Skip to content

Add Phase04 and Phase05 benchmark suites - #3

Open
quantumshiro wants to merge 3 commits into
NyxFoundation:mainfrom
quantumshiro:main
Open

Add Phase04 and Phase05 benchmark suites#3
quantumshiro wants to merge 3 commits into
NyxFoundation:mainfrom
quantumshiro:main

Conversation

@quantumshiro

Copy link
Copy Markdown
Contributor

Summary

Adds the Phase04 and Phase05 benchmark suites on top of the existing Phase01-03 benchmark work.

  • Phase04 active validation for padding-oracle and HMAC timing-leak behavior
  • Phase05 operational robustness for rate limits, transient failures, and noisy secure timing controls
  • Ground truth, report schemas, scoring specs, runner integration, fixture endpoints, and tests
  • Documentation updates for the Phase01-05 benchmark rollout

Validation

  • uv run --extra dev ruff check src/bbci/phase04.py src/bbci/phase05.py benchmarks/runner.py benchmarks/scoring.py benchmarks/servers/vulnerable_app.py benchmarks/test_servers.py tests/test_phase04.py tests/test_phase05.py
  • uv run --extra dev pytest tests/test_phase01.py tests/test_phase02.py tests/test_phase03.py tests/test_phase04.py tests/test_phase05.py tests/test_models.py -q
  • uv run --extra dev pytest benchmarks/test_servers.py -q
  • uv run python -m benchmarks.runner --target http://localhost:9000 --suite phase04 --report benchmarks/results
  • uv run python -m benchmarks.runner --target http://localhost:9000 --suite phase05 --report benchmarks/results

Local Phase04 and Phase05 benchmark runs both reported 100% precision, recall, and F1 against the benchmark server.

…entation

- Introduced Phase04 benchmark specification for active validation of cryptographic vulnerabilities, including padding oracle and timing leak tests.
- Added Phase05 benchmark specification focusing on operational robustness under constraints and noise.
- Implemented Phase04 and Phase05 scanners with methods for validating padding oracle and timing leak vulnerabilities.
- Created JSON schemas for Phase05 report structure.
- Developed tests for Phase04 and Phase05 functionalities, including validation and scoring mechanisms.
- Established evidence requirements and scoring metrics for both benchmarks to ensure compliance and accuracy in reporting.
…hmark

# Conflicts:
#	benchmarks/ground_truth.yaml
#	benchmarks/phase04-report.schema.json
#	benchmarks/phase04-scoring-spec.md
#	benchmarks/phase04-spec.md
#	benchmarks/runner.py
#	benchmarks/scoring.py
#	src/bbci/phase04.py
#	tests/test_phase04.py
Add Phase04 and Phase05 benchmark specifications, scoring, and implem…
@quantumshiro
quantumshiro marked this pull request as ready for review May 7, 2026 13:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant