[rust] update core

.github/workflows/rust-fuzz-core.yml

@@ -0,0 +1,37 @@
+name: "Fuzz (rust/core)"
+
+on:
+    workflow_dispatch:
+    schedule:
+        # Weekly (Sunday 00:00 UTC)
+        - cron: "0 0 * * 0"
+
+permissions:
+    contents: read
+
+jobs:
+    fuzz:
+        runs-on: ubuntu-latest
+        steps:
+            - name: Checkout code
+              uses: actions/checkout@v4
+
+            - name: Install nightly toolchain
+              uses: dtolnay/rust-toolchain@nightly
+
+            - name: Cache
+              uses: actions/cache@v4
+              with:
+                  path: |
+                      ~/.cargo/registry
+                      ~/.cargo/git
+                      rust/core/target
+                      rust/core/fuzz/target
+                  key: ${{ runner.os }}-cargo-fuzz-${{ hashFiles('rust/core/Cargo.lock') }}
+
+            - name: Install cargo-fuzz
+              run: cargo +nightly install cargo-fuzz
+
+            - name: Run fuzz target (secretbox)
+              working-directory: rust/core
+              run: cargo +nightly fuzz run secretbox -- -max_total_time=300

.gitignore

@@ -7,3 +7,12 @@
 
 # Ignore CLAUDE.local.md files anywhere in the repository
 CLAUDE.local.md
+
+# Local cargo config / per-dev exports
+.cargo/
+!rust/.cargo/
+!rust/.cargo/config.toml
+rust/cli/exports/
+
+# Node
+node_modules/

rust/.cargo/config.toml

@@ -0,0 +1,2 @@
+[target.'cfg(target_arch = "aarch64")']
+rustflags = ["--cfg", "chacha20_force_neon"]

rust/README.md

@@ -48,11 +48,26 @@ rust/
 │   ├── Cargo.toml
 │   └── Cargo.lock
 │
-└── core/                   # Pure Rust business logic
+├── core/                   # Pure Rust business logic
+│   ├── src/
+│   │   ├── lib.rs
+│   │   └── urls.rs
+│   └── Cargo.toml          # crate name: ente-core
+│
+└── validation/             # Crypto validation + benchmarks vs libsodium
     ├── src/
-    │   ├── lib.rs
-    │   └── urls.rs
-    └── Cargo.toml          # crate name: ente-core
+    │   ├── main.rs
+    │   └── bin/
+    │       └── bench.rs
+    ├── wasm/               # WASM bench bindings
+    │   ├── src/
+    │   │   └── lib.rs
+    │   └── Cargo.toml      # crate name: ente-validation-wasm
+    ├── js/                 # JS + WASM benchmarks
+    │   ├── bench-wasm.mjs
+    │   ├── bench-wasm-browser.mjs
+    │   └── bench-wasm-browser.html
+    └── Cargo.toml          # crate name: ente-validation
 
 web/packages/wasm/          # WASM bindings (lives in web workspace)
 ├── src/
@@ -80,6 +95,7 @@ mobile/apps/photos/rust/    # Photos app-specific FRB bindings
 **Crates:**
 
 - `ente-core` - shared business logic (pure Rust, no FFI)
+- `ente-validation` - validation + benchmarks vs libsodium
 - `ente-wasm` - wasm-bindgen wrappers for web
 - `ente_rust` - shared FRB wrappers for mobile (Dart class: `EnteRust`)
 - `ente_photos_rust` - Photos app-specific FRB (Dart class: `EntePhotosRust`)
@@ -128,6 +144,39 @@ cargo build      # build
 cargo test       # test
 ```
 
+**ente-validation (rust/validation/):**
+
+```sh
+cargo run -p ente-validation --bin ente-validation    # validation suite
+cargo run -p ente-validation --bin bench              # benchmarks (debug)
+cargo run -p ente-validation --bin bench --release    # benchmarks (release)
+```
+
+**ente-validation wasm benchmarks (rust/validation/):**
+
+Node (rust-core wasm vs libsodium-wrappers-sumo wasm):
+
+```sh
+wasm-pack build --target nodejs rust/validation/wasm  # wasm bench build
+cd rust/validation/js
+npm install
+node bench-wasm.mjs                                   # wasm benchmarks
+```
+
+Browser (Chrome):
+
+```sh
+wasm-pack build --target web rust/validation/wasm
+cd rust/validation
+python3 -m http.server 8000
+```
+
+Open:
+
+```text
+http://localhost:8000/js/bench-wasm-browser.html
+```
+
 **ente-wasm (web/packages/wasm/):**
 
 ```sh