flwr-nightly 1.23.0.dev20251006__tar.gz → 1.23.0.dev20251007__tar.gz

{flwr_nightly-1.23.0.dev20251006 → flwr_nightly-1.23.0.dev20251007}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: flwr-nightly
-Version: 1.23.0.dev20251006
+Version: 1.23.0.dev20251007
 Summary: Flower: A Friendly Federated AI Framework
 License: Apache-2.0
 Keywords: Artificial Intelligence,Federated AI,Federated Analytics,Federated Evaluation,Federated Learning,Flower,Machine Learning

{flwr_nightly-1.23.0.dev20251006 → flwr_nightly-1.23.0.dev20251007}/py/flwr/client/grpc_rere_client/client_interceptor.py

@@ -23,10 +23,7 @@ from google.protobuf.message import Message as GrpcMessage
 
 from flwr.common import now
 from flwr.common.constant import PUBLIC_KEY_HEADER, SIGNATURE_HEADER, TIMESTAMP_HEADER
-from flwr.common.secure_aggregation.crypto.symmetric_encryption import (
-    public_key_to_bytes,
-    sign_message,
-)
+from flwr.supercore.primitives.asymmetric import public_key_to_bytes, sign_message
 
 
 class AuthenticateClientInterceptor(grpc.UnaryUnaryClientInterceptor):  # type: ignore

{flwr_nightly-1.23.0.dev20251006 → flwr_nightly-1.23.0.dev20251007}/py/flwr/client/grpc_rere_client/connection.py

@@ -36,9 +36,6 @@ from flwr.common.inflatable_protobuf_utils import (
 from flwr.common.logger import log
 from flwr.common.message import Message, remove_content_from_message
 from flwr.common.retry_invoker import RetryInvoker, _wrap_stub
-from flwr.common.secure_aggregation.crypto.symmetric_encryption import (
-    generate_key_pairs,
-)
 from flwr.common.serde import message_from_proto, message_to_proto, run_from_proto
 from flwr.common.typing import Fab, Run
 from flwr.proto.fab_pb2 import GetFabRequest, GetFabResponse  # pylint: disable=E0611
@@ -58,6 +55,7 @@ from flwr.proto.heartbeat_pb2 import (  # pylint: disable=E0611
 from flwr.proto.message_pb2 import ObjectTree  # pylint: disable=E0611
 from flwr.proto.node_pb2 import Node  # pylint: disable=E0611
 from flwr.proto.run_pb2 import GetRunRequest, GetRunResponse  # pylint: disable=E0611
+from flwr.supercore.primitives.asymmetric import generate_key_pairs
 
 from .client_interceptor import AuthenticateClientInterceptor
 from .grpc_adapter import GrpcAdapter

{flwr_nightly-1.23.0.dev20251006 → flwr_nightly-1.23.0.dev20251007}/py/flwr/client/mod/secure_aggregation/secaggplus_mod.py

@@ -35,14 +35,9 @@ from flwr.common.constant import MessageType
 from flwr.common.logger import log
 from flwr.common.secure_aggregation.crypto.shamir import create_shares
 from flwr.common.secure_aggregation.crypto.symmetric_encryption import (
-    bytes_to_private_key,
-    bytes_to_public_key,
     decrypt,
     encrypt,
-    generate_key_pairs,
     generate_shared_key,
-    private_key_to_bytes,
-    public_key_to_bytes,
 )
 from flwr.common.secure_aggregation.ndarrays_arithmetic import (
     factor_combine,
@@ -64,6 +59,13 @@ from flwr.common.secure_aggregation.secaggplus_utils import (
     share_keys_plaintext_separate,
 )
 from flwr.common.typing import ConfigRecordValues
+from flwr.supercore.primitives.asymmetric import (
+    bytes_to_private_key,
+    bytes_to_public_key,
+    generate_key_pairs,
+    private_key_to_bytes,
+    public_key_to_bytes,
+)
 
 
 @dataclass

flwr_nightly-1.23.0.dev20251007/py/flwr/common/secure_aggregation/crypto/symmetric_encryption.py

@@ -0,0 +1,76 @@
+# Copyright 2025 Flower Labs GmbH. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# ==============================================================================
+"""Symmetric encryption."""
+
+
+import base64
+
+from cryptography.exceptions import InvalidSignature
+from cryptography.fernet import Fernet
+from cryptography.hazmat.primitives import hashes, hmac
+from cryptography.hazmat.primitives.asymmetric import ec
+from cryptography.hazmat.primitives.kdf.hkdf import HKDF
+
+
+def generate_shared_key(
+    private_key: ec.EllipticCurvePrivateKey, public_key: ec.EllipticCurvePublicKey
+) -> bytes:
+    """Generate a shared key from a private key (i.e., a secret key) and a public key.
+
+    Generate shared key by exchange function and key derivation function Key derivation
+    function is needed to obtain final shared key of exactly 32 bytes
+    """
+    # Generate a 32 byte urlsafe(for fernet) shared key
+    # from own private key and another public key
+    shared_key = private_key.exchange(ec.ECDH(), public_key)
+    derived_key = HKDF(
+        algorithm=hashes.SHA256(),
+        length=32,
+        salt=None,
+        info=None,
+    ).derive(shared_key)
+    return base64.urlsafe_b64encode(derived_key)
+
+
+def encrypt(key: bytes, plaintext: bytes) -> bytes:
+    """Encrypt plaintext using 32-byte key with Fernet."""
+    # The input key must be url safe
+    fernet = Fernet(key)
+    return fernet.encrypt(plaintext)
+
+
+def decrypt(key: bytes, ciphertext: bytes) -> bytes:
+    """Decrypt ciphertext using 32-byte key with Fernet."""
+    # The input key must be url safe
+    fernet = Fernet(key)
+    return fernet.decrypt(ciphertext)
+
+
+def compute_hmac(key: bytes, message: bytes) -> bytes:
+    """Compute hmac of a message using key as hash."""
+    computed_hmac = hmac.HMAC(key, hashes.SHA256())
+    computed_hmac.update(message)
+    return computed_hmac.finalize()
+
+
+def verify_hmac(key: bytes, message: bytes, hmac_value: bytes) -> bool:
+    """Verify hmac of a message using key as hash."""
+    computed_hmac = hmac.HMAC(key, hashes.SHA256())
+    computed_hmac.update(message)
+    try:
+        computed_hmac.verify(hmac_value)
+        return True
+    except InvalidSignature:
+        return False

{flwr_nightly-1.23.0.dev20251006 → flwr_nightly-1.23.0.dev20251007}/py/flwr/server/app.py

@@ -59,9 +59,6 @@ from flwr.common.event_log_plugin import EventLogWriterPlugin
 from flwr.common.exit import ExitCode, flwr_exit, register_signal_handlers
 from flwr.common.grpc import generic_create_grpc_server
 from flwr.common.logger import log
-from flwr.common.secure_aggregation.crypto.symmetric_encryption import (
-    public_key_to_bytes,
-)
 from flwr.proto.fleet_pb2_grpc import (  # pylint: disable=E0611
     add_FleetServicer_to_server,
 )
@@ -70,6 +67,7 @@ from flwr.server.fleet_event_log_interceptor import FleetEventLogInterceptor
 from flwr.supercore.ffs import FfsFactory
 from flwr.supercore.grpc_health import add_args_health, run_health_server_grpc_no_tls
 from flwr.supercore.object_store import ObjectStoreFactory
+from flwr.supercore.primitives.asymmetric import public_key_to_bytes
 from flwr.superlink.artifact_provider import ArtifactProvider
 from flwr.superlink.auth_plugin import ControlAuthnPlugin, ControlAuthzPlugin
 from flwr.superlink.servicer.control import run_control_api_grpc

{flwr_nightly-1.23.0.dev20251006 → flwr_nightly-1.23.0.dev20251007}/py/flwr/server/superlink/fleet/grpc_rere/server_interceptor.py

@@ -29,15 +29,12 @@ from flwr.common.constant import (
     TIMESTAMP_HEADER,
     TIMESTAMP_TOLERANCE,
 )
-from flwr.common.secure_aggregation.crypto.symmetric_encryption import (
-    bytes_to_public_key,
-    verify_signature,
-)
 from flwr.proto.fleet_pb2 import (  # pylint: disable=E0611
     CreateNodeRequest,
     CreateNodeResponse,
 )
 from flwr.server.superlink.linkstate import LinkStateFactory
+from flwr.supercore.primitives.asymmetric import bytes_to_public_key, verify_signature
 
 MIN_TIMESTAMP_DIFF = -SYSTEM_TIME_TOLERANCE
 MAX_TIMESTAMP_DIFF = TIMESTAMP_TOLERANCE + SYSTEM_TIME_TOLERANCE

{flwr_nightly-1.23.0.dev20251006 → flwr_nightly-1.23.0.dev20251007}/py/flwr/server/workflow/secure_aggregation/secaggplus_workflow.py

@@ -35,8 +35,6 @@ from flwr.common import (
 )
 from flwr.common.secure_aggregation.crypto.shamir import combine_shares
 from flwr.common.secure_aggregation.crypto.symmetric_encryption import (
-    bytes_to_private_key,
-    bytes_to_public_key,
     generate_shared_key,
 )
 from flwr.common.secure_aggregation.ndarrays_arithmetic import (
@@ -56,6 +54,10 @@ from flwr.common.secure_aggregation.secaggplus_utils import pseudo_rand_gen
 from flwr.server.client_proxy import ClientProxy
 from flwr.server.compat.legacy_context import LegacyContext
 from flwr.server.grid import Grid
+from flwr.supercore.primitives.asymmetric import (
+    bytes_to_private_key,
+    bytes_to_public_key,
+)
 
 from ..constant import MAIN_CONFIGS_RECORD, MAIN_PARAMS_RECORD
 from ..constant import Key as WorkflowKey

flwr_nightly-1.23.0.dev20251007/py/flwr/supercore/primitives/__init__.py

@@ -0,0 +1,15 @@
+# Copyright 2025 Flower Labs GmbH. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# ==============================================================================
+"""Cryptographic primitives for the Flower infrastructure."""

flwr_nightly-1.23.0.dev20251006/py/flwr/common/secure_aggregation/crypto/symmetric_encryption.py → flwr_nightly-1.23.0.dev20251007/py/flwr/supercore/primitives/asymmetric.py

@@ -12,17 +12,14 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 # ==============================================================================
-"""Symmetric encryption."""
+"""Asymmetric cryptography utilities."""
 
 
-import base64
 from typing import cast
 
 from cryptography.exceptions import InvalidSignature
-from cryptography.fernet import Fernet
-from cryptography.hazmat.primitives import hashes, hmac, serialization
+from cryptography.hazmat.primitives import hashes, serialization
 from cryptography.hazmat.primitives.asymmetric import ec
-from cryptography.hazmat.primitives.kdf.hkdf import HKDF
 
 
 def generate_key_pairs() -> (
@@ -67,58 +64,6 @@ def bytes_to_public_key(public_key_bytes: bytes) -> ec.EllipticCurvePublicKey:
     )
 
 
-def generate_shared_key(
-    private_key: ec.EllipticCurvePrivateKey, public_key: ec.EllipticCurvePublicKey
-) -> bytes:
-    """Generate a shared key from a private key (i.e., a secret key) and a public key.
-
-    Generate shared key by exchange function and key derivation function Key derivation
-    function is needed to obtain final shared key of exactly 32 bytes
-    """
-    # Generate a 32 byte urlsafe(for fernet) shared key
-    # from own private key and another public key
-    shared_key = private_key.exchange(ec.ECDH(), public_key)
-    derived_key = HKDF(
-        algorithm=hashes.SHA256(),
-        length=32,
-        salt=None,
-        info=None,
-    ).derive(shared_key)
-    return base64.urlsafe_b64encode(derived_key)
-
-
-def encrypt(key: bytes, plaintext: bytes) -> bytes:
-    """Encrypt plaintext using 32-byte key with Fernet."""
-    # The input key must be url safe
-    fernet = Fernet(key)
-    return fernet.encrypt(plaintext)
-
-
-def decrypt(key: bytes, ciphertext: bytes) -> bytes:
-    """Decrypt ciphertext using 32-byte key with Fernet."""
-    # The input key must be url safe
-    fernet = Fernet(key)
-    return fernet.decrypt(ciphertext)
-
-
-def compute_hmac(key: bytes, message: bytes) -> bytes:
-    """Compute hmac of a message using key as hash."""
-    computed_hmac = hmac.HMAC(key, hashes.SHA256())
-    computed_hmac.update(message)
-    return computed_hmac.finalize()
-
-
-def verify_hmac(key: bytes, message: bytes, hmac_value: bytes) -> bool:
-    """Verify hmac of a message using key as hash."""
-    computed_hmac = hmac.HMAC(key, hashes.SHA256())
-    computed_hmac.update(message)
-    try:
-        computed_hmac.verify(hmac_value)
-        return True
-    except InvalidSignature:
-        return False
-
-
 def sign_message(private_key: ec.EllipticCurvePrivateKey, message: bytes) -> bytes:
     """Sign a message using the provided EC private key.
 

{flwr_nightly-1.23.0.dev20251006 → flwr_nightly-1.23.0.dev20251007}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "poetry.core.masonry.api"
 
 [tool.poetry]
 name = "flwr-nightly"
-version = "1.23.0.dev20251006"
+version = "1.23.0.dev20251007"
 description = "Flower: A Friendly Federated AI Framework"
 license = "Apache-2.0"
 authors = ["The Flower Authors <hello@flower.ai>"]