Karolin Varner
4daca9ed56
chore(whitepaper): Biscuit and pidi cipher texts now called pidi_ct/biscuit_ct
2025-09-05 16:12:11 +02:00
Karolin Varner
75ff1e8292
chore(whitepaper): Nomenclature improvements
2025-09-05 16:12:11 +02:00
Karolin Varner
484af1654a
feat(whitepaper): Precise references to KEM versions
2025-09-05 16:12:11 +02:00
Karolin Varner
9c82424dee
fix(whitepaper): Relax requirements on biscuit key life times
...
…and harmonize with the implementation
2025-09-05 16:12:11 +02:00
Karolin Varner
823e5aca56
fix(whitepaper): Incorrect ordering of auth and biscuit in RespHello
...
Graphic fix to come later
2025-09-05 16:12:11 +02:00
Karolin Varner
22bf2e3990
fix(proverif): Incorrect parameter ordering in encaps_/decaps_and_mix
2025-09-05 16:12:11 +02:00
Karolin Varner
f39a43a821
fix(proverif): Remove broken protocol analysis code
...
The identity hiding and DOS protection models where never actually
functional. Here we just remove them so the CI and manual runs of
analysis.sh stop giving spurious errors.
2025-09-05 16:12:11 +02:00
Karolin Varner
bc6fa0d672
fix(whitepaper): Incorrect parameter ordering in encaps_/decaps_and_mix
...
Update of the figures in the white paper to come later.
2025-09-05 16:12:10 +02:00
Karolin Varner
db797ff11e
fix(whitepaper): Specify our incorrect (but likely secure) variant of HMAC
2025-09-05 16:12:10 +02:00
Karolin Varner
7790d82b51
fix(whitepaper): Inconsistency between implementation and whitepaper about blake2s/blake2b usage
2025-09-05 16:12:10 +02:00
Karolin Varner
b52c607efc
fix(whitepaper): Inconsistency between implementation and whitepaper about PROTOCOL label
2025-09-05 16:12:10 +02:00
Karolin Varner
d2a85a0d6b
fix(whitepaper): Inconsistency between implementation and whitepaper about labels for txki/txkr
...
Fix of Fig. 5 follows later.
2025-09-05 16:12:10 +02:00
Karolin Varner
221c583508
fix(whitepaper): Incorrect biscuit_no comparison in load_biscuit()
2025-09-05 16:12:10 +02:00
Karolin Varner
14c48cf069
fix(whitepaper): Incorrect name used
...
Fig. 5: Rosenpass Message Handling Code; in IHR5: `decaps_and_mix<SKEM>(sskr, spkr, ct1)` -> `decaps_and_mix<SKEM>(sskr, spkr, sctr)`
Actual update to the figure will be done later
2025-09-05 16:12:10 +02:00
Karolin Varner
6e43a21e74
feat(whitepaper): Brief section about endianness
2025-09-05 16:12:10 +02:00
Karolin Varner
6bfc29ef93
feat(whitepaper): Brief section about protocol roles
2025-09-05 16:12:10 +02:00
Karolin Varner
39341c0ef8
chore(whitepaper): Added an explaining paragraph to section 'Live Session State'
2025-09-05 16:12:10 +02:00
Karolin Varner
9ee86e01ec
feat(whitepaper): Comprehensive reference about packages, labels, and symmetric keys used in protocol
2025-09-05 16:12:10 +02:00
Karolin Varner
3721996f2d
chore(whitepaper): Stub for steffen vogel changelog entry
2025-09-05 16:12:10 +02:00
Karolin Varner
49ccb1ea95
fix: Spurious debug output in nix flake
2025-09-05 16:01:15 +02:00
Karolin Varner
baa534f2e2
Add integration tests ( #672 )
2025-09-03 15:52:39 +02:00
Karolin Varner
6e62cd7c36
chore(ci): Remove spurious debug output
2025-09-03 15:52:01 +02:00
David Niehues
a18e793a53
chore(test): Move debug print in integration tests to extra function for less repetition
2025-09-01 10:58:28 +02:00
David Niehues
48e9dd2a86
chore(test): Move the wireguard key generation in the integration tests to the test script to make the derivations deterministc while keeping random keys
2025-09-01 10:58:28 +02:00
David Niehues
7d4ae23db9
chore(test): Move generation of rosenpass keys in integration tests into test script as the frst of two steps to make the nix derivations deterministic
2025-09-01 10:58:28 +02:00
David Niehues
1c85091b6d
chore(tests+CI): Remove nix log command in CI for i686 nix checks
2025-09-01 10:58:28 +02:00
Karolin Varner
b88d3961ea
chore(integration-test): Nix fmt
2025-09-01 10:58:28 +02:00
Karolin Varner
82135cce5c
fix(integration-test): Incorrect peer IP in connection BA
2025-09-01 10:58:28 +02:00
Karolin Varner
879a25ec46
fix(integration-test): Use /32 again for allowed ips
2025-09-01 10:58:28 +02:00
Karolin Varner
098aff91ab
fix(integration-test): Don't erase endpoint & allowed ips when setting PSK
2025-09-01 10:58:28 +02:00
Karolin Varner
d5162d7b9a
fix(integration-test): Use deterministic WG keys
2025-09-01 10:58:28 +02:00
David Niehues
8ee0619c08
chore(tests): Move truncation to when key files in integration tests are read instead of when they are written
2025-09-01 10:58:28 +02:00
Karolin Varner
15f2153b1b
fix(integration-test): Use consistent network sizes
2025-09-01 10:58:28 +02:00
David Niehues
2fc2e073ef
chore(tests): Configure explicit endpoints on all wireguard interfaces for the integration tests
2025-09-01 10:58:28 +02:00
David Niehues
8f01790d04
chore(tests): Change order of pings in integration test so that initiator always pings first.
2025-09-01 10:58:28 +02:00
Karolin Varner
ad1235c4f8
chore: Dump network config in integration tests
2025-09-01 10:58:28 +02:00
David Niehues
c08c99968f
chore(CI): disable 32 bit integration tests
2025-09-01 10:58:28 +02:00
David Niehues
3498a6e12c
chore(tests): Make the services in the integration tests only start once they are needed
2025-09-01 10:58:28 +02:00
David Niehues
ed4ec9d7dd
longer timeout for ping in integration tests
2025-09-01 10:58:28 +02:00
David Niehues
e1c19a083f
more state dumping for debugging
2025-09-01 10:58:28 +02:00
David Niehues
32a4051281
extra ci step for debugging
2025-09-01 10:58:28 +02:00
Karolin Varner
9e6a9a7a4a
fix: Absurdly long timeout for i686 integration tests
2025-09-01 10:58:28 +02:00
Karolin Varner
c8a724a8d0
chore: Show PSKs exchanged in integration test
2025-09-01 10:58:27 +02:00
Karolin Varner
dffd0b33fe
fix: Spurious comment in integration tests
2025-09-01 10:58:27 +02:00
Karolin Varner
ba1c6a177e
fix: Spurious input in nix flake
2025-09-01 10:58:27 +02:00
Karolin Varner
6577d1731c
fix: In integration test in main flake: Move rosenpassOld into flake imports
2025-09-01 10:58:27 +02:00
Karolin Varner
18b6dae902
fix: Integration tests never actually used current version of code
2025-09-01 10:58:27 +02:00
David Niehues
651d59cc8c
chore(test): Add configFileVersion attribute to the rosenpass nix package and print config file versions of used packages in integration tests
2025-09-01 10:58:27 +02:00
David Niehues
3e4e67b1e3
chore(tests): Add integration tests to checks in main flake.nix
2025-09-01 10:58:27 +02:00
David Niehues
e3fe9bdb95
chore(tests): Move generation of integration test checks into an own module
2025-09-01 10:58:27 +02:00
