hf2q 0.1.7

Pure Rust CLI for converting HuggingFace models to hardware-optimized formats and serving them over an OpenAI-compatible API on Apple Silicon
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140

use super::*;

pub(in crate::distribution::update_auth) struct HostileRootProfileCase {
    pub(in crate::distribution::update_auth) label: &'static str,
    pub(in crate::distribution::update_auth) hostile_anchor: Vec<u8>,
    pub(in crate::distribution::update_auth) valid_anchor: Vec<u8>,
    pub(in crate::distribution::update_auth) hostile_successor: Vec<u8>,
}

struct DeclaredTestKey {
    declared_id: String,
    key: sigstore_tuf::Key,
    pair: Ed25519KeyPair,
}

pub(in crate::distribution::update_auth) fn hostile_root_profile_cases(
) -> Vec<HostileRootProfileCase> {
    [
        ("aliased-key-id", HostileKeyMutation::AliasedId),
        (
            "mismatched-keytype-and-scheme",
            HostileKeyMutation::MismatchedKeytype,
        ),
        ("uppercase-public-key", HostileKeyMutation::UppercasePublic),
        (
            "whitespace-wrapped-public-key",
            HostileKeyMutation::WhitespacePublic,
        ),
    ]
    .into_iter()
    .map(|(label, mutation)| hostile_root_profile_case(label, mutation))
    .collect()
}

#[derive(Clone, Copy)]
enum HostileKeyMutation {
    AliasedId,
    MismatchedKeytype,
    UppercasePublic,
    WhitespacePublic,
}

fn hostile_root_profile_case(
    label: &'static str,
    mutation: HostileKeyMutation,
) -> HostileRootProfileCase {
    let old = TestKey::seeded("canonical-old-root", 0xe1);
    let hostile_pair =
        Ed25519KeyPair::from_seed_unchecked(&[0xe2; 32]).expect("fixed hostile key seed");
    let mut hostile_key = sigstore_tuf::Key {
        keytype: "ed25519".to_owned(),
        scheme: "ed25519".to_owned(),
        keyval: sigstore_tuf::KeyVal {
            public: hex::encode(hostile_pair.public_key().as_ref()),
            extra: BTreeMap::new(),
        },
        extra: BTreeMap::new(),
    };
    match mutation {
        HostileKeyMutation::AliasedId => {}
        HostileKeyMutation::MismatchedKeytype => hostile_key.keytype = "rsa".to_owned(),
        HostileKeyMutation::UppercasePublic => {
            hostile_key.keyval.public.make_ascii_uppercase();
        }
        HostileKeyMutation::WhitespacePublic => {
            hostile_key.keyval.public = format!(" {} ", hostile_key.keyval.public);
        }
    }
    let declared_id = if matches!(mutation, HostileKeyMutation::AliasedId) {
        "00".repeat(32)
    } else {
        hostile_key
            .key_id()
            .expect("hostile key still has canonical JSON")
    };
    let hostile = DeclaredTestKey {
        declared_id,
        key: hostile_key,
        pair: hostile_pair,
    };

    let valid_anchor_signed = root_with_declared_key(1, &old.id, &old.key);
    let valid_anchor = envelope(valid_anchor_signed, &[&old]);
    let hostile_anchor_signed = root_with_declared_key(1, &hostile.declared_id, &hostile.key);
    let hostile_anchor = envelope_with_declared_signers(
        hostile_anchor_signed,
        &[(&hostile.declared_id, &hostile.pair)],
    );
    let hostile_successor_signed = root_with_declared_key(2, &hostile.declared_id, &hostile.key);
    let hostile_successor = envelope_with_declared_signers(
        hostile_successor_signed,
        &[(&old.id, &old.pair), (&hostile.declared_id, &hostile.pair)],
    );

    HostileRootProfileCase {
        label,
        hostile_anchor,
        valid_anchor,
        hostile_successor,
    }
}

fn root_with_declared_key(version: u64, declared_id: &str, key: &sigstore_tuf::Key) -> Value {
    let binding = json!({"keyids": [declared_id], "threshold": 1});
    let mut keys = Map::new();
    keys.insert(
        declared_id.to_owned(),
        serde_json::to_value(key).expect("serialize hostile key"),
    );
    json!({
        "_type": "root",
        "consistent_snapshot": false,
        "expires": EXPIRES,
        "keys": keys,
        "roles": {
            "root": binding,
            "snapshot": binding,
            "targets": binding,
            "timestamp": binding
        },
        "spec_version": "1.0.0",
        "version": version
    })
}

fn envelope_with_declared_signers(signed: Value, signers: &[(&str, &Ed25519KeyPair)]) -> Vec<u8> {
    let canonical =
        sigstore_tuf::canonical_json::to_canonical_bytes(&signed).expect("canonical hostile root");
    let signatures: Vec<_> = signers
        .iter()
        .map(|(declared_id, pair)| {
            json!({
                "keyid": declared_id,
                "sig": hex::encode(pair.sign(&canonical).as_ref())
            })
        })
        .collect();
    serde_json::to_vec(&json!({"signatures": signatures, "signed": signed}))
        .expect("serialize hostile root")
}