{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":413903417,"defaultBranch":"main","name":"draft-irtf-cfrg-vdaf","ownerLogin":"cfrg","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2021-10-05T16:50:34.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/50178387?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1727478499.0","currentOid":""},"activityList":{"items":[{"before":"530fda494e58076d5b5c6c748b13ca28eb5c420c","after":"70154b0740c22d5b5ba57f9ed606fbf591129a48","ref":"refs/heads/gh-pages","pushedAt":"2024-09-29T01:00:02.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating archive at 2024-09-29T01:00:01Z. [ci skip]","shortMessageHtmlLink":"Script updating archive at 2024-09-29T01:00:01Z. [ci skip]"}},{"before":"09c711fa6ee62be91bb536f78b3a0740719562e0","after":"bc8cce4947d2bb09fb3c91fc22351f8fa9c2f983","ref":"refs/heads/cjpatton/418","pushedAt":"2024-09-27T23:33:52.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cjpatton","name":"Christopher Patton","path":"/cjpatton","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3453007?s=80&v=4"},"commit":{"message":"Add application context string\n\nPropagate changes to the reference code from a recent change that add an\napplication context string to sharding and preparation. Explain the\nintended role of context: disagreement should imply failure to aggregate\na report. However, the affect is different for DAFs and VDAFs, since for\nDAFs there is no explicit signal of rejection; disagreement would\nmanifest as a garbled aggregate result. Point this out.\n\nAlso, note in security considerations that this provides a cushion for\nweak parameters.\n\nFinally, update the order of the context string in the `Daf` input\nparameters to align with the `Vdaf`. The context string comes ahead of\nevery input except for the VDAF verification key.","shortMessageHtmlLink":"Add application context string"}},{"before":"3071ca222811c06c4ab547c5a3bb05ee9928cacd","after":"530fda494e58076d5b5c6c748b13ca28eb5c420c","ref":"refs/heads/gh-pages","pushedAt":"2024-09-27T23:33:31.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from feaa7f8. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from feaa7f8. [ci skip]"}},{"before":"feaa7f8f1fe19ae19609bffaefe711116c8bfea8","after":"09c711fa6ee62be91bb536f78b3a0740719562e0","ref":"refs/heads/cjpatton/418","pushedAt":"2024-09-27T23:33:30.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cjpatton","name":"Christopher Patton","path":"/cjpatton","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3453007?s=80&v=4"},"commit":{"message":"Add application context string\n\nPropagate changes to the reference code from a recent change that add an\napplication context string to sharding and preparation. Explain the\nintended role of context: disagreement should imply failure to aggregate\na report. However, the affect is different for DAFs and VDAFs, since for\nDAFs there is no explicit signal of rejection; disagreement would\nmanifest as a garbled aggregate result. Point this out.\n\nAlso, note in security considerations that this provides a cushion for\nweak parameters.\n\nFinally, update the order of the context string in the `Daf` input\nparameters to align with the `Vdaf`. The context string comes ahead of\nevery input except for the VDAF verification key.","shortMessageHtmlLink":"Add application context string"}},{"before":"45c21ce037c2a06a76f971f553cec71d4b77200d","after":"feaa7f8f1fe19ae19609bffaefe711116c8bfea8","ref":"refs/heads/cjpatton/418","pushedAt":"2024-09-27T23:32:46.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cjpatton","name":"Christopher Patton","path":"/cjpatton","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3453007?s=80&v=4"},"commit":{"message":"Add application context string\n\nPropagate changes to the reference code from a recent change that add an\napplication context string to sharding and preparation. Explain the\nintended role of context: disagreement should imply failure to aggregate\na report. However, the affect is different for DAFs and VDAFs, since for\nDAFs there is no explicit signal of rejection; disagreement would\nmanifest as a garbled aggregate result. Point this out.\n\nAlso, note in security considerations that this provides a cushion for\nweak parameters.","shortMessageHtmlLink":"Add application context string"}},{"before":"f440b2b57746bcfa4717bfbfc11c46f00cfa8d3f","after":"3071ca222811c06c4ab547c5a3bb05ee9928cacd","ref":"refs/heads/gh-pages","pushedAt":"2024-09-27T23:13:09.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from 45c21ce. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from 45c21ce. [ci skip]"}},{"before":"16690837ca0070b6d060f6fa30d6f1215bc893ef","after":"45c21ce037c2a06a76f971f553cec71d4b77200d","ref":"refs/heads/cjpatton/418","pushedAt":"2024-09-27T23:12:28.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cjpatton","name":"Christopher Patton","path":"/cjpatton","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3453007?s=80&v=4"},"commit":{"message":"WIP","shortMessageHtmlLink":"WIP"}},{"before":"990467cc5d4860ee0520d237a277347de192ef6c","after":"f440b2b57746bcfa4717bfbfc11c46f00cfa8d3f","ref":"refs/heads/gh-pages","pushedAt":"2024-09-27T23:09:10.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from 1669083. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from 1669083. [ci skip]"}},{"before":null,"after":"16690837ca0070b6d060f6fa30d6f1215bc893ef","ref":"refs/heads/cjpatton/418","pushedAt":"2024-09-27T23:08:19.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"cjpatton","name":"Christopher Patton","path":"/cjpatton","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3453007?s=80&v=4"},"commit":{"message":"WIP","shortMessageHtmlLink":"WIP"}},{"before":"c24cd4231d25bb6d1779b58dfa85c260b35e806e","after":"17e90c9a0023e6a700d82cde4a0812d440002c1e","ref":"refs/heads/main","pushedAt":"2024-09-27T22:34:04.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"cjpatton","name":"Christopher Patton","path":"/cjpatton","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3453007?s=80&v=4"},"commit":{"message":"poc: Add application context string (*)\n\nWIP: We still need to propagate the changes through the draft and update\nsecurity considerations, in particular the line about weak parameters\nbeing exploitable across tasks.\n\nAdd an application context string, denoted `ctx`, to sharding and\npreparation APIs for DAFs and VDAFs. The intent is to use this for\ndefense-in-depth: by binding execution of a VDAF to its application\n(concretely, in DAP we would set `ctx` to the task ID), we hope that an\nattack on that application does not translate directly to an attack on\nanother application using the same parameters.\n\nThis change is motivated by the possibility of an offline attack against\nthe robustness of some Prio3 variants. The attack is as follows: fix an\ninvalid measurement, then search for measurement shares that derive\njoint randomness that causes the circuit to accept. Once these shares\nare found, they can be used to corrupt any batch that uses the same\nPrio3 parameters.\n\nTo reduce the blast radius of this attack, we can bind `ctx` to the\njoint randomness derivation, thereby ensuring the offline work done by\nthe attacker is only useful to break a single application.\n\nThis change is slightly more general: wherever we compute a domain\nseparation tag in either Prio3 or Poplar1, we append `ctx`. This is a\nmore invasive than necessary, but it's also more conservative.\n\nFinally, we modify XofTurboShake128 and XofFixedKeyAes128 by changing\nthe length prefix for the domain separation tag from a single byte to\ntwo bytes, thereby accommodating larger application context strings.","shortMessageHtmlLink":"poc: Add application context string (*)"}},{"before":"6fb50110d70764ec09b9f0952c5e1da98590a52d","after":"990467cc5d4860ee0520d237a277347de192ef6c","ref":"refs/heads/gh-pages","pushedAt":"2024-09-27T22:31:06.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from fd87fac. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from fd87fac. [ci skip]"}},{"before":"faa25205030e5b011c0364c9f869a5dd9aab5a71","after":"fd87fac3204c3ced64ee86255eaded42289bb33a","ref":"refs/heads/cjpatton/draft-12/context-string","pushedAt":"2024-09-27T22:30:21.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"cjpatton","name":"Christopher Patton","path":"/cjpatton","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3453007?s=80&v=4"},"commit":{"message":"poc: Add application context string (*)\n\nWIP: We still need to propagate the changes through the draft and update\nsecurity considerations, in particular the line about weak parameters\nbeing exploitable across tasks.\n\nAdd an application context string, denoted `ctx`, to sharding and\npreparation APIs for DAFs and VDAFs. The intent is to use this for\ndefense-in-depth: by binding execution of a VDAF to its application\n(concretely, in DAP we would set `ctx` to the task ID), we hope that an\nattack on that application does not translate directly to an attack on\nanother application using the same parameters.\n\nThis change is motivated by the possibility of an offline attack against\nthe robustness of some Prio3 variants. The attack is as follows: fix an\ninvalid measurement, then search for measurement shares that derive\njoint randomness that causes the circuit to accept. Once these shares\nare found, they can be used to corrupt any batch that uses the same\nPrio3 parameters.\n\nTo reduce the blast radius of this attack, we can bind `ctx` to the\njoint randomness derivation, thereby ensuring the offline work done by\nthe attacker is only useful to break a single application.\n\nThis change is slightly more general: wherever we compute a domain\nseparation tag in either Prio3 or Poplar1, we append `ctx`. This is a\nmore invasive than necessary, but it's also more conservative.\n\nFinally, we modify XofTurboShake128 and XofFixedKeyAes128 by changing\nthe length prefix for the domain separation tag from a single byte to\ntwo bytes, thereby accommodating larger application context strings.","shortMessageHtmlLink":"poc: Add application context string (*)"}},{"before":"3603446c24db3a5d211b35a826743588450442a4","after":"6fb50110d70764ec09b9f0952c5e1da98590a52d","ref":"refs/heads/gh-pages","pushedAt":"2024-09-27T22:24:43.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from c24cd42. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from c24cd42. [ci skip]"}},{"before":"db1ea16ad92c69f739e5958cf5cb7f7db2830665","after":null,"ref":"refs/heads/david/idpf-index-changes","pushedAt":"2024-09-27T22:24:01.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"divergentdave","name":"David Cook","path":"/divergentdave","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/181772?s=80&v=4"}},{"before":"fd9fda6fabceecf25b163a8e19d5f7b007c6aafe","after":"c24cd4231d25bb6d1779b58dfa85c260b35e806e","ref":"refs/heads/main","pushedAt":"2024-09-27T22:23:59.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"divergentdave","name":"David Cook","path":"/divergentdave","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/181772?s=80&v=4"},"commit":{"message":"Change handling of IDPF indices (#433)","shortMessageHtmlLink":"Change handling of IDPF indices (#433)"}},{"before":"2c5625de73ae700f710c5af734163ead1a286fe8","after":"3603446c24db3a5d211b35a826743588450442a4","ref":"refs/heads/gh-pages","pushedAt":"2024-09-27T22:06:17.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from db1ea16. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from db1ea16. [ci skip]"}},{"before":"238260bf93fe32de3ea9100532cb2a00a6801272","after":"db1ea16ad92c69f739e5958cf5cb7f7db2830665","ref":"refs/heads/david/idpf-index-changes","pushedAt":"2024-09-27T22:05:33.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"divergentdave","name":"David Cook","path":"/divergentdave","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/181772?s=80&v=4"},"commit":{"message":"Change handling of IDPF indices","shortMessageHtmlLink":"Change handling of IDPF indices"}},{"before":"878a8205f2549b2c8f210f61b6f4818da1dc5493","after":"238260bf93fe32de3ea9100532cb2a00a6801272","ref":"refs/heads/david/idpf-index-changes","pushedAt":"2024-09-27T14:14:48.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"divergentdave","name":"David Cook","path":"/divergentdave","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/181772?s=80&v=4"},"commit":{"message":"Change handling of IDPF indices","shortMessageHtmlLink":"Change handling of IDPF indices"}},{"before":"5f6d52e8df231e132e7d85942c72e48a7ab58958","after":"2c5625de73ae700f710c5af734163ead1a286fe8","ref":"refs/heads/gh-pages","pushedAt":"2024-09-27T14:14:48.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from 878a820. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from 878a820. [ci skip]"}},{"before":"94b17a7a8d63101f32a212753b3e7e839726a282","after":"878a8205f2549b2c8f210f61b6f4818da1dc5493","ref":"refs/heads/david/idpf-index-changes","pushedAt":"2024-09-27T14:13:59.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"divergentdave","name":"David Cook","path":"/divergentdave","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/181772?s=80&v=4"},"commit":{"message":"Add comment","shortMessageHtmlLink":"Add comment"}},{"before":"8d60f80fa37b1bea4fdb7e8f8e3b088aee8603d7","after":"5f6d52e8df231e132e7d85942c72e48a7ab58958","ref":"refs/heads/gh-pages","pushedAt":"2024-09-26T22:13:01.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from 94b17a7. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from 94b17a7. [ci skip]"}},{"before":"6c42f6fb9b464571acaed5cc6510d922b837ef4f","after":"94b17a7a8d63101f32a212753b3e7e839726a282","ref":"refs/heads/david/idpf-index-changes","pushedAt":"2024-09-26T22:12:12.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"divergentdave","name":"David Cook","path":"/divergentdave","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/181772?s=80&v=4"},"commit":{"message":"Review feedback","shortMessageHtmlLink":"Review feedback"}},{"before":"b72d5ff66367023bd9f7bf8de158059b4677a411","after":"8d60f80fa37b1bea4fdb7e8f8e3b088aee8603d7","ref":"refs/heads/gh-pages","pushedAt":"2024-09-26T19:30:21.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from 6c42f6f. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from 6c42f6f. [ci skip]"}},{"before":"231a0413dc2d26c080d1b206bb07417be4df4b78","after":"6c42f6fb9b464571acaed5cc6510d922b837ef4f","ref":"refs/heads/david/idpf-index-changes","pushedAt":"2024-09-26T19:29:38.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"divergentdave","name":"David Cook","path":"/divergentdave","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/181772?s=80&v=4"},"commit":{"message":"Change handling of IDPF indices","shortMessageHtmlLink":"Change handling of IDPF indices"}},{"before":"ca35618f8716bd63eb812a5893604d5155dcfd31","after":"b72d5ff66367023bd9f7bf8de158059b4677a411","ref":"refs/heads/gh-pages","pushedAt":"2024-09-26T19:08:42.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from 231a041. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from 231a041. [ci skip]"}},{"before":null,"after":"231a0413dc2d26c080d1b206bb07417be4df4b78","ref":"refs/heads/david/idpf-index-changes","pushedAt":"2024-09-26T19:07:57.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"divergentdave","name":"David Cook","path":"/divergentdave","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/181772?s=80&v=4"},"commit":{"message":"Change handling of IDPF indices","shortMessageHtmlLink":"Change handling of IDPF indices"}},{"before":"af29a4397a9e4e739a877785b33c910a8481eb2a","after":"ca35618f8716bd63eb812a5893604d5155dcfd31","ref":"refs/heads/gh-pages","pushedAt":"2024-09-26T00:55:33.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating archive at 2024-09-26T00:55:32Z. [ci skip]","shortMessageHtmlLink":"Script updating archive at 2024-09-26T00:55:32Z. [ci skip]"}},{"before":"11b622178bc3c266c301a8a15094f7ed74b874e0","after":"af29a4397a9e4e739a877785b33c910a8481eb2a","ref":"refs/heads/gh-pages","pushedAt":"2024-09-24T00:56:02.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating archive at 2024-09-24T00:56:01Z. [ci skip]","shortMessageHtmlLink":"Script updating archive at 2024-09-24T00:56:01Z. [ci skip]"}},{"before":"48eda1f295614c98d44f80c9a42eb118b453bb27","after":"11b622178bc3c266c301a8a15094f7ed74b874e0","ref":"refs/heads/gh-pages","pushedAt":"2024-09-23T21:41:53.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"Script updating gh-pages from fd9fda6. [ci skip]","shortMessageHtmlLink":"Script updating gh-pages from fd9fda6. [ci skip]"}},{"before":"bb01e528dab1da66c3264347a7c020f2c3403494","after":"fd9fda6fabceecf25b163a8e19d5f7b007c6aafe","ref":"refs/heads/main","pushedAt":"2024-09-23T21:41:13.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"cjpatton","name":"Christopher Patton","path":"/cjpatton","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3453007?s=80&v=4"},"commit":{"message":"Strengthen recommendation about field size\n\nThe security consideration section has the following recommendation for\nchoosing parameters for circuits with joint randomness: \"Field128 is\nRECOMMENDED, but Field64 MAY be used with at least three proofs\".\n\nClarify where this requirement comes from (the base proof system needs\naround 128 bits of security) and strengthen this language somewhat:\n\"Either Field128 or Field64 with three proofs MUST be used\".","shortMessageHtmlLink":"Strengthen recommendation about field size"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"startCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0yOVQwMTowMDowMi4wMDAwMDBazwAAAATDnMuI","endCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0yM1QyMTo0MToxMy4wMDAwMDBazwAAAAS-dw8D"}},"title":"Activity ยท cfrg/draft-irtf-cfrg-vdaf"}