rbc_validator

Primary and Auxiliary Authors:

• Christopher R. Philabaum
• Christopher B. Coffey
• Duane Booher

rbc_validator is a tool suite written as real-world implementations demonstrating RBC (Response-based Cryptography), both as a drop-in tool and as a benchmark set. This solution does not provide a real-world means of generating the disparate server-client key pairs that need to be corrected (e.g. noisy sources, PUFs, etc.). Instead, the benchmark functionality uses either pseudo-random number generation rather than direct true-random number generation, or a targeted and known constant work by selectively choosing the "halfway point" of a core or rank's workload.

Requirements

Hardware

The codebase relies on SSE, AES-NI, and support for x86 Intrinsics <x86intrin.h> (i.e., GCC 4.5+).

Supported OSes

• Linux (64-bit)
• MacOS X Mojave or Later
• Windows 10 x64 (MSYS2 MinGW-w64)

Dependencies

Linux

If on Debian-based distributions, the following command can be used to install all the requirements:

sudo apt-get install libomp-dev libopenmpi-dev openmpi-bin libgmp-dev libssl-dev

For other distributions, equivalents for OpenMP (dev), OpenMPI (bin, dev), GMP (dev), and OpenSSL (dev) should be installed.

macOS

macOS implementations have been compiled and tested using Github Actions. This was done using Homebrew, alongside Xcode. By default, MPI support is disabled on macoS, but can be manually enabled through -D MPI_ENABLED=On in CMake and installing open-mpi in Homebrew.

This can be replicated by using the following command:

brew install libomp gmp openssl@1.1

Windows 10 x64 (MSYS2 MinGW-w64)

Windows 10 x64 (MSYS MinGW-w64) implementations have been compiled and tested using Github Actions. This was done using MSYS2. By default, MPI support is disabled on Windows and there's no clear path to get it working.

This can be replicated by using the following commands:

First install MSYS2 following the guide verbatim. Then, open in MSYS MinGW 64-bit:

pacman -S --needed mingw-w64-x86_64-cmake gmp-devel openssl-devel

Install

rbc_validator uses CMake to best support cross-platform toolchains as much as possible. Windows is only officially supported through MSYS2.

1. mkdir build
2. cd build
3. Either ccmake .. or cmake .. without curses (or cmake -G "MSYS Makefiles" .. for MSYS2).
4. make
5. 1. Linux, macOS: make install (if you want to install to /usr/local)
   2. Windows: ./scripts/deploy_msys.sh copies rbc_validator and the relevant DLL's to dist/win_x64

Commands

All cryptographic algorithms are selected at runtime using the --mode= option, with the program being split between an OpenMP implementation and an OpenMPI implementations. The OpenMP implementations are designed for single machine use, whereas the OpenMPI ones target HPC platforms.

• rbc_validator ... (OpenMP)
• mpirun rbc_validator_mpi ... (MPI)

There are currently 4 algorithms supported:

• rbc_validator --mode=none (None, Key iteration only)
• rbc_validator --mode=aes (AES256)
• rbc_validator --mode=chacha20 (ChaCha20)
• rbc_validator --mode=ecc (ECC Secp256r1)
• rbc_validator --mode=md5: (MD5)
• rbc_validator --mode=sha1: (SHA1)
• rbc_validator --mode=sha224: (SHA224)
• rbc_validator --mode=sha256: (SHA256)
• rbc_validator --mode=sha384: (SHA384)
• rbc_validator --mode=sha512: (SHA512)
• rbc_validator --mode=sha3-224: (SHA3-224)
• rbc_validator --mode=sha3-256: (SHA3-256)
• rbc_validator --mode=sha3-384: (SHA3-384)
• rbc_validator --mode=sha3-512: (SHA3-512)
• rbc_validator --mode=kang12: (KangrooTwelve, 32 bytes)

Some auxiliary commands also exist for testing the AES-256, ChaCha20, ECC-Secp256r1, and various hash implementations against target keys and their associated ciphers:

• aes256_test
• cipher_test
• ecc_test
• hash_test

Finally, there exists a few Python scripts to generate some test data, as well as utility functions.

Usage

Modes

Direct / Default

This is the default behavior of the main commands. Rather than as a tool for benchmarking, "direct" mode requires that:

None:

1. The original server seed

AES:

1. The original server seed
2. The (potentially) corrupted client cipher
3. A shared message, in this case a 16 byte UUID

ChaCha20:

1. The original server seed
2. The (potentially) corrupted client cipher
3. A shared message, in this case a 16 byte UUID
4. A 16 byte IV (a 12 byte nonce prepended with 4 bytes of 0's)

ECC:

1. The original server seed
2. The (potentially) corrupted client public key (in compressed or uncompressed form)

Hash:

1. The original server private key
2. The (potentially) corrupted client digest

Random

Instead of giving the above parameters, the program will simulate the corruption by first generating a random server key, corrupting it uniformly randomly by the given mismatches, and either generating the disparate ciphers (AES), or disparate public-private key pairs (ECC).

Benchmark

Since the range of possible steps a core / rank might need to take ranges extremely wildly between 0 and 256 choose m, getting useful benchmark is limited by the amount of runs it would take to get a strong statistical average. This is compounded by the fact that as mismatches goes up, the time taken is exponential no matter the amount of compute power thrown at it.

For this reason, Benchmark mode was made. This made behaves similarly to Random mode, but instead of uniformly randomly choosing the location of the mismatches, it uniformly randomly chooses the core / rank. Then, whichever is chosen, the location of the mismatches is strategically chosen to be exactly half of the core's / rank's sequentially load.

Arguments

The main commands have required parameters when not in --random nor --benchmark mode.

• HOST_SEED: The 32 byte host seed to start from, in hexadecimal.
• CLIENT_CIPHER: An n byte cipher produced by the client, in hexadecimal. n is 32 bytes for --mode=aes (specifically AES256) and 32 bytes for --mode=chacha20.
• UUID: A UUID in canonical form (hhhhhhhh-hhhh-hhhh-hhhh-hhhhhhhhhhhh) that's shared between client and host when using --mode=[aes,chacha20].
• UUID: An n byte UUID IV that's shared between client and host when using --mode=[chacha20]. n is 16 bytes for --mode=chacha20
• CLIENT_PUB_KEY: An n bytes public key produced by the client, in hexadecimal. For --mode=ecc (specifically Secp256r1), CLIENT_PUB_KEY can either be in compressed form (n = 33 bytes) or uncompressed form (n = 65 bytes).
• CLIENT_DIGEST: An n-bit digest produced by the client, in hexadecimal. The size of n is required the following hash functions:
  • --mode=md5: n = 16 bytes
  • --mode=sha1: n = 20 bytes
  • --mode=sha224: n = 24 bytes
  • --mode=sha256: n = 32 bytes
  • --mode=sha384: n = 48 bytes
  • --mode=sha512: n = 64 bytes
  • --mode=sha3-224: n = 24 bytes
  • --mode=sha3-256: n = 32 bytes
  • --mode=sha3-384: n = 48 bytes
  • --mode=sha3-512: n = 64 bytes
  • --mode=kang12: n = 32 bytes

All the main commands have (mostly) the same options:

• --usage: An auto-generated simple usage message made by Argp, which is the same if an invalid argument is used.
• -?, --help: The main source of information on how to use each command, the arguments list, their use, default values, and their ranges.
• --mode=[none,aes,chacha20,ecc,md5,sha1,sha224,sha256,sha384,sha512,sha3-224,sha3-256,sha3-384,sha3-512,kang12]: The only required option; necessary to decide which cryptographic function to use.
• -m, --mismatches=value: Give the maximum range of hamming distance / errors to test up to and including. If not given, then the maximum range is the size of the key in bits.
• -a, --all: Ignore any early exit method and have each core / rank carry on through its workload exhaustively.
• -f, --fixed: Only test the given m, rather than doing the more realistic checks of 0, 1, 2, ..., m.
• -s, --subkey=value: The size (in bits) of the key fragment / subkey if using key fragmentation. Only up to the first s bits will be manipulated.
• -b, --benchmark: Forcefully pick the corrupted key to be exactly halfway through a randomly chosen core's / rank's workload. Mutually exclusive with default and -r/--random mode.
• -r, --random: Randomly pick the corrupted key along a "number line" from 0 to _ 256 choose m_.
• -c, --count: Count each corrupted key generated and tested and display at the end.
• -v, --verbose: Produce verbose and benchmarking output to stderr. Otherwise, only the found key is printed to stdout.
• -V, --version: Print the program version.

The OpenMP implementations also allow direct control of the thread count used:

• -t, --threads=count: The number of the threads to use, which defaults to the number of threads reported on the machine.