Skip to content

Argon2 on x86-64: prove complete active-cell filling - #505

Closed
reaperhulk wants to merge 1 commit into
argon2-fill-sourcesfrom
argon2-fill-block
Closed

reaperhulk wants to merge 1 commit into
argon2-fill-sourcesfrom
argon2-fill-block

Conversation

@reaperhulk

Copy link
Copy Markdown
Member

Compose random-word dispatch, reference mapping, compression and the block update into one complete active-cell implementation. Prove the represented matrix becomes exactly Spec.Argon2.fillBlock's matrix and retain the filling allocation, public pointers, callee-saved registers, permissions and MXCSR within the derive memory frame.

Prove the independent-address cache survives the cell update, including its cached block at scratch offset 6144. Connect trace equality to the reviewed filling step's reference log: Argon2i requires no secret equality, and Argon2d/id require only equality of the specified data-dependent reference indices.

Builds on #502. Inline implementation and proofs only; no specification, TCB, public API or generated assembly changes.

Validation: targeted Lean correctness and trace builds, standard-axiom and compiler-override audits, specification-origin audit, Lean import/proof-speed checks, and git diff --check. Full checks run in CI.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant