dryoc 2.0.0__tar.gz

dryoc-2.0.0/.config/nextest.toml

@@ -0,0 +1,47 @@
+[profile.default-miri]
+# Miri runs each test in a separate interpreter. Report all failures, and
+# terminate stuck tests rather than consuming the entire CI job timeout.
+fail-fast = false
+slow-timeout = { period = "60s", terminate-after = 15 }
+
+# PR coverage targets unsafe views, wiping, schemas and representative public
+# operations. The full suite remains the default for local Miri runs.
+[profile.miri-smoke]
+inherits = "default-miri"
+slow-timeout = { period = "60s", terminate-after = 10 }
+default-filter = '''
+test(/^types::tests::/)
+| test(/^bytes_serde::tests::/)
+| test(/^utils::tests::test_zeroize/)
+| test(=generichash::tests::test_vectors)
+| test(=argon2::tests::test_vector_argon2i)
+| test(=argon2::tests::test_vector_argon2id)
+| test(=scalarmult_curve25519::tests::test_rfc7748_vectors)
+| test(=sign::tests::rfc8032_detached_signatures_and_signed_message_wire_format)
+| test(=poly1305::tests::rfc8439_a3_final_reduction_vectors)
+| test(=classic::crypto_aead_chacha20poly1305_ietf::tests::test_failures_leave_outputs_untouched)
+| test(=classic::crypto_aead_xchacha20poly1305_ietf::tests::test_failures_leave_outputs_untouched)
+| test(=classic::crypto_secretstream_xchacha20poly1305::tests::pull_authenticates_before_mutating_outputs_or_state)
+| test(=dryocaead::tests::kat::chacha_wincode_round_trips_decrypt_with_classic)
+| test(=test_dryocbox_wincode_wire_format)
+| test(=test_dryocsecretbox_wincode_wire_format)
+| test(=test_dryocaead_wincode_wire_format)
+| test(=test_classic_hmac_and_hkdf_public_api)
+| test(=test_sha3_public_api)
+| test(=test_streams)
+'''
+
+# Run with RUSTFLAGS="-Ctarget-feature=+avx2,+bmi2" so these kernels execute
+# instead of returning early on Miri's baseline virtual CPU.
+[profile.miri-kernels]
+inherits = "miri-smoke"
+default-filter = '''
+test(=poly1305::poly1305_soft::tests::avx2_blocks_match_scalar)
+| test(=blake2b::blake2b_soft::tests::test_x86_64_compress_matches_portable)
+| test(=argon2::tests::test_fill_block_x86_64_matches_soft)
+| test(=chacha20::tests::vector_path::test_kernel_chunk_matches_scalar_blocks)
+| test(=salsa20::tests::vector_path::test_kernel_chunk_matches_scalar_blocks)
+| test(=scalarmult_curve25519::tests::test_rfc7748_vectors)
+| test(=mlkem::tests::test_backends_match_soft)
+| test(=keccak::tests::test_x86_64_permute4_matches_scalar)
+'''

dryoc-2.0.0/.github/FUNDING.yml

@@ -0,0 +1,3 @@
+# These are supported funding model platforms
+
+github: brndnmtthws

dryoc-2.0.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,44 @@
+name: 🐞 Bug Report
+description: "File a bug report: crashes, unexpected behaviour, and other errors go here."
+title: "[Bug]: "
+labels: ["bug", "triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        If you haven't done so already, please take a moment to search the [existing issues](https://github.com/brndnmtthws/dryoc/issues) to see if this has been previously reported. If not, carry on.
+
+        Thanks for taking the time to fill out this bug report!
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened?
+      description: >
+        Describe the problem, what you expected to happen, and any other
+        relevant info. You can sample code below.
+      placeholder: Here's what happened
+    validations:
+      required: true
+  - type: input
+    id: version
+    attributes:
+      label: Version
+      description: What version of dryoc are you using?
+    validations:
+      required: true
+  - type: dropdown
+    id: os
+    validations:
+      required: true
+    attributes:
+      label: Which OS are you seeing the problem on?
+      options:
+        - Linux
+        - macOS
+        - Windows
+  - type: textarea
+    id: code
+    attributes:
+      label: Test code
+      description: If possible, please provide a minimal code sample that produces the problem.
+      render: Rust

dryoc-2.0.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,8 @@
+blank_issues_enabled: true
+contact_links:
+  - name: 🙏 General questions & help
+    url: https://github.com/brndnmtthws/dryoc/discussions/categories/q-a
+    about: Please ask and answer general questions using GitHub Discussions
+  - name: 💡 New ideas and feature requests
+    url: https://github.com/brndnmtthws/dryoc/discussions/categories/ideas
+    about: Request and discuss enhancements using GitHub Discussions

dryoc-2.0.0/.github/actions/install-nextest/action.yml

@@ -0,0 +1,19 @@
+name: Install cargo-nextest
+
+description: Install cargo-nextest with cargo-binstall
+
+inputs:
+  packages:
+    description: cargo-binstall package arguments
+    required: false
+    default: --locked cargo-nextest
+
+runs:
+  using: composite
+  steps:
+    - name: Install cargo-nextest
+      uses: brndnmtthws/rust-action-cargo-binstall@v1
+      with:
+        packages: ${{ inputs.packages }}
+      env:
+        GITHUB_TOKEN: ${{ github.token }}

dryoc-2.0.0/.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"

dryoc-2.0.0/.github/scripts/test-wheel.sh

@@ -0,0 +1,24 @@
+#!/bin/sh
+# Test a prebuilt wheel against the Python test suite. Run from python/.
+#
+# Usage: test-wheel.sh PYTHON WHEEL_GLOB
+#
+# Recreates the project environment for PYTHON with only the locked test
+# group, installs the wheel into it (`--no-sync` keeps uv from building the
+# project) and checks that the tests import the installed package, not the
+# sources in the checkout. On a free-threaded interpreter, importing dryoc
+# must leave the GIL disabled.
+set -eu
+
+python="$1"
+wheel_glob="$2"
+
+uv sync --locked --only-group test --python "$python"
+# Unquoted on purpose: the glob expands to the one matching wheel. A glob
+# without a match stays literal and uv reports the missing file.
+# shellcheck disable=SC2086
+uv pip install $wheel_glob
+uv run --no-sync python -c "import dryoc; assert 'site-packages' in dryoc.__file__, dryoc.__file__"
+uv run --no-sync python -c "import sys, sysconfig, dryoc; assert not (sysconfig.get_config_var('Py_GIL_DISABLED') and sys._is_gil_enabled())"
+uv run --no-sync python -c "import nacl"
+uv run --no-sync pytest -p no:cacheprovider tests