search

RustCrypto / RSA

RSA implementation in pure Rust
Apache License 2.0
536 stars 146 forks source link

Marvin toolkit container #400

Closed xuganyu96 closed 7 months ago

xuganyu96 commented 9 months ago

This is an attempt to make the Marvin attack analysis more reproducible for RustCrypto/RSA. The Dockerfile and entrypoint script are both rough proofs of concept. It would be great if the maintainers can suggest how we can handle the outputs of the analysis, whether to test rsa1024 and rsa4096, whether this should be part of CI/CD, among other things.

tarcieri commented 9 months ago

This looks fine to me. Will try it out locally.

xuganyu96 commented 9 months ago

@tarcieri @dignifiedquire

This PR is ready for review. The main feature of this PR is a container that packages the Marvin toolkit. See the added README.md for how to build and run the container. Some notable features include:

  1. CLI allows specifying -s <RSA_bits> -n <repeat>
  2. Custom Cargo.toml for the test harness if custom version of RustCrypto/RSA and/or RustCrypto/crypto-bigint is needed
  3. Preserve the generated keys, ciphertexts, and analysis results by copying them into a location that can be mounted into the host file system
tarcieri commented 9 months ago

Cool, I'll try to test it out soon