verify: Valgrind taint, fuzz targets, Kani harnesses and dudect for ORE v2 by coderdan · Pull Request #100 · cipherstash/ore.rs

fix(bit2): refuse malformed lengths in the legacy raw comparator

coderdan

committed

7a4a891

test(fuzz): libFuzzer targets for the ciphertext parsers and comparators

coderdan

committed

b0fe75e

test(ct-taint): Valgrind taint harness for the v2 encryptors

coderdan

committed

b3ecff2

test(ct-dudect): dudect timing benches for the comparators and encryptors

coderdan

committed

b53d30c

ci: verify workflow — Valgrind taint, fuzz targets, Kani harnesses

coderdan

committed

89cc8ed

test(ore-rs): kani harnesses for the pure building blocks

coderdan

committed

add3f0f

test(ore-rs): run the two exhaustive-length Kani harnesses only with kani-full

coderdan

committed

f4d5a1c

test(ct-dudect): make the input pool size configurable

coderdan

committed

a1f3a91

docs(review): dynamic and formal verification results for ORE v2

coderdan

committed

eec298b

bench(prp): criterion bench for the Bit6 PRP builder alone

coderdan

committed

1b5f668

docs(bench): oblivious PRP builder results

coderdan

committed

7a4afd5

harden(compare): latch first differing block in legacy and Bit6 typed comparators; accept zero-block legacy input

coderdan

committed

784bdee

harden(compare): zeroize the latched first-difference copies

coderdan

committed

71a1a19

harden(prp): typed in-domain Symbol; infallible permute; drop taint suppressions

coderdan

committed

9af04d3

ci(verify): run the taint gate on x86_64 and aarch64

coderdan

committed

68ac5ba

fix(ct-dudect): apply DIT in every bench, portably; correct the dudect and taint docs

coderdan

committed

c906e15

refactor(prp): from_stream delegates to one from_stream_with

coderdan

committed

9c848ef

refactor(ct-bench): reuse lemire_draw and the reference builder in the isolation hooks

coderdan

committed

b47add1

test(decompose): prove order preservation across different lengths

coderdan

committed

451dbec

test(fuzz): round-trip Right::from_slice for Bit6 and legacy

coderdan

committed

eda3f20

fix(fuzz.sh): build only the targets being run; run every target even after a crash

coderdan

committed

4b11458

test(prp): prove lemire_draw itself; test every swap of the shipped builders on their targets

coderdan

committed

ffb574b

docs(review): Kani row for cross-length order preservation

coderdan

committed

3c5f285

ci(kani): make the default harness set fit CI; time-limit the job

coderdan

committed

25f327a

docs(dudect): DIT does not remove the prp_build_const_vs_random residual

coderdan

committed

86fcf47

fix(ct-dudect): remove the layout and timer artifacts from the PRP builder benches

coderdan

committed

d774929

docs(dudect): the const-vs-random residual was the harness

coderdan

committed

3edeb5f

docs(dudect): the corrected const-vs-random bench is clean on the M4

coderdan

committed

ba9d03c

fix(chained): refuse oversized raw symbols before scanning them

coderdan

committed

1e9100f

ci(test): run the ct_bench tests

coderdan

committed

24e55a5

ct-taint: refuse a vacuous pass; cover more types and the raw entry points

coderdan

committed

70039d3

ci(test): run the full test suite on aarch64 too

coderdan

committed

9fc1a08

fuzz: check that the raw comparator and the typed Ord agree

coderdan

committed

9569719

chore: update the detached lockfiles to orderable-bytes 0.2

coderdan

committed

09d50ad

docs(dudect): name the measured commit by subject, not SHA

coderdan

committed

2ca0ecc

Navigation Menu

Repository navigation

verify: Valgrind taint, fuzz targets, Kani harnesses and dudect for ORE v2 - #100

verify: Valgrind taint, fuzz targets, Kani harnesses and dudect for ORE v2#100
coderdan merged 35 commits into
feat/ore-v2-chainedfrom
verify/ore-v2-dynamic-evidence

Commits on Oct 12, 2026

fix(bit2): refuse malformed lengths in the legacy raw comparator

test(fuzz): libFuzzer targets for the ciphertext parsers and comparators

test(ct-taint): Valgrind taint harness for the v2 encryptors

test(ct-dudect): dudect timing benches for the comparators and encryptors

ci: verify workflow — Valgrind taint, fuzz targets, Kani harnesses

test(ore-rs): kani harnesses for the pure building blocks

test(ore-rs): run the two exhaustive-length Kani harnesses only with kani-full

test(ct-dudect): make the input pool size configurable

docs(review): dynamic and formal verification results for ORE v2

bench(prp): criterion bench for the Bit6 PRP builder alone

docs(bench): oblivious PRP builder results

harden(compare): latch first differing block in legacy and Bit6 typed comparators; accept zero-block legacy input

harden(compare): zeroize the latched first-difference copies

harden(prp): typed in-domain Symbol; infallible permute; drop taint suppressions

ci(verify): run the taint gate on x86_64 and aarch64

fix(ct-dudect): apply DIT in every bench, portably; correct the dudect and taint docs

refactor(prp): from_stream delegates to one from_stream_with

refactor(ct-bench): reuse lemire_draw and the reference builder in the isolation hooks

test(decompose): prove order preservation across different lengths

test(fuzz): round-trip Right::from_slice for Bit6 and legacy

fix(fuzz.sh): build only the targets being run; run every target even after a crash

test(prp): prove lemire_draw itself; test every swap of the shipped builders on their targets

docs(review): Kani row for cross-length order preservation

ci(kani): make the default harness set fit CI; time-limit the job

docs(dudect): DIT does not remove the prp_build_const_vs_random residual

fix(ct-dudect): remove the layout and timer artifacts from the PRP builder benches

docs(dudect): the const-vs-random residual was the harness

docs(dudect): the corrected const-vs-random bench is clean on the M4

fix(chained): refuse oversized raw symbols before scanning them

ci(test): run the ct_bench tests

ct-taint: refuse a vacuous pass; cover more types and the raw entry points

ci(test): run the full test suite on aarch64 too

fuzz: check that the raw comparator and the typed Ord agree

chore: update the detached lockfiles to orderable-bytes 0.2

docs(dudect): name the measured commit by subject, not SHA