Harden and fix privacypass implementation - #1

Merged

thibmeu merged 35 commits into

mainfrom

thibault-review-1

May 28, 2026

Commits on May 27, 2026

Update README to have links to implemented specification
thibmeu
committed
9a55b73
justfile: remove zsh dependency, use default sh shell
thibmeu
committed
92a90b3
Add Privacy Pass test vectors
thibmeu
committed
42a8904
Validate base64url padding
thibmeu
committed
2855cc6
Fix token challenge encoding
thibmeu
committed
45e87d9
Use compressed P-384 encoding
thibmeu
committed
257779b
Fix VOPRF finalization
thibmeu
committed
8eaba3f
Parse multiple PrivateToken challenges
thibmeu
committed
a1f1f83
Handle empty vector strings
thibmeu
committed
634c009
Assert token response vector parts
thibmeu
committed
30a4f4a
Fix batched request parsing
thibmeu
committed
7cfa5b5
Accept RSA-PSS token keys
thibmeu
committed
8749285
Require RSASSA-PSS token keys
thibmeu
committed
443975e
Use OpenSSL PSS encoding
thibmeu
committed
85f63b7
Use Montgomery RSA blinding
thibmeu
committed
0a8b493
Use constant-time RSA blind signing
thibmeu
committed
efbb564
Validate RSASSA-PSS parameters
thibmeu
committed
ac72119
Validate blind RSA representatives
thibmeu
committed
d59f1ec
Cleanse RSA blinding factors
thibmeu
committed
66c7fc7
Check RSA parameter allocation
thibmeu
committed
2308d7e
Cleanse RSA private exponent
thibmeu
committed
5af286f
Validate component RSA keys
thibmeu
committed
d773663
Ignore build-example/ folder
thibmeu
committed
b2e20ca
Fix token parsing
thibmeu
committed
50b7057
Harden VOPRF verification
thibmeu
committed
16995d5
Fix HTTP auth parsing
thibmeu
committed
608e4be
Validate token provider origin
thibmeu
committed
5a22eb9
Fix build config
thibmeu
committed
a15175d
Add crypto vector tests
thibmeu
committed
cdd5768
Limit Blind RSA profile
thibmeu
committed
3cf51be
Store blinding inverse in standard form, convert to Montgomery in finalize
suhasHere
committed
856bb7e
Add range validation and error checking in blind RSA operations
suhasHere
committed
b75337d
Add DLEQ scalar range validation and NULL safety in VOPRF
suhasHere
committed
c6ff122

Commits on May 28, 2026

Fix MSVC deprecation warning for OpenSSL 3.0 RSA APIs
suhasHere
committed
8e7413f
Fix crypto validation regressions
thibmeu
committed
a761135