-
Notifications
You must be signed in to change notification settings - Fork 59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Ot base implementation from Chou Orlandi with fixes #389
Conversation
Codecov Report
@@ Coverage Diff @@
## master #389 +/- ##
===========================================
Coverage 100.00% 100.00%
- Complexity 3618 3640 +22
===========================================
Files 408 411 +3
Lines 10209 10290 +81
Branches 776 780 +4
===========================================
+ Hits 10209 10290 +81
Flags with carried forward coverage won't be shown. Click here to find out more.
Continue to review full report at Codecov.
|
As discussed in the comments on issue #388 I unfortunately have to reject the PR. |
After more discussion with Claudio Orlandi, I realised that the amount of changes to make the protocol secure are really minimal. Thus I think it still makes sense to merge it. |
Hi, what are the necessary changes? If they are really only small I can implement them. |
In relation to https://eprint.iacr.org/2021/1218 they are minimal. But as mentioned in the comments, there are a few other things that should be added. I think the easiest is if I just do it, since it is fresh in my mind anyway :) |
Ok :) |
@quacktiamauct can you implement the changes I have requested? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There are still a lot of security issues from the previous review that has not been addressed.
I have fixed some of them and explicitly written down the remaining issues and how to fix them
tools/ot/src/main/java/dk/alexandra/fresco/tools/ot/base/AbstractChouOrlandiOT.java
Outdated
Show resolved
Hide resolved
tools/ot/src/main/java/dk/alexandra/fresco/tools/ot/base/AbstractChouOrlandiOT.java
Outdated
Show resolved
Hide resolved
tools/ot/src/main/java/dk/alexandra/fresco/tools/ot/base/AbstractChouOrlandiOT.java
Outdated
Show resolved
Hide resolved
tools/ot/src/main/java/dk/alexandra/fresco/tools/ot/base/BouncyCastleChouOrlandi.java
Outdated
Show resolved
Hide resolved
tools/ot/src/main/java/dk/alexandra/fresco/tools/ot/base/BigIntChouOrlandi.java
Outdated
Show resolved
Hide resolved
demos/distance/src/test/java/dk/alexandra/fresco/demo/TestDistanceDemo.java
Outdated
Show resolved
Hide resolved
tools/ot/src/main/java/dk/alexandra/fresco/tools/ot/base/AbstractChouOrlandiOT.java
Outdated
Show resolved
Hide resolved
tools/ot/src/main/java/dk/alexandra/fresco/tools/ot/base/AbstractChouOrlandiOT.java
Show resolved
Hide resolved
tools/ot/src/main/java/dk/alexandra/fresco/tools/ot/base/ECNaorPinkasOt.java
Outdated
Show resolved
Hide resolved
tools/ot/src/main/java/dk/alexandra/fresco/tools/ot/base/AbstractChouOrlandiOT.java
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Look good. I think the only issue is that there is not full coverage with the current tests. If you could add a couple of tests to ensure this (so the CI/CD won't complain once it gets merged) that would be great
…th the normal NaorPinkas OT where the wrong subgroup is used
Closes #388