Conversation
Establish audit baseline for Epic fn-128 (§1.1 crypto hardening). New: docs/security/primitive-inventory.md — full table of sign/verify, ECDH, KDF, AEAD, transparency-log hash, and canonical JSON with source-file citations and resolved crate versions. Clarifies the ed25519-dalek vs ring question and the p384-only-via-jsonwebtoken-ssh-key situation. Pending swaps table lines up every follow-up task in fn-128. Modified: SECURITY.md — cross-link to the inventory. No code changes.
…agnostic helpers (fn-128.T2)
Unblocks fn-128.T3 (FIPS aws-lc-rs) and fn-128.T4 (CNSA P-384/AES-256-GCM) by
exposing every primitive the provider swap must redirect, and extends fn-121's
curve-agnostic ethos to the provider boundary.
CryptoProvider trait gains:
- Primitives: sign_p256, generate_p256_keypair, p256_public_key_from_seed,
aead_{encrypt,decrypt}, hkdf_sha{256,384}_expand, hmac_sha{256,384}_{compute,verify}
- Curve-agnostic default methods (take TypedSeed/CurveType; dispatch once):
sign_typed, verify_typed, generate_typed_keypair, typed_public_key_from_seed
auths_crypto::default_provider() selects the compile-time provider —
fn-128.T3/T4 cfg-gate FIPS/CNSA variants here.
Migrations (domain code no longer matches on curve):
- key_ops::sign and ::public_key delegate to RingCryptoProvider inherent
methods; each arm is a single swap point for FIPS/CNSA.
- auths-id::keri::inception::sign_with_pkcs8 parses PKCS8 to TypedSeed,
then calls auths_crypto::typed_sign. Zero inline p256::ecdsa::SigningKey.
RingCryptoProvider impls: ChaCha20-Poly1305 AEAD, HKDF-SHA256/384, HMAC-SHA256/384.
New feature-gated deps on auths-crypto (native only): chacha20poly1305, hkdf,
hmac, sha2, subtle. packages/auths-python/Cargo.lock regenerated accordingly.
Tests (all green): cargo nextest run -p auths-crypto (61/61 including 5 new
determinism + sync/async parity tests); cargo nextest run -p auths-id (263/263);
cargo clippy -p auths-crypto -p auths-id --all-targets -- -D warnings clean.
Residual: WebCryptoProvider new-method impls stay as UnsupportedTarget (WASM
verifier uses only verify paths; full WASM wiring deferred as a follow-up).
…es, Secret marker trait, RFC 6979 + RNG clippy lints, daemon entropy probe, exact-pin crypto crates with cargo-deny CI gate
… registry, 10-byte SAS w/ unbiased decimal, zeroized TransportKey, typestate-enforced SAS confirmation, SecureEnvelope AEAD, cargo-fuzz targets, replay-rejection tests, optional ML-KEM-768 hybrid slot
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Auths Commit Verification
Result: ✅ 4/4 commits verified |
…ost/Origin/Referer allowlist + 421, 64 KiB body + depth-16 + 4 KiB string caps, tiered per-IP rate limit w/ lookup-miss backoff + uniform-time floor
Auths Commit Verification
Result: ✅ 5/5 commits verified |
…s, rotation cooldown with signed-in dt + emergency override, pre-signed revocation attestations, witness diversity policy, and mandatory ECDSA checkpoint verification
Auths Commit Verification
Result: ✅ 7/7 commits verified |
…m_768 serde rename) and seed org KEL identity in SDK tests for mandatory anchoring
Auths Commit Verification
Result: ✅ 8/8 commits verified |
…cs link, correct pairing test vectors, and seed org KEL identity for mandatory anchoring
Auths Commit Verification
Result: ✅ 9/9 commits verified |
Auths Commit Verification
Result: ✅ 11/11 commits verified |
Auths Commit Verification
Result: ✅ 12/12 commits verified |
Auths Commit Verification
Result: ✅ 13/13 commits verified |
Auths Commit Verification
Result: ✅ 14/14 commits verified |
Auths Commit Verification
Result: ✅ 15/15 commits verified |
Auths Commit Verification
Result: ✅ 16/16 commits verified |
Auths Commit Verification
Result: ✅ 17/17 commits verified |
… then runs the same cargo deny check locally as in ci
Auths Commit Verification
Result: ✅ 18/18 commits verified |
Auths Commit Verification
Result: ✅ 20/20 commits verified |
Auths Commit Verification
Result: ✅ 21/21 commits verified |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.