essamhassan / blind-auth

Chaum–Pedersen based Passwordless Authentication

Blind Auth

Chaum-Pederson Passwordless Authentication

Code structure

.
├── build # docker files
│   ├── prover
│   │   └── Dockerfile
│   └── verifier
│       └── Dockerfile
├── build.rs # protoc generator
├── Cargo.lock
├── Cargo.toml
├── docker-compose.yml # Docker compose setup
├── proto
│   └── blind_auth.proto # Service definition
├── README.md # <- You are here
├── src
│   ├── lib
│   │   ├── common.rs # Common libs between prover and verifier
│   │   ├── prover.rs # Prover libs
│   │   ├── public_params.rs # Public values
│   │   ├── store
│   │   │   ├── models.rs # App models
│   │   │   └── store.rs # In-memory store
│   │   ├── store.rs
│   │   └── verifier.rs # Verifier libs
│   ├── prover.rs # Prover entry point
│   └── verifier.rs # Verifier entry point
└── tests
    └── verifier_tests.rs # verifier tests

Run

Start containers

docker-compose up

Run client flow

• Register

docker exec -it -e RUST_LOG=debug prover ./prover http://verifier:50051 register --client-id="clienttest"

• Login

docker exec -it -e RUST_LOG=debug prover ./prover http://verifier:50051 login --client-id="clienttest"

Test

cargo test

Pending work

• Room for optimization and performance improvement.
• Verifier code need to be more modularized, validation should be decoupled from core logic.
• e2e tests to cover 1) failure use cases 2) malicious users