Aegis's first post-quantum signature primitive, wrapping Apple's
CryptoKit MLDSA65 (FIPS 204 Category 3).
What shipped:
- Signature protocol (parallel of Encryption, KeyEncapsulation)
- SignatureKeyPair envelope
- Tier1/MLDSA65.swift — MLDSA65Signature wrapper
- 25 NIST FIPS 204 KeyGen KATs passing (BoringSSL mirror)
- 160 Wycheproof verify-side KATs passing across 24 groups,
covering malformed keys, edge-case signatures, and FIPS 204
context-extension cases
- 14 contract tests + 6 Apple-API smoke tests pinning FIPS 204
sizes (1952-byte pk, 3309-byte signature, 32-byte seed)
Sprint 3 was deliberately narrowed to signatures only via a
documented STAGES.md "Conscious deviation"; PQXDH key exchange
and safety numbers are now Sprint 4 (v0.0.5), Keychain
persistence is bundled with the iOS app shell at Sprint 6.
Test status: 73 tests, 3 skipped (issue #1), 0 failures.
pre-council-approval (Maintainer @DemigodDSK, 2026-04-27)