confium 0.7.1 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +55 -1
- data/Cargo.lock +224 -518
- data/ext/confium_native/Cargo.toml +9 -12
- data/ext/confium_native/src/lib.rs +1 -0
- data/ext/confium_native/src/tc.rs +1 -0
- data/ext/confium_native/src/tc_mta.rs +371 -0
- data/lib/confium/version.rb +1 -1
- metadata +3 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 00021aaa2acda85a9f1cbb381f5184c2524e2663b6f25b71eeb50f755d2547be
|
|
4
|
+
data.tar.gz: 1278d5afb3bebf8a0b3bd6a80f4db594cb2863c3ce12b2d82cb78b0115cbac7a
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: c1e8098ac29b79c84b56413b2813839664e10de0b0a4b43417102ac3627fed8664d26e55b4a22b8546b03e85e5d81292566727350c4e310308f4eb09352a7a53
|
|
7
|
+
data.tar.gz: 69e8c20e22b20a92260e13ae8227fba553aa7d27fe69a92c88df1c8e963bb2e94bdcacbb78b15db9fb316e76aac1ba5435baa736dcc2bb1fa5beb5971ecfd686
|
data/CHANGELOG.md
CHANGED
|
@@ -1,6 +1,60 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
-
## [0.
|
|
3
|
+
## [0.8.0] — UNRELEASED (code on main; release on the owner's tag)
|
|
4
|
+
|
|
5
|
+
### Changed
|
|
6
|
+
|
|
7
|
+
- **BREAKING**: `Confium::TC::Cmp20::Mta` follows the upstream
|
|
8
|
+
key-direction inversion (confium-tc-cmp20 0.10): the proved MtA
|
|
9
|
+
exchange now runs under the INITIATOR's Paillier key end to end.
|
|
10
|
+
`party_j_respond` drops its private-key argument — the responder
|
|
11
|
+
needs only the initiator's public material (it can never open the
|
|
12
|
+
ciphertext it operates on) — and `party_i_init` / `party_i_finish` /
|
|
13
|
+
`full` take the initiator's key. The split rounds are therefore
|
|
14
|
+
sound across processes: `alpha` stays with the initiator, `beta`
|
|
15
|
+
with the responder, and neither share holder can recover the
|
|
16
|
+
peer's secret (whoever holds both recovers it exactly). The
|
|
17
|
+
api-reference trust note is replaced by the key-direction
|
|
18
|
+
explanation; new spec: the responder side needs no private
|
|
19
|
+
material.
|
|
20
|
+
- ext crates: `confium-tc` / `confium-tc-cmp20` 0.9 → 0.10.
|
|
21
|
+
|
|
22
|
+
## [0.7.2] — 2026-09-10
|
|
23
|
+
|
|
24
|
+
### Added
|
|
25
|
+
|
|
26
|
+
- `Confium::TC::Cmp20::Mta` — the proved MtA sub-protocol (GG18/GG20
|
|
27
|
+
§3 + Appendix A) over confium-tc-cmp20 0.9: `full` runs the complete
|
|
28
|
+
Paillier exchange returning the additive shares (`alpha − beta =
|
|
29
|
+
k_i · x_j`); `party_i_init` / `party_j_respond` / `party_i_finish`
|
|
30
|
+
expose the three proved passes as Hashes of hex integers that can be
|
|
31
|
+
JSON-encoded onto a transport. `generate_keypair` /
|
|
32
|
+
`generate_commitment_key` produce the Paillier and Strong-RSA
|
|
33
|
+
commitment material (GVL released — safe-prime search takes seconds
|
|
34
|
+
at production sizes). Forged transcripts raise
|
|
35
|
+
`Confium::TC::Cmp20::MtaError`. Coordinator trust model documented
|
|
36
|
+
(the finish step decrypts under the responder's key, matching the
|
|
37
|
+
upstream crate); cross-machine split rounds await the upstream
|
|
38
|
+
per-party state machine.
|
|
39
|
+
- The api-reference's stale "MtA is an in-clear stub" caveat is
|
|
40
|
+
replaced with the real security model.
|
|
41
|
+
|
|
42
|
+
### Changed
|
|
43
|
+
|
|
44
|
+
- ext crates: `confium-tc-cmp20` 0.4 → 0.9, `confium-tc-gg18` 0.4 →
|
|
45
|
+
0.9, `confium-tc` 0.3.1 → 0.9, and the session line
|
|
46
|
+
(`confium-tc-core` via the `confium-tc-session` rename,
|
|
47
|
+
`confium-tc-frost-ed25519`) 0.4.7 → 0.9 — one confium-tc copy in
|
|
48
|
+
the link; two copies collided on their `cfm_tc_*` FFI symbols on
|
|
49
|
+
Linux/Windows. The in-process driver and Session APIs are unchanged
|
|
50
|
+
(suite green, 343 examples).
|
|
51
|
+
- Removed five unused direct deps from the 0.3 restructuring era
|
|
52
|
+
(`confium-tc-core`, `confium-crypto-vss`, `confium-crypto-zk`,
|
|
53
|
+
`confium-privacy`, `confium-observability`) — no code referenced
|
|
54
|
+
them, and `confium-crypto-vss` 0.3.0 predates the security gating
|
|
55
|
+
releases, so the shipped binaries no longer carry that code.
|
|
56
|
+
|
|
57
|
+
## [0.7.1] — 2026-09-08
|
|
4
58
|
|
|
5
59
|
### Added
|
|
6
60
|
|