Differential D3747

[Identity] Implement some generic OPAQUE types
ClosedPublic
Actions

Authored by varun on Apr 15 2022, 11:46 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Thu, May 9, 3:11 AM

	Unknown Object (File)
	Thu, May 9, 3:11 AM

	Unknown Object (File)
	Thu, May 9, 3:11 AM

	Unknown Object (File)
	Thu, May 2, 1:56 AM

	Unknown Object (File)
	Thu, Apr 25, 3:11 AM

	Unknown Object (File)
	Tue, Apr 23, 8:00 PM

	Unknown Object (File)
	Tue, Apr 23, 8:00 PM

	Unknown Object (File)
	Tue, Apr 23, 8:00 PM

Subscribers

Details

Reviewers

• jim
• karol
atul
anunay

Commits

rCOMM6d7806eed0f2: [Identity] Implement some generic OPAQUE types

Summary

Depends on D3578

Implementation of the CipherSuite trait, which configures the underlying primitives for OPAQUE.

Group: a finite cyclic group along with a point representation, along with an extension trait PasswordToCurve that allows some customization on how to hash a password to a curve point
KeyExchange: The key exchange protocol to use in the login step
Hash: The main hashing function to use
SlowHash: A slow hashing function, typically used for password hashing

Test Plan

cargo build

this will get tested more in subsequent diffs that use the CipherSuite

Diff Detail

Repository

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

varun created this revision.Apr 15 2022, 11:46 AM

Herald added subscribers: • abosh, • benschac, • adrian and 2 others. · View Herald TranscriptApr 15 2022, 11:46 AM

Harbormaster completed remote builds in B8235: Diff 11520.Apr 15 2022, 11:51 AM

varun requested review of this revision.Apr 15 2022, 11:51 AM

Adding @anunayk and making @jimpo since it appears like there are some cryptography decisions to be made here

• jim accepted this revision.Apr 19 2022, 2:55 AM

This revision is now accepted and ready to land.Apr 19 2022, 2:55 AM

expose OPAQUE's CipherSuite as a library instead of a module, so that it can be reused in another executable to generate a keypair for the server

Harbormaster completed remote builds in B8368: Diff 11680.Apr 20 2022, 3:01 PM

varun added a child revision: D3799: [Identity] Script to generate and persist a server keypair for PAKE.Apr 20 2022, 9:20 PM

Requesting review again since I changed the file structure after this diff was accepted

varun planned changes to this revision.Apr 28 2022, 8:01 AM

varun mentioned this in D3799: [Identity] Script to generate and persist a server keypair for PAKE.

Revert file structure change

Harbormaster completed remote builds in B8654: Diff 12045.Apr 28 2022, 9:09 AM

atul accepted this revision.May 2 2022, 11:16 AM

This revision is now accepted and ready to land.May 2 2022, 11:16 AM

Closed by commit rCOMM6d7806eed0f2: [Identity] Implement some generic OPAQUE types (authored by varun). · Explain WhyMay 2 2022, 11:30 AM

This revision was automatically updated to reflect the committed changes.

varun added a commit: rCOMM6d7806eed0f2: [Identity] Implement some generic OPAQUE types.

Revision Contents
Changeset List

Path

Size

services/

identity/

5 lines

src/

4 lines

29 lines

	service.rs
	identity.rs

Diff 12144

services/identity/Cargo.lock

Loading...

services/identity/Cargo.toml

Loading...

services/identity/src/identity.rs

Loading...

services/identity/src/main.rs

Loading...

services/identity/src/opaque.rs

Loading...

services/identity/src/service.rs

Loading...