent): unsafe, but working implementation of ml-dsa
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
d2f41e693c
|
fix(server::user_agent): useragents now self-sign themselves on bootstrap
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
9650407093
|
refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus
|
2026-08-26 13:00:40 +02:00 |
|
|
|
100c257e95
|
Merge pull request 'Post-quantum crypto and better useragent security' (#80) from push-xrxykvkuxpsv into main
Reviewed-on: #80
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
247cb90fbf
|
refactor(hashing): introduce Hashable derive macro and migrate server types
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
13fb31f841
|
fix(server::bootsrapper): token compare is now constant-time
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
a49baf7386
|
housekeeping(server): fixed clippy warns
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
2df25b8641
|
tests(server::client::auth): integrity envelope insertion for valid paths
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
6b814f4869
|
refactor(server): moved shared module crypto into arbiter-crypto
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
11ad5df426
|
feat(server): add integrity verification for client keys
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
97b7b483ff
|
docs: ml-dsa scheme everywhere
|
2026-08-26 13:00:39 +02:00 |
|
|
|
307822187c
|
Merge pull request 'fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing' (#77) from push-opwuyuwxknyo into main
Reviewed-on: #77
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
4c2e00b56d
|
refactor(server): migrated auth to ml-dsa
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
dcf42b0e4e
|
fix(server): added chain_id check and covered check_shared_constraints with unit tests
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
bd0a8f3907
|
tests(server): property-based testing for ordering independency for hash
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
38284d84b6
|
tests(server): initial cargo-mutants
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
d482ed37aa
|
fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
498e2e3145
|
fix(server): simplify hash function for debug profile
|
2026-08-26 13:00:39 +02:00 |
|
|
|
e1b32165e9
|
Merge pull request 'feat(server): integrity envelope engine for EVM grants with HMAC verification' (#51) from integrity-envelope into main
Reviewed-on: #51
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
6f33d44697
|
docs: add recovery operators and multi-operator details
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
9173be2920
|
tests(server): fixed for new integrity checks
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
cdf2394963
|
docs: add multi-operator governance section
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
d55e9880ec
|
refactor(server): rework envelopes and integrity check
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
37fa954933
|
merge: @main into client-integrity-verification
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
ba7bfe9b6f
|
fix(server): remove stale mentions of miette
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
5c3421de1e
|
housekeeping(server): fixed clippy warns
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
6a0c512773
|
chore: inline integrity proto types
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
be23f87e67
|
refactor(user-agent): remove backfill pubkey integrity tags
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
4bd8a2df33
|
feat(server): integrity envelope engine for EVM grants with HMAC verification
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
29f2174dcf
|
fix(server): previously, user agent auth accepted invalid signatures
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
149035ecf5
|
refactor(server): separate crypto by purpose and moved outside of actor into separate module
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
17ea8d8dc9
|
feat(auth): implement attestation status verification for public keys
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
e9e2888e95
|
fix(keyholder): comment drift
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
0b30416a7b
|
refactor(keyholder): generalize derive_useragent_integrity_key and compute_useragent_pubkey_integrity_tag corespondenly to derive_integrity_key and compute_integrity_tag
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
e2e2c4fc07
|
feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
2b7d3257da
|
style(dashboard): format code and add title margin
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
ed6e102c96
|
feat(grants-create): add configurable grant authorization fields
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
a7e031faca
|
refactor(useragent::evm::grants): split into more files & flutter_form_builder usage
|
2026-08-26 13:00:39 +02:00 |
|
