Repository navigation
spec(port): port the padding timing side-channel guard (Refs #8884) - #9749
Closed
dmitrii-f-t27 wants to merge 2 commits into
Closed
dmitrii-f-t27 wants to merge 2 commits into
dmitrii-f-t27 wants to merge 2 commits into
Conversation
…#8884) The twenty-fifth W2 target of the CR-CHAT-04 ring tracker: the constant-time padding rules - the batch ceiling, then per measurement the zero-duration probe, the duration floor and ceiling and the repeated-op-id scan, then over the whole batch the variance ceiling (widest minus narrowest, checked only with two or more measurements) - as the D5 verdict with every payload field, the original's rule order, and all ten PTSC tests transcribed plus helper and rule-order tests. The BTreeSet dedup becomes a scan over the visited measurements; the min/max tracking stays the original's u64 arithmetic, the saturating subtraction guarded explicitly. Checks (conventions 0-14): t27b test 12 passed 0 failed; t27c test-report 12/12, 0 vacuous; gen-rust output compiles under rustc; coverage Untested 0; ASCII only; seal saved, all hashes MATCH;
Contributor
Author
|
Merge request for the gHashTag merger: steward READY (required all SUCCESS — validate, check-linked-issue, parse-ratchet, t27b-native-linux, t27b-native-macos; the red ones are non-required per Q16 and red on master too). Ledger row included; one-line rebase if the earlier lane PRs land first — I take it on request. |
This was referenced Oct 17, 2026
Merged
Merged
Merged
…ave2-x # Conflicts: # docs/reports/t27b_expectations.json
Contributor
Author
|
Superseded by #10175: the remaining CR-CHAT targets now land as one port-wave batch per specs/policy/pr_budget.t27 (#10067/#10074), which asks for one PR per ring batch instead of one per file. The spec body, seal and ledger row in this PR are unchanged there; the batch also carries one self-consistent duplicate-body bless. Closing this one-file PR keeps the merge queue and the Actions queue small. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Refs #8884 (CR-CHAT-04 ring tracker). Parent epic: gHashTag/trios#1812 (W2, own lane, T-PORT). Twenty-fifth W2 target delivered: the constant-time padding rules — batch ceiling (1024), per-measurement zero-duration probe, duration floor (100 µs) / ceiling (10000 µs), repeated-op-id scan ([32]u8), then the batch variance ceiling (widest minus narrowest ≤ 1000, checked only with ≥ 2 measurements; boundary 1000 admitted) — D5 verdict carrying idx / got / bound / got64 / bound64 for every variant, original rule order, all ten PTSC tests transcribed plus helper and rule-order tests (12 total, 0 vacuous). BTreeSet → visited-scan; min/max tracking in u64 with the saturating subtraction guarded explicitly. t27b 12/12 native; t27c 12/12; gen-rust compiles under rustc (0 errors, 0 &'static str, 0 Vec<const); coverage Untested 0; seal all hashes MATCH; ledger row included (pass, non-pass untouched). Dedup checked. Sequencing: one-line ledger rebase if the earlier lane PRs land first — I take it on request.