Repository navigation
Releases
v1.0.0 — Formally Verified Post-Quantum WAN Mesh
Vantablack 1.0.0 — Formally Verified Production Release
I am proud to announce the 1.0.0 milestone of Vantablack. This release marks the transition of Vantablack from an experimental architecture into a production-grade, zero-panic, post-quantum WAN mesh routing node and high-assurance TUN VPN.
Formally Verified Security & Mathematical Guarantees (Keller & ProVerif)
Rather than relying solely on traditional unit testing, I subjected the entire Vantablack core to formal verification and SMT solver analysis:
- Keller SMT Verification Platform: Evaluated over 2,500 functions and 1,290+ proof obligations across the workspace using the Z3 SMT solver.
- 0 Remaining Counterexamples: Formally resolved all 104 SMT counterexample
FAILobligations (integer overflow/underflow, slice boundary violations, division hazards, and remainder anomalies) across 23 core modules. - Symbolic Secrecy Proofs (ProVerif 2.05): Formally proved injective agreement, payload secrecy, and forward secrecy against active Dolev-Yao network adversaries (
formal/ghost_session.pv&formal/shardsec_space_time.pv). - Absence of Panic Paths: Completely eliminated unmodelled
.unwrap()/.expect()panics across untrusted packet ingest, PDU framing, and reassembly rings. Malformed or malicious network payloads are rejected deterministically without crashing the node.
Cryptography, Onion Routing & Hardening
-
PEN-2 Sphinx Shard Onion Security: Resolved fixed-nonce keystream reuse in
SphinxShardOnion. Every hop (Guard, Middle, Exit) now utilizes cryptographically fresh 96-bit ephemeral nonces directly within the 576-byte fixed-size onion frame. -
GTFv2 High-Entropy Wire Framing: Eliminated slack-padding null runs; PRF stream masking guarantees Shannon entropy
$> 7.92\text{ bits/byte}$ across all packet sizes, preventing Deep Packet Inspection (DPI) fingerprinting. - Post-Quantum Hybrid Core: NIST FIPS 203 ML-KEM-768 + X25519 key encapsulation, ML-DSA-65 identity signatures, and constant-time SessionGuard sliding-window replay protection (>31 Mpps).
-
Reed-Solomon RS(2,1) Fast-Path: Monotone ring-buffer reassembly with zero-copy erasure reconstruction at
$> 20\text{ GiB/s}$ .
Keller-Verify Debut
With this milestone, I am also debuting Keller-Verify, an open-source formal verification engine for Rust.
Alongside v1.0, I am introducing Keller-Verify: a formal verification tool designed to mathematically prove that Rust code is free from panics, out-of-bounds access, and arithmetic overflows using SMT-LIB solving directly on the compiler's MIR.
If you are intrigued about Keller-Verify, check it out at either of these two links:
https://veritas.kellersystems.dev
https://github.com/KELLERBABG/Keller-Verify.com
v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
Full Changelog: v0.8.20...v0.8.21
v0.8.20
Full Changelog: v0.8.19...v0.8.20
Full Changelog: v0.8.19...v0.8.20
Full Changelog: v0.8.19...v0.8.20
Full Changelog: v0.8.19...v0.8.20
v0.8.19
Full Changelog: v0.8.18...v0.8.19
Full Changelog: v0.8.18...v0.8.19
Full Changelog: v0.8.18...v0.8.19
Full Changelog: v0.8.18...v0.8.19
Full Changelog: v0.8.18...v0.8.19
Full Changelog: v0.8.18...v0.8.19
Full Changelog: v0.8.18...v0.8.19
Full Changelog: v0.8.18...v0.8.19
v0.8.18
Full Changelog: v0.8.17...v0.8.18
Full Changelog: v0.8.17...v0.8.18
Full Changelog: v0.8.17...v0.8.18
Full Changelog: v0.8.17...v0.8.18
v0.8.17
Full Changelog: v0.8.16...v0.8.17
Full Changelog: v0.8.16...v0.8.17
Full Changelog: v0.8.16...v0.8.17
Full Changelog: v0.8.16...v0.8.17
v0.8.16
Full Changelog: v0.8.15...v0.8.16
Full Changelog: v0.8.15...v0.8.16
Full Changelog: v0.8.15...v0.8.16
Full Changelog: v0.8.15...v0.8.16
v0.8.15
Full Changelog: v0.8.14...v0.8.15
Full Changelog: v0.8.14...v0.8.15
Full Changelog: v0.8.14...v0.8.15
Full Changelog: v0.8.14...v0.8.15
v0.8.14
Full Changelog: v0.8.13...v0.8.14
Full Changelog: v0.8.13...v0.8.14
Full Changelog: v0.8.13...v0.8.14
Full Changelog: v0.8.13...v0.8.14
v0.8.13
Full Changelog: v0.8.12...v0.8.13
Full Changelog: v0.8.12...v0.8.13
Full Changelog: v0.8.12...v0.8.13
Full Changelog: v0.8.12...v0.8.13
Full Changelog: v0.8.12...v0.8.13
Full Changelog: v0.8.12...v0.8.13
Full Changelog: v0.8.12...v0.8.13