swisspost-evoting-go-poc/Makefile

# Build orchestration for the evote PoC.
#
# The transport-security layer (Ed25519 signatures, X25519 ECDH) is implemented
# in Rust and linked into Go via cgo. `make rust` must run before `go build`,
# because pkg/transportsec links against rust/transportsec/target/release/libtransportsec.a.

RUST_DIR := rust/transportsec
RUST_LIB := $(RUST_DIR)/target/release/libtransportsec.a

.PHONY: all build rust test clean demo

all: build

# Build the Rust static library consumed by cgo.
rust: $(RUST_LIB)

$(RUST_LIB):
	cd $(RUST_DIR) && cargo build --release

# Build the Go binary (requires the Rust lib first).
build: rust
	go build -o evote ./cmd/evote

# Run the full test suite (Rust + Go, including the FFI round-trip).
test: rust
	cd $(RUST_DIR) && cargo test --release
	go test ./...

demo: build
	./evote demo --voters=10 --options=3

clean:
	rm -f evote
	cd $(RUST_DIR) && cargo clean
Due-diligence hardening + Rust transport-security layer Correctness/security review of the whole PoC, with fixes and regression tests. Cryptographic soundness: - mixnet: enforce the multi-exponentiation c_{B_m}=commit(0;0) check that was stubbed out with an empty if — without it a malicious mixer can prove a non-permutation shuffle. - zkp: derive all four Fiat-Shamir challenges via RecursiveHashToZq instead of a biased `hash mod q` (which also capped the challenge space at 256 bits for production-sized groups). Verification honesty: - protocol: VerifyTally now actually calls zkp.VerifySchnorrProof and returns the true aggregate result instead of an unconditional true. - protocol: persist the padded mix input (event.MixInput) so the verifier checks shuffle 0 against the same padding the tally used (fixes false INVALID for N<2). Other correctness: - kdf: length-prefix BuildKDFInfo parts so the info encoding is injective. - math: GqElementFromSquareRoot accepts the valid root q (off-by-one that could panic in HashAndSquare); RandomGqElement samples the full canonical range. - cmd: validate demo --voters/--options instead of panicking on degenerate values. - protocol: use crypto/rand in the demo driver (drop the last math/rand import). Transport security (new): pkg/transportsec exposes Ed25519 signatures and X25519 ECDH — implemented in Rust (rust/transportsec: ed25519-dalek, x25519-dalek), linked into Go via cgo. No RSA. Cross-language conformance test proves the Rust Ed25519 signatures interoperate with Go's crypto/ed25519. Makefile builds the Rust static lib before the Go binary. Tests: added unit/round-trip/tamper coverage for math, hash, elgamal, zkp, mixnet, kdf, returncodes, protocol (end-to-end), and the Rust FFI bridge. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> 2026-07-06 12:42:34 +00:00			`# Build orchestration for the evote PoC.`
			`#`
			`# The transport-security layer (Ed25519 signatures, X25519 ECDH) is implemented`
			# in Rust and linked into Go via cgo. `make rust` must run before `go build`,
			`# because pkg/transportsec links against rust/transportsec/target/release/libtransportsec.a.`

			`RUST_DIR := rust/transportsec`
			`RUST_LIB := $(RUST_DIR)/target/release/libtransportsec.a`

			`.PHONY: all build rust test clean demo`

			`all: build`

			`# Build the Rust static library consumed by cgo.`
			`rust: $(RUST_LIB)`

			`$(RUST_LIB):`
			`cd $(RUST_DIR) && cargo build --release`

			`# Build the Go binary (requires the Rust lib first).`
			`build: rust`
			`go build -o evote ./cmd/evote`

			`# Run the full test suite (Rust + Go, including the FFI round-trip).`
			`test: rust`
			`cd $(RUST_DIR) && cargo test --release`
			`go test ./...`

			`demo: build`
			`./evote demo --voters=10 --options=3`

			`clean:`
			`rm -f evote`
			`cd $(RUST_DIR) && cargo clean`