Hybrid Sessions

Hybrid Sessions

Import package:pqforge/pqforge.dart when the app wants pqforge to own the classical side too.

Use:

• PqForgeHybridKeyAgreement for X25519 + ML-KEM session key agreement;
• PqForgeHybridSigner for ML-DSA + Ed25519 or ECDSA-P256 dual signatures;
• PqForgeSecureSession for AES-256-GCM or ChaCha20-Poly1305 packets;
• SecretKey.deriveHybridSecretKey() for package:cryptography users.

The application still owns public-key trust, replay protection, session storage, authorization policy, and transport policy.

ECDSA over NIST P-256 is built in (PqEcdsaP256, pure-Dart PointyCastle); dualSign / dualVerify remain for other app-supplied classical schemes.