kms/sdk/go/go.sum at release/v2.5.0-multi-issuer

mirror of https://github.com/hanzoai/kms.git synced 2026-10-30 14:57:36 +00:00

Files

T

zeekay 4d26e1e083 feat: implement ZK-KMS client SDK with zero-knowledge secret management

Go client library (github.com/hanzoai/kms-sdk-go) for interacting with the
distributed MPC node cluster. All encryption/decryption is client-side:

- CEK derivation: Argon2id (256MiB, t=4, p=2) -> HKDF-SHA256
- Secret CRUD: AES-256-GCM with org-scoped AAD, random nonces
- Member management: HPKE ML-KEM-768+X25519 hybrid CEK wrapping
- CRDT sync trigger and SSE watch for change events
- Quorum reads and broadcast writes with configurable threshold

The CEK never leaves the client. MPC nodes store only encrypted blobs.
Uses luxfi/crypto/encryption for post-quantum HPKE operations.

2026-03-25 21:45:09 -07:00

13 lines

986 B

Plaintext

Raw Permalink Blame History

 c2sp.org/CCTV/age v0.0.0-20251208015420-e9274a7bdbfd h1:ZLsPO6WdZ5zatV4UfVpr7oAwLGRZ+sebTUruuM4Ra3M=
 c2sp.org/CCTV/age v0.0.0-20251208015420-e9274a7bdbfd/go.mod h1:SrHC2C7r5GkDk8R+NFVzYy/sdj0Ypg9htaPXQq5Cqeo=
 filippo.io/age v1.3.1 h1:hbzdQOJkuaMEpRCLSN1/C5DX74RPcNCk6oqhKMXmZi0=
 filippo.io/age v1.3.1/go.mod h1:EZorDTYUxt836i3zdori5IJX/v2Lj6kWFU0cfh6C0D4=
 filippo.io/hpke v0.4.0 h1:p575VVQ6ted4pL+it6M00V/f2qTZITO0zgmdKCkd5+A=
 filippo.io/hpke v0.4.0/go.mod h1:EmAN849/P3qdeK+PCMkDpDm83vRHM5cDipBJ8xbQLVY=
 github.com/luxfi/crypto v1.17.45 h1:uGK0y4+aLipE/M0YIQ5hcsWv0ZG0E4cPv03a94K/eLE=
 github.com/luxfi/crypto v1.17.45/go.mod h1:GnAkhQ7HNs3X0Tzx5nOONS3kl0yRmWHbDcRO5ffILsg=
 golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
 golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
 golang.org/x/sys v0.41.0 h1:Ivj+2Cp/ylzLiEU89QhWblYnOE9zerudt9Ftecq2C6k=
 golang.org/x/sys v0.41.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=

13 lines 986 B Plaintext Raw Permalink Blame History

13 lines

986 B

Plaintext

Raw Permalink Blame History