mirror of
https://github.com/saymrwulf/proof-aware-crypto-tooling-agent.git
synced 2026-09-04 20:03:40 +00:00
mrwulf
16040b79f5
Fifth quorum member, first post-quantum one: verifies an SLH-DSA-SHA2-128s signature by calling slh_verify_128s, the extraction root the eleven fips205 certificates cover (apex fips205.slh_verify_128s_accepts_iff). Verify-only like the other four: quorum members judge, they never sign. Build discipline, because "built from the proven source" is a claim that has to survive a hostile reader: build-verify-slhdsa.sh REFUSES to build if the pinned checkout is dirty or at any commit other than a3ce8e8, exports the pinned commit via git archive (never a working copy), applies expose-mono.patch to that scratch copy, and then DIFFS the patched verify_mono.rs against the pinned one, aborting if any existing line changed rather than being appended. The patch is a visibility keyword plus its doc comment (the crate denies missing_docs, so pub mod alone does not compile) and one appended argument-assembly function whose body is the crate's own test helper. The extraction root is provably untouched. A provenance sidecar lands beside the binary: source commit, patch hash, main.rs hash, rustc, and a not_covered field naming what no certificate reaches — M-prime assembly (including the pure/prehash domain-separator byte), hex/file IO, the compiler; signing and keygen out of scope entirely. Demonstrated against OpenSSL 3.5.5 on a throwaway key: valid signature OK both ways, wrong message INVALID, corrupted signature INVALID. The agreement is itself a finding — this binary assembles M' = 0x00 || 0x00 || payload (pure variant, empty context) and OpenSSL evidently does the same. Convention matches the other members: template + main.rs + patch + build script tracked; rendered Cargo.toml, lock, target/ and the .build-slhdsa scratch tree ignored. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
28 lines
541 B
Text
28 lines
541 B
Text
.venv/
|
|
.pacta/
|
|
.pacta-*/
|
|
.pytest_cache/
|
|
.pytest-tmp/
|
|
.tmp/
|
|
artifacts*/
|
|
repos/
|
|
provider/out/
|
|
provider/state/
|
|
__pycache__/
|
|
*.py[cod]
|
|
*.egg-info/
|
|
.lake/
|
|
*.olean
|
|
*.ilean
|
|
dogfood/state/
|
|
dogfood/pacta-verified-verify/target/
|
|
dogfood/pacta-verified-verify/Cargo.toml
|
|
dogfood/pacta-verified-verify/Cargo.lock
|
|
dogfood/quorum/*/Cargo.toml
|
|
dogfood/quorum/*/Cargo.lock
|
|
dogfood/quorum/*/target/
|
|
dogfood/state/quorum/
|
|
paper/eprint-submission.md
|
|
dogfood/quorum/.build-slhdsa/
|
|
dogfood/quorum/verify-slhdsa/Cargo.toml
|
|
dogfood/quorum/verify-slhdsa/Cargo.lock
|