mirror of
https://github.com/saymrwulf/swisspost-evoting-go-poc.git
synced 2026-07-23 19:32:29 +00:00
saymrwulf
ec4be74e17
Correctness/security review of the whole PoC, with fixes and regression tests.
Cryptographic soundness:
- mixnet: enforce the multi-exponentiation c_{B_m}=commit(0;0) check that was
stubbed out with an empty if — without it a malicious mixer can prove a
non-permutation shuffle.
- zkp: derive all four Fiat-Shamir challenges via RecursiveHashToZq instead of
a biased `hash mod q` (which also capped the challenge space at 256 bits for
production-sized groups).
Verification honesty:
- protocol: VerifyTally now actually calls zkp.VerifySchnorrProof and returns
the true aggregate result instead of an unconditional true.
- protocol: persist the padded mix input (event.MixInput) so the verifier checks
shuffle 0 against the same padding the tally used (fixes false INVALID for N<2).
Other correctness:
- kdf: length-prefix BuildKDFInfo parts so the info encoding is injective.
- math: GqElementFromSquareRoot accepts the valid root q (off-by-one that could
panic in HashAndSquare); RandomGqElement samples the full canonical range.
- cmd: validate demo --voters/--options instead of panicking on degenerate values.
- protocol: use crypto/rand in the demo driver (drop the last math/rand import).
Transport security (new): pkg/transportsec exposes Ed25519 signatures and X25519
ECDH — implemented in Rust (rust/transportsec: ed25519-dalek, x25519-dalek),
linked into Go via cgo. No RSA. Cross-language conformance test proves the Rust
Ed25519 signatures interoperate with Go's crypto/ed25519. Makefile builds the
Rust static lib before the Go binary.
Tests: added unit/round-trip/tamper coverage for math, hash, elgamal, zkp,
mixnet, kdf, returncodes, protocol (end-to-end), and the Rust FFI bridge.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
34 lines
893 B
Makefile
34 lines
893 B
Makefile
# Build orchestration for the evote PoC.
|
|
#
|
|
# The transport-security layer (Ed25519 signatures, X25519 ECDH) is implemented
|
|
# in Rust and linked into Go via cgo. `make rust` must run before `go build`,
|
|
# because pkg/transportsec links against rust/transportsec/target/release/libtransportsec.a.
|
|
|
|
RUST_DIR := rust/transportsec
|
|
RUST_LIB := $(RUST_DIR)/target/release/libtransportsec.a
|
|
|
|
.PHONY: all build rust test clean demo
|
|
|
|
all: build
|
|
|
|
# Build the Rust static library consumed by cgo.
|
|
rust: $(RUST_LIB)
|
|
|
|
$(RUST_LIB):
|
|
cd $(RUST_DIR) && cargo build --release
|
|
|
|
# Build the Go binary (requires the Rust lib first).
|
|
build: rust
|
|
go build -o evote ./cmd/evote
|
|
|
|
# Run the full test suite (Rust + Go, including the FFI round-trip).
|
|
test: rust
|
|
cd $(RUST_DIR) && cargo test --release
|
|
go test ./...
|
|
|
|
demo: build
|
|
./evote demo --voters=10 --options=3
|
|
|
|
clean:
|
|
rm -f evote
|
|
cd $(RUST_DIR) && cargo clean
|