confium 0.7.2 → 0.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4781912c386b0d87ec844b0e5ce39cb129784cb8192c1b3b7b8a0f5f5c839fe8
-  data.tar.gz: 6f514371bb2bff4294e705942e20d985d929ca620bc985ab89b34ebe05a5726d
+  metadata.gz: 00021aaa2acda85a9f1cbb381f5184c2524e2663b6f25b71eeb50f755d2547be
+  data.tar.gz: 1278d5afb3bebf8a0b3bd6a80f4db594cb2863c3ce12b2d82cb78b0115cbac7a
 SHA512:
-  metadata.gz: aefdf4fc91cfcefa0b74a0acec550217f64663ca88b28da596240c8697756b3d114f602659dff61c4d0e41058c06d1d8f1bc5b9d2ca6ab9cf50e83ad0ad01e93
-  data.tar.gz: 7df239deca2de2b616b2bbd9e72d9a529a042a1ea572ab94135fdb42b6a951d83969250f6b59801a5a1da29e734f303916f6fcb9140b74b7faf59bd62624e9cc
+  metadata.gz: c1e8098ac29b79c84b56413b2813839664e10de0b0a4b43417102ac3627fed8664d26e55b4a22b8546b03e85e5d81292566727350c4e310308f4eb09352a7a53
+  data.tar.gz: 69e8c20e22b20a92260e13ae8227fba553aa7d27fe69a92c88df1c8e963bb2e94bdcacbb78b15db9fb316e76aac1ba5435baa736dcc2bb1fa5beb5971ecfd686

data/CHANGELOG.md

@@ -1,6 +1,25 @@
 # Changelog
 
-## [0.7.2] — UNRELEASED (code on main; release on the owner's tag)
+## [0.8.0] — UNRELEASED (code on main; release on the owner's tag)
+
+### Changed
+
+- **BREAKING**: `Confium::TC::Cmp20::Mta` follows the upstream
+  key-direction inversion (confium-tc-cmp20 0.10): the proved MtA
+  exchange now runs under the INITIATOR's Paillier key end to end.
+  `party_j_respond` drops its private-key argument — the responder
+  needs only the initiator's public material (it can never open the
+  ciphertext it operates on) — and `party_i_init` / `party_i_finish` /
+  `full` take the initiator's key. The split rounds are therefore
+  sound across processes: `alpha` stays with the initiator, `beta`
+  with the responder, and neither share holder can recover the
+  peer's secret (whoever holds both recovers it exactly). The
+  api-reference trust note is replaced by the key-direction
+  explanation; new spec: the responder side needs no private
+  material.
+- ext crates: `confium-tc` / `confium-tc-cmp20` 0.9 → 0.10.
+
+## [0.7.2] — 2026-09-10
 
 ### Added
 

data/Cargo.lock

@@ -113,9 +113,9 @@ dependencies = [
 
 [[package]]
 name = "bitflags"
-version = "2.13.1"
+version = "2.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
+checksum = "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06"
 
 [[package]]
 name = "blake2"
@@ -368,9 +368,9 @@ dependencies = [
 
 [[package]]
 name = "confium-net-tcp"
-version = "0.8.3"
+version = "0.8.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b80e3d692ed5328a72e754a0f73d81f6c8fde3714d05fc0be1953f657e05f76"
+checksum = "6f9dc8ede26a41714ca0d787592395face7551886cc229a8b97f30c34b903b2e"
 dependencies = [
  "confium-net",
  "inventory",
@@ -406,9 +406,9 @@ dependencies = [
 
 [[package]]
 name = "confium-tc"
-version = "0.9.2"
+version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5117ef63b3e928dbd7250607bef640961e70090ecc82a54ebd1b69e1921b4f9a"
+checksum = "da7534230988cb45831c6125baa93b122e71b3d9d61b414927068dfe62842bc3"
 dependencies = [
  "chrono",
  "confium-tc-core",
@@ -428,9 +428,9 @@ dependencies = [
 
 [[package]]
 name = "confium-tc-cmp20"
-version = "0.9.2"
+version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3d49e806886b274f44efb0d172600226b6696d8ac7f12124ce8e38093807bf7"
+checksum = "a87ceca32c969982e86304f6c820b1db60d88d668025d86b13f95c4a013e6b7b"
 dependencies = [
  "confium-tc",
  "crypto-bigint 0.7.5",
@@ -447,9 +447,9 @@ dependencies = [
 
 [[package]]
 name = "confium-tc-core"
-version = "0.9.2"
+version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c0af0c5074978ac0630447e2555abe4462732450e346b289dcc170a8a42a99b"
+checksum = "86a3b3bda8a1453b8b5d02d13e88636dbcf8caa36671327a0ebce6514b97363f"
 dependencies = [
  "chrono",
  "getrandom 0.4.3",
@@ -482,9 +482,9 @@ dependencies = [
 
 [[package]]
 name = "confium-tc-frost-ed25519"
-version = "0.9.2"
+version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d5c04b1a94c923f0d157963feb5fa0df17808c753f0505e4ca21195b33857772"
+checksum = "105b6f9d91b532fa118a18c6e2904684d46944db93cb79d2c3be8b13e0b2a680"
 dependencies = [
  "confium-tc",
  "curve25519-dalek 5.0.0",
@@ -509,9 +509,9 @@ dependencies = [
 
 [[package]]
 name = "confium-tc-gg18"
-version = "0.9.2"
+version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8de0dcac83c500c5bb9f6c3b7203c6c6afa340f46df4b781f3841683b4fdf3b7"
+checksum = "9c7a07f0bac8cffd60dfedd3f786f75c25aad0c9315ac1f6cdfb60ecdcb025e6"
 dependencies = [
  "confium-tc",
  "crypto-bigint 0.7.5",
@@ -1185,9 +1185,9 @@ checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
 
 [[package]]
 name = "hybrid-array"
-version = "0.4.14"
+version = "0.4.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "707114b52a152fa7bdb290cd7cd5912d9467273b6d74e21b8d81aca1f8533f6b"
+checksum = "27f864f10dfb56725ce5ce5472bc52252c8f93a4ab86327122cebf62c5f59a17"
 dependencies = [
  "subtle",
  "typenum",
@@ -1853,9 +1853,9 @@ dependencies = [
 
 [[package]]
 name = "rnp-rs"
-version = "0.1.16"
+version = "0.1.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "44ed4ce48fca01b9d8846dd681d555c8df626b43b83b916146108b7d2eca8ae2"
+checksum = "f3df383e603a1e920409e1c7fae0a80b829a7b51151ba7854cfb58415f8c9e04"
 dependencies = [
  "rnp-sys",
  "snafu 0.9.2",
@@ -1863,9 +1863,9 @@ dependencies = [
 
 [[package]]
 name = "rnp-src"
-version = "0.2.5"
+version = "0.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72836ffd359235b998ae4062ddf1108e28fb10e18a2f69a000320eaab5fa2a25"
+checksum = "c4e6f4474772f8f4bfed1d6ba1a465bc524442206fe012257bfdcf8f6e0ab935"
 dependencies = [
  "botan-src",
  "flate2",
@@ -1875,9 +1875,9 @@ dependencies = [
 
 [[package]]
 name = "rnp-sys"
-version = "0.1.1"
+version = "0.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42c118890f1f70738d30bce4c29edd29156a2c999e53eb4939700ac114a38878"
+checksum = "9ec6224a4e26bf2f71bca848f485aeefbd6bdb1721b6c83e5cb70980563ec982"
 dependencies = [
  "bindgen",
  "pkg-config",
@@ -2141,9 +2141,9 @@ checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
 
 [[package]]
 name = "smallvec"
-version = "1.16.0"
+version = "1.16.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9be42f50aa861c555654aa3a37f52f4b1074bacf4e48fe0ef7fa584e80f1f0f"
+checksum = "ba467056f1b547ed52077911161fc86985becbc60e8e1857c8a144dab0def891"
 
 [[package]]
 name = "snafu"
@@ -2814,18 +2814,18 @@ dependencies = [
 
 [[package]]
 name = "zerocopy"
-version = "0.8.56"
+version = "0.8.57"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "556764e583adb45a9f8d413c2a147fa7e8d821e48e12b14fd560b607998b75eb"
+checksum = "d35102a9f36d089ccae9e4c6802bc118be4487b80aaffc0ab4e0cf5ce92d2873"
 dependencies = [
  "zerocopy-derive",
 ]
 
 [[package]]
 name = "zerocopy-derive"
-version = "0.8.56"
+version = "0.8.57"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2ab42fc20575779bd240faa45f94a74256f755c0fa9e89f0ede20d91d0cdfc1"
+checksum = "146c01f5ab44258da43cf276c74a2763db2ff3969c9c652c3f2de07041d0b2bc"
 dependencies = [
  "proc-macro2",
  "quote",

data/ext/confium_native/Cargo.toml

@@ -42,16 +42,16 @@ confium-attributes = "0.3.1"
 confium-pki = "0.5.6"
 confium-store = "0.5.8"
 confium-deployment = "0.3"
-confium-tc = "0.9"
+confium-tc = "0.10"
 confium-tc-frost-p256 = "0.4"
 confium-tc-elgamal-p256 = "0.4"
-confium-tc-cmp20 = "0.9"
-confium-tc-gg18 = "0.9"
+confium-tc-cmp20 = "0.10"
+confium-tc-gg18 = "0.10"
 
 # Per-party session protocol: the tc-core 0.4 registry line. The 0.3-era
 # in-process drivers above keep their own registry harmlessly.
-confium-tc-session = { package = "confium-tc-core", version = "0.9" }
-confium-tc-frost-ed25519 = "0.9"
+confium-tc-session = { package = "confium-tc-core", version = "0.10" }
+confium-tc-frost-ed25519 = "0.10"
 
 # P-256 scalar/point types used by the TC surface.
 p256 = { version = "0.13", features = ["ecdsa"] }

data/ext/confium_native/src/tc_mta.rs

@@ -7,13 +7,15 @@
 //! expose the three passes with messages as plain Hashes of hex
 //! integers so rounds can be JSON-encoded onto a transport.
 //!
-//! Trust model: coordinator. The finish step decrypts the response
-//! under the RESPONDER's Paillier key — that is the shape the upstream
-//! crate implements — so the process calling `party_i_finish` (or
-//! `full`) must hold the keypair, exactly like the in-process signing
-//! drivers. Splitting the passes across machines needs the upstream
-//! per-party state machine; until it exists, these are message-level
-//! building blocks under a trusted coordinator.
+//! Key direction: the exchange runs under the INITIATOR's Paillier
+//! key. Party i encrypts k_i under its own public key, party j
+//! responds using ONLY public material (it can never open the
+//! initiator's ciphertext), and only party i can decrypt the response
+//! — so the split rounds are sound across processes: alpha stays with
+//! the initiator, beta-prime with the responder, and neither share
+//! holder can recover the other's secret. `full` is the in-process
+//! convenience for a coordinator that legitimately holds the
+//! initiator's keypair.
 
 use confium_tc::paillier::{
     generate_keypair as generate_paillier_keypair, PaillierKeypair, PaillierPrivateKey,
@@ -241,12 +243,12 @@ fn mta_generate_commitment_key(ruby: &Ruby, prime_bits: i64) -> Result<RHash, Er
 
 fn mta_party_i_init(
     ruby: &Ruby,
-    j_public: RHash,
+    i_public: RHash,
     ck_j: RHash,
     q: String,
     k_i: String,
 ) -> Result<RHash, Error> {
-    let public = public_from_hash(&j_public)?;
+    let public = public_from_hash(&i_public)?;
     let ck = commitment_key_from_hash(&ck_j)?;
     let q = parse_hex(&q, "q")?;
     let k_i = parse_hex(&k_i, "k_i")?;
@@ -257,33 +259,24 @@ fn mta_party_i_init(
 
 fn mta_party_j_respond(
     ruby: &Ruby,
-    j_public: RHash,
-    j_private: RHash,
+    i_public: RHash,
     ck_i: RHash,
     ck_j: RHash,
     q: String,
     msg1: RHash,
     x_j: String,
 ) -> Result<magnus::RArray, Error> {
-    let public = public_from_hash(&j_public)?;
-    let private = private_from_hash(&j_private)?;
+    // Only the initiator's PUBLIC material: the responder can never
+    // open the ciphertext it operates on.
+    let public = public_from_hash(&i_public)?;
     let ck_i = commitment_key_from_hash(&ck_i)?;
     let ck_j = commitment_key_from_hash(&ck_j)?;
     let q = parse_hex(&q, "q")?;
     let msg1 = msg1_from_hash(&msg1)?;
     let x_j = parse_hex(&x_j, "x_j")?;
-    let (msg2, beta) = party_j_respond_proved(
-        &PaillierKeypair {
-            public,
-            private,
-        },
-        &ck_i,
-        &ck_j,
-        &q,
-        &msg1,
-        &x_j,
-    )
-    .map_err(|e| mta_error(ruby, "tc_cmp20_mta_respond", e))?;
+    let (msg2, beta) =
+        party_j_respond_proved(&public, &ck_i, &ck_j, &q, &msg1, &x_j)
+            .map_err(|e| mta_error(ruby, "tc_cmp20_mta_respond", e))?;
     crate::audit::fire_event("tc_cmp20_mta_respond", "success", Some(ALGORITHM), None, None);
     let out = ruby.ary_new_capa(2);
     out.push(msg2_to_hash(ruby, &msg2)?)?;
@@ -293,15 +286,15 @@ fn mta_party_j_respond(
 
 fn mta_party_i_finish(
     ruby: &Ruby,
-    j_public: RHash,
-    j_private: RHash,
+    i_public: RHash,
+    i_private: RHash,
     ck_i: RHash,
     q: String,
     msg1_ciphertext: String,
     msg2: RHash,
 ) -> Result<RString, Error> {
-    let public = public_from_hash(&j_public)?;
-    let private = private_from_hash(&j_private)?;
+    let public = public_from_hash(&i_public)?;
+    let private = private_from_hash(&i_private)?;
     let ck_i = commitment_key_from_hash(&ck_i)?;
     let q = parse_hex(&q, "q")?;
     let ciphertext = parse_hex(&msg1_ciphertext, "message 1 ciphertext")?;
@@ -314,16 +307,16 @@ fn mta_party_i_finish(
 
 fn mta_full(
     ruby: &Ruby,
-    j_public: RHash,
-    j_private: RHash,
+    i_public: RHash,
+    i_private: RHash,
     ck_i: RHash,
     ck_j: RHash,
     q: String,
     k_i: String,
     x_j: String,
 ) -> Result<magnus::RArray, Error> {
-    let public = public_from_hash(&j_public)?;
-    let private = private_from_hash(&j_private)?;
+    let public = public_from_hash(&i_public)?;
+    let private = private_from_hash(&i_private)?;
     let ck_i = commitment_key_from_hash(&ck_i)?;
     let ck_j = commitment_key_from_hash(&ck_j)?;
     let q = parse_hex(&q, "q")?;
@@ -361,7 +354,7 @@ pub fn init(ruby: &Ruby, cmp20: &magnus::RModule) -> Result<(), Error> {
         magnus::function!(mta_generate_commitment_key, 1),
     )?;
     mta.define_module_function("party_i_init", magnus::function!(mta_party_i_init, 4))?;
-    mta.define_module_function("party_j_respond", magnus::function!(mta_party_j_respond, 7))?;
+    mta.define_module_function("party_j_respond", magnus::function!(mta_party_j_respond, 6))?;
     mta.define_module_function("party_i_finish", magnus::function!(mta_party_i_finish, 6))?;
     mta.define_module_function("full", magnus::function!(mta_full, 7))?;
     Ok(())

data/lib/confium/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Confium
-  VERSION = '0.7.2'
+  VERSION = '0.8.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: confium
 version: !ruby/object:Gem::Version
-  version: 0.7.2
+  version: 0.8.0
 platform: ruby
 authors:
 - Ribose Open
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-09-08 00:00:00.000000000 Z
+date: 2026-09-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rb_sys