j3g
/
lum_ccc_rust
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
lum_ccc_rust/docs/session_state_2026-02-25.md

7.2 KiB
Raw Permalink Blame History

CCC Rust – Session State (2026-02-25)

Paste this into a fresh Copilot context to resume.

Milestone 1 – Verification Gate Progress

Gate item Status
cargo test --workspace ✅ passing
cargo run -p ccc-conformance-tests ALL VECTORS PASSED ✅ passing
cargo build --target aarch64-apple-ios ✅ passing
cargo build --target aarch64-linux-android ✅ passing
No flutter_rust_bridge / Dart dependency ✅ confirmed
cargo audit ✅ passing (0 vulnerabilities)

Todo List

  • Add KEM conformance vectors (RFC 7748 X25519 + X448) to tests/conformance/src/main.rs
  • Fix KEM RFC vector correctness (updated to canonical RFC 7748 §6.1 / §6.2 values)
  • Fix XChaCha20-Poly1305 zero-key/zero-nonce failure (-173 BAD_FUNC_ARG) by removing invalid probe
  • Verify all conformance tests pass (ALL VECTORS PASSED)
  • Install cargo-audit and verify no known CVEs
  • cargo build --target aarch64-apple-ios — success
  • cargo build --target aarch64-linux-android — success
  • Write docs/ccc_rust_milestone1.rst
  • Update docs/ccc_rust_plan_phases.rst to mark completed items

Files Changed This Session

tests/conformance/src/main.rs

  • Added KemAlgorithm to imports
  • Added KemDhVec struct and XChaChaProbe struct
  • Added KEM_DH_VECS static with RFC 7748 §6.1 (X25519) and §6.2 (X448) vectors
  • Corrected KEM vectors to canonical RFC 7748 Diffie-Hellman values
  • Added XCHACHA20_PROBES static and later removed invalid all-zero nonce probe
  • Added run_kem() — RFC 7748 KAT test (both Alice→Bob and Bob→Alice)
  • Added run_kem_roundtrip() — ephemeral keygen + encap/decap self-consistency
  • Added run_xchacha20_kat() — roundtrip + auth-failure check, prints ct_tag for pinning
  • Updated main() to call those 3 new runners

crates/ccc-crypto-wolfssl/build.rs

  • Added to bindgen allowlist:
    • wc_curve25519_import_private_ex
    • wc_curve25519_import_public_ex
    • wc_curve25519_export_key_raw_ex
    • wc_curve448_import_private_ex
    • wc_curve448_import_public_ex
    • wc_curve448_export_key_raw_ex
  • These are now confirmed present in wolfcrypt_bindings.rs (verified via nm)

crates/ccc-crypto-wolfssl/src/kem.rs

  • Added const X25519_LE: i32 = 0 (EC25519_LITTLE_ENDIAN) and const X448_LE: i32 = 0
  • x25519_generate(): export now uses wc_curve25519_export_key_raw_ex(..., X25519_LE)
  • x25519_dh(): import private uses wc_curve25519_import_private_ex(..., X25519_LE), import public uses wc_curve25519_import_public_ex(..., X25519_LE), DH uses wc_curve25519_shared_secret_ex(..., X25519_LE)
  • Same pattern applied to x448_generate(), x448_dh() with X448_LE
  • Temporary debug logging used during investigation was removed after validation

crates/ccc-crypto-wolfssl/src/lib.rs

  • Added a manual ECPoint definition with #[repr(C, align(16))]
  • Rationale: preserve ABI layout compatibility for curve25519_key fields after ECPoint
  • This removed prior -170 (ECC_BAD_ARG_E) failures and restored X25519 roundtrip

Current Conformance Test Output

── KEM DH (RFC 7748) ────────────────────────────────────────────────
  [PASS]  X25519 DH RFC 7748 §6.1 (Alice→Bob)
  [PASS]  X25519 DH RFC 7748 §6.1 (Bob→Alice)
  [PASS]  X448 DH RFC 7748 §6.2 (Alice→Bob)
  [PASS]  X448 DH RFC 7748 §6.2 (Bob→Alice)

── KEM Roundtrip ────────────────────────────────────────────────────
  [PASS]  X25519 ephemeral roundtrip
  [PASS]  X448 ephemeral roundtrip

── XChaCha20-Poly1305 extended-nonce ────────────────────────────────
  [INFO]  XChaCha20-Poly1305 extended-nonce roundtrip ct_tag =
          bd6d179d3e83d43b9576579493c0e939...  ← printed for pinning
  [PASS]  XChaCha20-Poly1305 extended-nonce roundtrip [roundtrip]
  [PASS]  XChaCha20-Poly1305 extended-nonce roundtrip [auth-fail]

  ALL VECTORS PASSED ✓

Root Cause Analysis

KEM mismatch root cause resolved

The remaining KEM mismatches were caused by non-canonical values in the conformance vectors. tests/conformance/src/main.rs now uses the canonical RFC 7748 §6.1/§6.2 Diffie-Hellman vectors, and both X25519 and X448 pass in both directions.

XChaCha20 zero-key/zero-nonce – resolved in test suite

-173 = BAD_FUNC_ARG. wolfSSL's wc_XChaCha20Poly1305_Encrypt rejects an all-zero nonce as an invalid argument. This is a wolfSSL security guard. The invalid zero-nonce probe was removed from conformance tests.

Recommended Next Steps (for next session)

Fix 1 – KEM: finish RFC vector correctness

✅ Completed — vectors corrected to RFC 7748 canonical values.

Fix 2 – XChaCha20: remove zero-nonce probe

✅ Completed — removed invalid all-zero nonce probe.

After removing it, pin the ct_tag printed by run_xchacha20_kat:

bd6d179d3e83d43b9576579493c0e939572a1700252bfaccbed2902c21396cbb731c7f1b0b4aa644a8d50d95afe27fb7d5fe6e0539a2d3ad

for regression pinning.

Fix 3 – After conformance passes

Run in order:

cargo install cargo-audit
cargo audit
cargo build --target aarch64-apple-ios
# ensure Android NDK clang toolchain is in PATH first
cargo build --target aarch64-linux-android

Status:

  • ✅ cargo install cargo-audit
  • ✅ cargo audit --json ("found": false, "count": 0)
  • ✅ cargo build --target aarch64-apple-ios
  • ✅ cargo build --target aarch64-linux-android

Environment note:

  • Android build was unblocked by creating NDK compiler aliases:
    • aarch64-linux-android-clang -> aarch64-linux-android21-clang
    • aarch64-linux-android-clang++ -> aarch64-linux-android21-clang++ in .../ndk/26.3.11579264/toolchains/llvm/prebuilt/darwin-x86_64/bin.

Documentation status:

  • ✅ docs/ccc_rust_milestone1.rst created
  • ✅ docs/ccc_rust_plan_phases.rst updated to reflect Milestone 1 completion

Key File Paths

ccc_rust/
├── crates/ccc-crypto-wolfssl/
│   ├── build.rs                   ← bindgen allowlist updated
│   └── src/kem.rs                 ← LE endianness fix + clean DH path (conformance passing)
├── tests/conformance/src/main.rs  ← RFC 7748 vectors corrected + XChaCha probe cleanup
└── docs/
    ├── ccc_rust_plan.rst          ← architecture plan
    ├── ccc_rust_plan_phases.rst   ← phase tracking (needs update after fixes)
    └── session_state_2026-02-25.md  ← this file

Wolfssl options confirmed

  • WOLF_CRYPTO_CB = undefined (#undef in installed wolfssl/options.h)
  • WOLFSSL_ASYNC_CRYPT = not enabled (WOLFSSL_ASYNC_THREADS:BOOL=no in CMakeCache)
  • WOLFSSL_SE050 = not defined
  • bindgen clang args: -DHAVE_AESGCM -DHAVE_CHACHA -DHAVE_POLY1305 -DHAVE_XCHACHA -DHAVE_BLAKE2 -DHAVE_BLAKE2B -DWOLFSSL_SHA384 -DWOLFSSL_SHA512 -DWOLFSSL_SHA3 -DHAVE_HKDF -DHAVE_CURVE25519 -DHAVE_CURVE448
  • Missing clang arg that may help: -DWOLFSSL_NOSHA3_256 or any align flags if ECPoint differs between bindgen and compiled struct