Yiming Jing ymjing

Baidu X-Lab is the research lab developing the core security capabilities across Baidu’s products and services. The team focuses on the areas of next-generation security architectures, open-source security infrastructures, ecosystem cooperation and more. X-Lab has made outstanding achievements, which have been recognized globally by Internet software vendors, service providers, as well as international security communities. The X-Lab has released several open source Rust projects: MesaTEE Rust SGX SDK, MesaLock Linux, MesaLink TLS and so on.

http_async_server.cpp

// Copyright (c) 2014 Baidu, Inc.
// 
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
// 
//     http://www.apache.org/licenses/LICENSE-2.0

http_server.cpp

// Copyright (c) 2014 Baidu, Inc.
// 
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
// 
//     http://www.apache.org/licenses/LICENSE-2.0
//

Intel Core i7 8086K, Ubuntu 16.04

Using BRPC SSL unit tests

Block size	16B	64B	256B	1KB	4KB
MesaLink 1.0.0	21 MB/s	82 MB/s	307 MB/s	982 MB/s	2091 MB/s
OpenSSL 1.1.1b	20 MB/s	49 MB/s	229 MB/s	754 MB/s	1901 MB/s

MesaLink是百度安全实验室开发的一个内存安全并兼容OpenSSL的传输层安全(Transport Layer Security, TLS)协议栈。近年来TLS漏洞频发，以2014年的OpenSSL"心血"为代表的内存安全漏洞对业界造成了巨大损失。MesaLink的主要目标是用Rust这样一个保证内存安全的语言，根除TLS协议栈中威胁通信安全性和完整性的内存安全漏洞，减小攻击面且保证攻击面收敛可审计。此外，MesaLink支持跨平台，提供兼容OpenSSL的C API，更可在安卓和libcurl中无缝替换OpenSSL。这极大地降低了开发成本，方便智能设备厂商快速获取安全通信的能力，从而实质性提升智能设备生态的安全性。MesaLink已经在Github上以BSD协议开源，同时MesaLink也是OASES智能终端安全生态联盟的核心开放技术之一；我们欢迎更多合作伙伴的加入，共建安全生态。

内存安全架构原则

为提供完善的功能，并保证强健的安全性，MesaLink 将遵循 Rust SGX SDK 项目中提出的混合代码内存安全架构三原则：

隔离并模块化由非内存安全代码编写的组件，并最小化其代码量；
由非内存安全代码编写的组件不应减弱安全模块的安全性，尤其是公共 API 和公共数据结构；
由非内存安全代码编写的组件需清晰可辨识并且易于更新。

Keybase proof

I hereby claim:

I am ymjing on github.
I am bincat (https://keybase.io/bincat) on keybase.
I have a public key whose fingerprint is 9A39 188C 7A4B B0F4 95B3 87A1 166D 2911 B608 DDA9

To claim this, I am signing this object:

	FROM azul/zulu-openjdk:17 AS builder

	RUN apt-get update \
	&& apt-get install -y --no-install-recommends git libprotobuf-dev \
	&& git clone -b development --depth 1 https://github.com/Grasscutters/Grasscutter /work

	WORKDIR /work

	RUN export GRADLE_OPTS="-Dfile.encoding=utf-8" \
	&& git submodule update --init \

	pragma solidity 0.6.0;
	contract time_capsule {
	string public letter =
	"Dear Riley, "
	" "
	"As you may or may not remember, we're writing this to you from the past. As of "
	"today, you are just one month old and your whole bright future is ahead of you. "
	"We're building this time capsule as a way to remind you of who you were when you "
	"turned 18 and to give you a smile in 2038 on your birthday. "
	" "

	[package]
	name = "brpc_server_demo"
	version = "0.1.0"
	edition = "2018"
	build = "build.rs"

	[dependencies]
	brpc-sys = { path = "../brpc-sys" }
	cc = "1.0.37"

	-----BEGIN CERTIFICATE-----
	MIIBlzCCAT2gAwIBAgIBezAKBggqgRzPVQGDdTAcMRowGAYDVQQDDBFwb255dG93
	biBFQ0RTQSBDQTAeFw0xODEwMzEyMjM5MjBaFw0yODEwMjgyMjM5MjBaMC4xLDAq
	BgNVBAMMI3Bvbnl0b3duIEVDRFNBIGxldmVsIDIgaW50ZXJtZWRpYXRlMFkwEwYH
	KoZIzj0CAQYIKoEcz1UBgi0DQgAEtX14QC2vgtRY0LStwf3twD2GEY31WSoUvFwz
	p8v6TEg7cKIK0tL6vre7+VpDvderu6BfHHwUSPhc2vC1xgy8N6NeMFwwHQYDVR0O
	BBYEFONwGAhAdN54F6oXJ3zgDtMEAVTlMCAGA1UdJQEB/wQWMBQGCCsGAQUFBwMB
	BggrBgEFBQcDAjAMBgNVHRMEBTADAQH/MAsGA1UdDwQEAwIB/jAKBggqgRzPVQGD
	dQNIADBFAiBv5hx95PjodlJnYSJmn42eZXpP51DE5Ef7bn42GGAKjAIhALUhyNW+
	zDNbcjHspcU524DIMw1G1fDeo0kHzjSZuOcJ