@pulse-compute/crypto 1.0.0-beta.4 → 1.0.0-beta.6

package/guests/es256-rustcrypto/build.cjs

@@ -0,0 +1,297 @@
+#!/usr/bin/env node
+'use strict';
+
+const assert = require('node:assert/strict');
+const childProcess = require('node:child_process');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+
+const unitRoot = __dirname;
+const sourceDirectory = path.join(unitRoot, 'source');
+const prebuiltDirectory = path.join(unitRoot, 'prebuilt');
+const manifestFile = path.join(unitRoot, 'pulse.guest-unit.json');
+const repoRoot = path.resolve(unitRoot, '..', '..', '..', '..');
+const {
+  fileRecord,
+  sha256,
+  sourceTreeRecord,
+  stableJson,
+} = require(path.join(
+  repoRoot,
+  'wasm/packages/wasm-guest-link/src/files.js',
+));
+const {
+  binaryenIdentity,
+  runTool,
+} = require(path.join(
+  repoRoot,
+  'wasm/packages/wasm-guest-link/src/toolchain.js',
+));
+const {
+  optimizationPostures,
+} = require(path.join(
+  repoRoot,
+  'wasm/packages/wasm-guest-link/src/constants.js',
+));
+
+const EXPECTED_RUSTC = '1.97.1 (8bab26f4f 2026-07-14)';
+const EXPECTED_CARGO = '1.97.1 (c980f4866 2026-06-30)';
+const TARGET = 'wasm32v1-none';
+const CRATE_STEM = 'pulse_es256_rustcrypto_verifier.wasm';
+const BUILD_IDENTITY = 'pulse.crypto.es256-rs256.build.v3';
+
+function usage() {
+  process.stderr.write('Usage: node build.cjs (--write|--check)\n');
+  process.exitCode = 2;
+}
+
+function run(file, args, options = {}) {
+  const result = childProcess.spawnSync(file, args, {
+    cwd: options.cwd || sourceDirectory,
+    env: options.env || process.env,
+    encoding: 'utf8',
+    maxBuffer: 16 * 1024 * 1024,
+    shell: false,
+    timeout: options.timeoutMs || 300_000,
+  });
+  if (result.error || result.status !== 0) {
+    throw new Error(
+      `${path.basename(file)} failed (${result.status}): ` +
+      `${String(result.stderr || result.error || '').trim()}`,
+    );
+  }
+  return String(result.stdout || '').trim();
+}
+
+function version(executable, kind) {
+  const prefix = `${kind} `;
+  const output = run(executable, ['--version'], { timeoutMs: 30_000 });
+  if (!output.startsWith(prefix)) {
+    throw new Error(`Unexpected ${kind} version output.`);
+  }
+  return output.slice(prefix.length);
+}
+
+function buildOnce(cargo, sequence) {
+  const directory = fs.mkdtempSync(
+    path.join(os.tmpdir(), `pulse-es256-g1-build-${sequence}-`),
+  );
+  const targetDirectory = path.join(directory, 'target');
+  const rawFile = path.join(
+    targetDirectory,
+    TARGET,
+    'release',
+    CRATE_STEM,
+  );
+  const optimizedFile = path.join(directory, 'es256-verifier.wasm');
+  const environment = {
+    ...process.env,
+    CARGO_TARGET_DIR: targetDirectory,
+  };
+  try {
+    run(cargo, [
+      'build',
+      '--manifest-path',
+      path.join(sourceDirectory, 'Cargo.toml'),
+      '--locked',
+      '--release',
+      '--target',
+      TARGET,
+    ], {
+      env: environment,
+    });
+    runTool('wasm-opt', [
+      rawFile,
+      ...optimizationPostures['native-size'],
+      '-o',
+      optimizedFile,
+    ], {
+      cwd: directory,
+      timeoutMs: 120_000,
+    });
+    return Object.freeze({
+      directory,
+      raw: fs.readFileSync(rawFile),
+      optimized: fs.readFileSync(optimizedFile),
+    });
+  } catch (error) {
+    fs.rmSync(directory, { recursive: true, force: true });
+    throw error;
+  }
+}
+
+function manifest(source, lock, artifact, rustc, cargo, binaryen) {
+  const wasmOpt = binaryen.tools.find((entry) => entry.name === 'wasm-opt');
+  assert.ok(wasmOpt);
+  const buildScript = fs.readFileSync(__filename);
+  // Historical source-selection attestation is pinned in the reviewed guest
+  // catalog. Reconstruction must not depend on ignored local evidence files.
+  const g0SourceDecisionSha256 = '58db9e3587ace112a8864c7916f603d8773dce653deafb7d743c0dc1f4d62d63';
+  return Object.freeze({
+    version: 'pulse.guest-unit.v2',
+    id: 'pulse.crypto.es256.rustcrypto-p256.v1',
+    module: 'pulse_crypto_es256',
+    owner: '@pulse-compute/crypto',
+    packageVersion: '1.0.0-beta.6',
+    abi: 'pulse.crypto.es256-rs256.verify-and-sign.v3',
+    origin: 'package-prebuilt',
+    artifact: Object.freeze({
+      file: 'prebuilt/es256-verifier.wasm',
+      bytes: artifact.bytes,
+      sha256: artifact.sha256,
+    }),
+    source: Object.freeze({
+      included: true,
+      directory: 'source',
+      treeSha256: source.sha256,
+    }),
+    toolchain: Object.freeze({
+      kind: 'rust-cargo',
+      target: TARGET,
+      locked: true,
+      versions: Object.freeze({
+        rustc,
+        cargo,
+        zig: '0.13.0',
+        binaryen: binaryen.version,
+      }),
+    }),
+    imports: Object.freeze([Object.freeze({
+      module: 'env',
+      name: 'memory',
+      kind: 'memory',
+      type: Object.freeze({
+        minimumPages: 32,
+        maximumPages: 32,
+        shared: false,
+      }),
+    })]),
+    exports: Object.freeze(['pulse_crypto_es256_sign', 'pulse_crypto_es256_verify', 'pulse_crypto_rs256_sign', 'pulse_crypto_rs256_verify'].map(name => Object.freeze({
+      name,
+      kind: 'function',
+      parameters: Object.freeze(['i32', 'i32']),
+      results: Object.freeze(['i32']),
+      role: 'abi',
+    }))),
+    memory: Object.freeze({
+      identity: 'pulse.guest-memory.invocation-frame.v2',
+      import: 'env.memory',
+      owner: 'link-stage',
+    }),
+    start: Object.freeze({
+      policy: 'forbidden',
+    }),
+    features: Object.freeze({
+      baseline: 'mvp',
+      allowed: Object.freeze([]),
+      required: Object.freeze([]),
+    }),
+    provenance: Object.freeze({
+      packageManifest: '../../package.json',
+      lockfile: 'source/Cargo.lock',
+      reproducibleSourceIncluded: true,
+      cargoLockSha256: lock.sha256,
+      sourceTreeSha256: source.sha256,
+      reconstructionCommandIdentity: BUILD_IDENTITY,
+      buildScript: 'build.cjs',
+      buildScriptSha256: sha256(buildScript),
+      optimizationPosture: 'native-size',
+      binaryenWasmOptSha256: wasmOpt.sha256,
+      g0SourceDecision:
+        '../../../../wasm/.test-results/jwt-g0/es256-source-decision.json',
+      g0SourceDecisionSha256,
+    }),
+  });
+}
+
+function compareBytes(label, actual, expectedFile) {
+  assert.equal(fs.existsSync(expectedFile), true, `${label} is missing`);
+  assert.deepEqual(actual, fs.readFileSync(expectedFile), `${label} differs`);
+}
+
+function main() {
+  const mode = process.argv[2];
+  if (!['--write', '--check'].includes(mode) || process.argv.length !== 3) {
+    usage();
+    return;
+  }
+  assert.equal(fs.existsSync(path.join(sourceDirectory, 'target')), false,
+    'Guest source must be clean: set CARGO_TARGET_DIR outside source for direct Cargo experiments.');
+  const upstreamRoot = path.join(sourceDirectory, 'bearssl');
+  const upstream = JSON.parse(fs.readFileSync(path.join(upstreamRoot, 'UPSTREAM.json'), 'utf8'));
+  assert.equal(upstream.version, '0.6');
+  assert.equal(upstream.archiveSha256, '6705bba1714961b41a728dfc5debbe348d2966c117649392f8c8139efc83ff14');
+  for (const [file, expected] of Object.entries(upstream.files)) {
+    assert.equal(sha256(fs.readFileSync(path.join(upstreamRoot, file))), expected, `Vendored upstream file differs: ${file}`);
+  }
+  const cargoExecutable = process.env.CARGO || 'cargo';
+  const rustcExecutable = process.env.RUSTC || 'rustc';
+  const rustcVersion = version(rustcExecutable, 'rustc');
+  const cargoVersion = version(cargoExecutable, 'cargo');
+  assert.equal(rustcVersion, EXPECTED_RUSTC);
+  assert.equal(cargoVersion, EXPECTED_CARGO);
+
+  let first;
+  let second;
+  try {
+    first = buildOnce(cargoExecutable, 'a');
+    second = buildOnce(cargoExecutable, 'b');
+    assert.deepEqual(first.raw, second.raw, 'Cargo release bytes differ');
+    assert.deepEqual(
+      first.optimized,
+      second.optimized,
+      'Binaryen optimized bytes differ',
+    );
+    const source = sourceTreeRecord(sourceDirectory);
+    const lock = fileRecord(path.join(sourceDirectory, 'Cargo.lock'));
+    const artifact = Object.freeze({
+      bytes: first.optimized.length,
+      sha256: sha256(first.optimized),
+    });
+    const expectedManifest = stableJson(manifest(
+      source,
+      lock,
+      artifact,
+      rustcVersion,
+      cargoVersion,
+      binaryenIdentity(),
+    ));
+    const rawFile = path.join(
+      prebuiltDirectory,
+      'es256-verifier.unoptimized.wasm',
+    );
+    const optimizedFile = path.join(
+      prebuiltDirectory,
+      'es256-verifier.wasm',
+    );
+
+    if (mode === '--write') {
+      fs.mkdirSync(prebuiltDirectory, { recursive: true });
+      fs.writeFileSync(rawFile, first.raw);
+      fs.writeFileSync(optimizedFile, first.optimized);
+      fs.writeFileSync(manifestFile, expectedManifest);
+    } else {
+      compareBytes('unoptimized prebuilt', first.raw, rawFile);
+      compareBytes('optimized prebuilt', first.optimized, optimizedFile);
+      assert.equal(
+        fs.readFileSync(manifestFile, 'utf8'),
+        expectedManifest,
+        'guest manifest differs',
+      );
+    }
+
+    process.stdout.write(
+      `ok - ${BUILD_IDENTITY} reproduced ${artifact.sha256}\n`,
+    );
+  } finally {
+    if (first) {
+      fs.rmSync(first.directory, { recursive: true, force: true });
+    }
+    if (second) {
+      fs.rmSync(second.directory, { recursive: true, force: true });
+    }
+  }
+}
+
+main();

package/guests/es256-rustcrypto/probe/.cargo/config.toml

@@ -0,0 +1,18 @@
+[build]
+target = "wasm32v1-none"
+
+[target.wasm32v1-none]
+rustflags = [
+  "-C",
+  "link-arg=--import-memory",
+  "-C",
+  "link-arg=--initial-memory=2097152",
+  "-C",
+  "link-arg=--max-memory=2097152",
+  "-C",
+  "link-arg=--stack-first",
+  "-C",
+  "link-arg=-zstack-size=65536",
+  "-C",
+  "link-arg=--global-base=131072",
+]

package/guests/es256-rustcrypto/probe/Cargo.lock

@@ -0,0 +1,238 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "base16ct"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c7f02d4ea65f2c1853089ffd8d2787bdbc63de2f0d29dedbcf8ccdfa0ccd4cf"
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "const-oid"
+version = "0.9.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crypto-bigint"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
+dependencies = [
+ "generic-array",
+ "rand_core",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bfb12502f3fc46cca1bb51ac28df9d618d813cdc3d2f25b9fe775a34af26bb3"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "der"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
+dependencies = [
+ "const-oid",
+ "zeroize",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
+[[package]]
+name = "ecdsa"
+version = "0.16.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee27f32b5c5292967d2d4a9d7f1e0b0aed2c15daded5a60300e4abb9d8020bca"
+dependencies = [
+ "elliptic-curve",
+ "signature",
+]
+
+[[package]]
+name = "elliptic-curve"
+version = "0.13.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47"
+dependencies = [
+ "base16ct",
+ "crypto-bigint",
+ "digest",
+ "ff",
+ "generic-array",
+ "group",
+ "rand_core",
+ "sec1",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "ff"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0b50bfb653653f9ca9095b427bed08ab8d75a137839d9ad64eb11810d5b6393"
+dependencies = [
+ "rand_core",
+ "subtle",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4bb6743198531e02858aeaea5398fcc883e71851fcbcb5a2f773e2fb6cb1edf2"
+dependencies = [
+ "typenum",
+ "version_check",
+ "zeroize",
+]
+
+[[package]]
+name = "group"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
+dependencies = [
+ "ff",
+ "rand_core",
+ "subtle",
+]
+
+[[package]]
+name = "libc"
+version = "0.2.189"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
+
+[[package]]
+name = "p256"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9863ad85fa8f4460f9c48cb909d38a0d689dba1f6f6988a5e3e0d31071bcd4b"
+dependencies = [
+ "elliptic-curve",
+ "primeorder",
+]
+
+[[package]]
+name = "primeorder"
+version = "0.13.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "353e1ca18966c16d9deb1c69278edbc5f194139612772bd9537af60ac231e1e6"
+dependencies = [
+ "elliptic-curve",
+]
+
+[[package]]
+name = "pulse-es256-rustcrypto-probe"
+version = "0.0.0"
+dependencies = [
+ "ecdsa",
+ "p256",
+ "sha2",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+
+[[package]]
+name = "sec1"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3e97a565f76233a6003f9f5c54be1d9c5bdfa3eccfb189469f11ec4901c47dc"
+dependencies = [
+ "base16ct",
+ "der",
+ "generic-array",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "signature"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
+dependencies = [
+ "rand_core",
+]
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "typenum"
+version = "1.20.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "zeroize"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"

package/guests/es256-rustcrypto/probe/Cargo.toml

@@ -0,0 +1,26 @@
+[package]
+name = "pulse-es256-rustcrypto-probe"
+version = "0.0.0"
+edition = "2021"
+publish = false
+license = "Apache-2.0"
+
+[lib]
+crate-type = ["cdylib"]
+
+[dependencies]
+ecdsa = { version = "=0.16.9", default-features = false, features = ["arithmetic", "hazmat"] }
+p256 = { version = "=0.13.2", default-features = false, features = ["arithmetic"] }
+sha2 = { version = "=0.10.9", default-features = false }
+
+[profile.dev]
+panic = "abort"
+
+[profile.release]
+codegen-units = 1
+debug = false
+incremental = false
+lto = true
+opt-level = "z"
+panic = "abort"
+strip = "symbols"

package/guests/es256-rustcrypto/probe/README.md

@@ -0,0 +1,35 @@
+# ES256 RustCrypto dependency probe
+
+This maintainer-only G0 probe freezes the dependency and feature closure for
+the first Pulse ES256 verifier candidate. It is not the production guest,
+package prebuilt, application build path, or public ABI. G1 owns the real
+single-export verifier and complete private-frame validation.
+
+The selected closure deliberately avoids the aggregate `p256/ecdsa` feature.
+It uses:
+
+- `p256` `0.13.2`: `arithmetic` only;
+- `ecdsa` `0.16.9`: `arithmetic` and `hazmat` only;
+- `sha2` `0.10.9`: default features disabled.
+
+`std`, `alloc`, `ecdsa/signing`, `ecdsa/verifying`, `rfc6979`, `pem`, `pkcs8`,
+`serde`, JWK support, randomness, and `getrandom` are not enabled. The probe
+calls the generic prehashed verification primitive directly so the high-level
+signing feature and deterministic-signing dependency remain outside the
+selected graph. Its one unsafe block is the probe-only raw-memory adapter;
+the selected RustCrypto crates forbid unsafe code in their crate roots.
+
+The checked-in lockfile is authoritative. The pinned toolchain target is
+`wasm32v1-none`. The linker imports only fixed `env.memory` with 32 initial and
+maximum pages, reserves the first 64 KiB for the Rust stack, and places static
+data at 128 KiB.
+
+Builds are maintainer-only:
+
+```bash
+cargo build
+cargo build --release
+```
+
+Ordinary Pulse application builds must consume a reviewed package prebuilt.
+They must never compile this source.

package/guests/es256-rustcrypto/probe/rust-toolchain.toml

@@ -0,0 +1,5 @@
+[toolchain]
+channel = "1.97.1"
+components = []
+profile = "minimal"
+targets = ["wasm32v1-none"]