Differential D3747

[Identity] Implement some generic OPAQUE types
ClosedPublic
Actions

Authored by varun on Apr 15 2022, 11:46 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Fri, Dec 20, 11:56 PM

	Unknown Object (File)
	Fri, Dec 20, 11:56 PM

	Unknown Object (File)
	Fri, Dec 20, 11:56 PM

	Unknown Object (File)
	Fri, Dec 20, 11:56 PM

	Unknown Object (File)
	Fri, Dec 20, 11:56 PM

	Unknown Object (File)
	Fri, Dec 20, 11:51 PM

	Unknown Object (File)
	Fri, Dec 6, 9:16 PM

	Unknown Object (File)
	Wed, Nov 27, 5:31 AM

Subscribers

Details

Reviewers

• jim
• karol
atul
anunay

Commits

rCOMM6d7806eed0f2: [Identity] Implement some generic OPAQUE types

Summary

Depends on D3578

Implementation of the CipherSuite trait, which configures the underlying primitives for OPAQUE.

Group: a finite cyclic group along with a point representation, along with an extension trait PasswordToCurve that allows some customization on how to hash a password to a curve point
KeyExchange: The key exchange protocol to use in the login step
Hash: The main hashing function to use
SlowHash: A slow hashing function, typically used for password hashing

Test Plan

cargo build

this will get tested more in subsequent diffs that use the CipherSuite

Diff Detail

Repository

Branch

varun/identity_service (branched from master)

Lint

No Lint Coverage

Unit

No Test Coverage

Event Timeline

varun created this revision.Apr 15 2022, 11:46 AM

Herald added subscribers: • abosh, • benschac, • adrian and 2 others. · View Herald TranscriptApr 15 2022, 11:46 AM

Harbormaster completed remote builds in B8235: Diff 11520.Apr 15 2022, 11:51 AM

varun requested review of this revision.Apr 15 2022, 11:51 AM

Adding @anunayk and making @jimpo since it appears like there are some cryptography decisions to be made here

• jim accepted this revision.Apr 19 2022, 2:55 AM

This revision is now accepted and ready to land.Apr 19 2022, 2:55 AM

expose OPAQUE's CipherSuite as a library instead of a module, so that it can be reused in another executable to generate a keypair for the server

Harbormaster completed remote builds in B8368: Diff 11680.Apr 20 2022, 3:01 PM

varun added a child revision: D3799: [Identity] Script to generate and persist a server keypair for PAKE.Apr 20 2022, 9:20 PM

Requesting review again since I changed the file structure after this diff was accepted

varun planned changes to this revision.Apr 28 2022, 8:01 AM

varun mentioned this in D3799: [Identity] Script to generate and persist a server keypair for PAKE.

Revert file structure change

Harbormaster completed remote builds in B8654: Diff 12045.Apr 28 2022, 9:09 AM

atul accepted this revision.May 2 2022, 11:16 AM

This revision is now accepted and ready to land.May 2 2022, 11:16 AM

Closed by commit rCOMM6d7806eed0f2: [Identity] Implement some generic OPAQUE types (authored by varun). · Explain WhyMay 2 2022, 11:30 AM

This revision was automatically updated to reflect the committed changes.

varun added a commit: rCOMM6d7806eed0f2: [Identity] Implement some generic OPAQUE types.

Revision Contents
Changeset List

Path

Size

services/

identity/

5 lines

src/

1 line

29 lines

Diff 11520

services/identity/Cargo.lock

Loading...

services/identity/Cargo.toml

Loading...

services/identity/src/main.rs

Loading...

services/identity/src/opaque.rs

Loading...