7.2 KiB

Raw Blame History

CCC Rust – Session State (2026-02-25)

Paste this into a fresh Copilot context to resume.

Milestone 1 – Verification Gate Progress

Gate item	Status
`cargo test --workspace`	✅ passing
`cargo run -p ccc-conformance-tests` ALL VECTORS PASSED	✅ passing
`cargo build --target aarch64-apple-ios`	✅ passing
`cargo build --target aarch64-linux-android`	✅ passing
No flutter_rust_bridge / Dart dependency	✅ confirmed
`cargo audit`	✅ passing (0 vulnerabilities)

Todo List

Add KEM conformance vectors (RFC 7748 X25519 + X448) to tests/conformance/src/main.rs
Fix KEM RFC vector correctness (updated to canonical RFC 7748 §6.1 / §6.2 values)
Fix XChaCha20-Poly1305 zero-key/zero-nonce failure (-173 BAD_FUNC_ARG) by removing invalid probe
Verify all conformance tests pass (ALL VECTORS PASSED)
Install cargo-audit and verify no known CVEs
cargo build --target aarch64-apple-ios — success
cargo build --target aarch64-linux-android — success
Write docs/ccc_rust_milestone1.rst
Update docs/ccc_rust_plan_phases.rst to mark completed items

Files Changed This Session

`tests/conformance/src/main.rs`

Added KemAlgorithm to imports
Added KemDhVec struct and XChaChaProbe struct
Added KEM_DH_VECS static with RFC 7748 §6.1 (X25519) and §6.2 (X448) vectors
Corrected KEM vectors to canonical RFC 7748 Diffie-Hellman values
Added XCHACHA20_PROBES static and later removed invalid all-zero nonce probe
Added run_kem() — RFC 7748 KAT test (both Alice→Bob and Bob→Alice)
Added run_kem_roundtrip() — ephemeral keygen + encap/decap self-consistency
Added run_xchacha20_kat() — roundtrip + auth-failure check, prints ct_tag for pinning
Updated main() to call those 3 new runners

`crates/ccc-crypto-wolfssl/build.rs`

Added to bindgen allowlist:
- wc_curve25519_import_private_ex
- wc_curve25519_import_public_ex
- wc_curve25519_export_key_raw_ex
- wc_curve448_import_private_ex
- wc_curve448_import_public_ex
- wc_curve448_export_key_raw_ex
These are now confirmed present in wolfcrypt_bindings.rs (verified via nm)

`crates/ccc-crypto-wolfssl/src/kem.rs`

Added const X25519_LE: i32 = 0 (EC25519_LITTLE_ENDIAN) and const X448_LE: i32 = 0
x25519_generate(): export now uses wc_curve25519_export_key_raw_ex(..., X25519_LE)
x25519_dh(): import private uses wc_curve25519_import_private_ex(..., X25519_LE), import public uses wc_curve25519_import_public_ex(..., X25519_LE), DH uses wc_curve25519_shared_secret_ex(..., X25519_LE)
Same pattern applied to x448_generate(), x448_dh() with X448_LE
Temporary debug logging used during investigation was removed after validation

`crates/ccc-crypto-wolfssl/src/lib.rs`

Added a manual ECPoint definition with #[repr(C, align(16))]
Rationale: preserve ABI layout compatibility for curve25519_key fields after ECPoint
This removed prior -170 (ECC_BAD_ARG_E) failures and restored X25519 roundtrip

Current Conformance Test Output

── KEM DH (RFC 7748) ────────────────────────────────────────────────
  [PASS]  X25519 DH RFC 7748 §6.1 (Alice→Bob)
  [PASS]  X25519 DH RFC 7748 §6.1 (Bob→Alice)
  [PASS]  X448 DH RFC 7748 §6.2 (Alice→Bob)
  [PASS]  X448 DH RFC 7748 §6.2 (Bob→Alice)

── KEM Roundtrip ────────────────────────────────────────────────────
  [PASS]  X25519 ephemeral roundtrip
  [PASS]  X448 ephemeral roundtrip

── XChaCha20-Poly1305 extended-nonce ────────────────────────────────
  [INFO]  XChaCha20-Poly1305 extended-nonce roundtrip ct_tag =
          bd6d179d3e83d43b9576579493c0e939...  ← printed for pinning
  [PASS]  XChaCha20-Poly1305 extended-nonce roundtrip [roundtrip]
  [PASS]  XChaCha20-Poly1305 extended-nonce roundtrip [auth-fail]

  ALL VECTORS PASSED ✓

Root Cause Analysis

KEM mismatch root cause resolved

The remaining KEM mismatches were caused by non-canonical values in the conformance vectors. tests/conformance/src/main.rs now uses the canonical RFC 7748 §6.1/§6.2 Diffie-Hellman vectors, and both X25519 and X448 pass in both directions.

XChaCha20 zero-key/zero-nonce – resolved in test suite

-173 = BAD_FUNC_ARG. wolfSSL's wc_XChaCha20Poly1305_Encrypt rejects an all-zero nonce as an invalid argument. This is a wolfSSL security guard. The invalid zero-nonce probe was removed from conformance tests.

Recommended Next Steps (for next session)

Fix 1 – KEM: finish RFC vector correctness

✅ Completed — vectors corrected to RFC 7748 canonical values.

Fix 2 – XChaCha20: remove zero-nonce probe

✅ Completed — removed invalid all-zero nonce probe.

After removing it, pin the ct_tag printed by run_xchacha20_kat:

bd6d179d3e83d43b9576579493c0e939572a1700252bfaccbed2902c21396cbb731c7f1b0b4aa644a8d50d95afe27fb7d5fe6e0539a2d3ad

for regression pinning.

Fix 3 – After conformance passes

Run in order:

cargo install cargo-audit
cargo audit
cargo build --target aarch64-apple-ios
# ensure Android NDK clang toolchain is in PATH first
cargo build --target aarch64-linux-android

Status:

✅ cargo install cargo-audit
✅ cargo audit --json ("found": false, "count": 0)
✅ cargo build --target aarch64-apple-ios
✅ cargo build --target aarch64-linux-android

Environment note:

Android build was unblocked by creating NDK compiler aliases:
- aarch64-linux-android-clang -> aarch64-linux-android21-clang
- aarch64-linux-android-clang++ -> aarch64-linux-android21-clang++ in .../ndk/26.3.11579264/toolchains/llvm/prebuilt/darwin-x86_64/bin.

Documentation status:

✅ docs/ccc_rust_milestone1.rst created
✅ docs/ccc_rust_plan_phases.rst updated to reflect Milestone 1 completion

Key File Paths

ccc_rust/
├── crates/ccc-crypto-wolfssl/
│   ├── build.rs                   ← bindgen allowlist updated
│   └── src/kem.rs                 ← LE endianness fix + clean DH path (conformance passing)
├── tests/conformance/src/main.rs  ← RFC 7748 vectors corrected + XChaCha probe cleanup
└── docs/
    ├── ccc_rust_plan.rst          ← architecture plan
    ├── ccc_rust_plan_phases.rst   ← phase tracking (needs update after fixes)
    └── session_state_2026-02-25.md  ← this file

Wolfssl options confirmed

WOLF_CRYPTO_CB = undefined (#undef in installed wolfssl/options.h)
WOLFSSL_ASYNC_CRYPT = not enabled (WOLFSSL_ASYNC_THREADS:BOOL=no in CMakeCache)
WOLFSSL_SE050 = not defined
bindgen clang args: -DHAVE_AESGCM -DHAVE_CHACHA -DHAVE_POLY1305 -DHAVE_XCHACHA -DHAVE_BLAKE2 -DHAVE_BLAKE2B -DWOLFSSL_SHA384 -DWOLFSSL_SHA512 -DWOLFSSL_SHA3 -DHAVE_HKDF -DHAVE_CURVE25519 -DHAVE_CURVE448
Missing clang arg that may help: -DWOLFSSL_NOSHA3_256 or any align flags if ECPoint differs between bindgen and compiled struct

7.2 KiB Raw Blame History Unescape Escape