mirror of
https://github.com/lux-apps/papers.git
synced 2026-10-30 18:15:21 +00:00
zeekay
abf99d05fc
Restructured from flat .tex/.pdf files into per-paper subdirectories. Added Antje Worring as co-author on all papers. Synced PDFs to pdfs/ for download site.
56 lines
1.9 KiB
TeX
56 lines
1.9 KiB
TeX
\section{Conclusion}
|
|
\label{sec:conclusion}
|
|
%% ============================================================
|
|
|
|
This proposal standardizes encrypted SQLite replication across the
|
|
Lux ecosystem. The combination of age X25519 encryption,
|
|
HKDF-derived per-principal keys, and WAL-based continuous streaming
|
|
provides sub-second RPO with zero plaintext egress. The sidecar
|
|
pattern requires no application changes: existing Base services gain
|
|
durability by adding a Kustomize patch. PVCs become optional. Pod
|
|
restarts become transparent. The chain remains the source of truth
|
|
for securities; this standard ensures that application state---the
|
|
complement to on-chain state---is equally durable.
|
|
|
|
\begin{thebibliography}{9}
|
|
|
|
\bibitem{age}
|
|
F.~Valsorda, ``age: A simple, modern and secure encryption tool,''
|
|
\url{https://age-encryption.org/}, 2019.
|
|
|
|
\bibitem{litestream}
|
|
B.~Johnson, ``Litestream: Streaming SQLite replication,''
|
|
\url{https://litestream.io/}, 2021.
|
|
|
|
\bibitem{rfc5869}
|
|
H.~Krawczyk and P.~Eronen, ``HMAC-based Extract-and-Expand Key
|
|
Derivation Function (HKDF),'' RFC~5869, IETF, May 2010.
|
|
|
|
\bibitem{sqlcipher}
|
|
Zetetic LLC, ``SQLCipher: Full Database Encryption for SQLite,''
|
|
\url{https://www.zetetic.net/sqlcipher/}, 2008.
|
|
|
|
\bibitem{lux-capsule}
|
|
Z.~Kelling, ``The Capsule: A Sovereign Encrypted Process for Web5
|
|
Computing,'' Lux Industries, 2025.
|
|
|
|
\bibitem{lux-ats}
|
|
Z.~Kelling, ``Non-Custodial Blockchain ATS: Architecture of a
|
|
Regulatory-Compliant Securities Exchange,'' Lux Industries, 2025.
|
|
|
|
\bibitem{lux-kms}
|
|
Z.~Kelling, ``LP-062: Key Management Service,'' Lux Proposals, 2025.
|
|
|
|
\bibitem{xwing}
|
|
M.~Connolly, ``X-Wing: The Hybrid KEM You've Been Looking For,''
|
|
Internet-Draft, IETF CFRG,
|
|
\url{https://www.ietf.org/archive/id/draft-connolly-cfrg-xwing-kem-05.html},
|
|
2024.
|
|
|
|
\bibitem{fips203}
|
|
NIST, ``Module-Lattice-Based Key-Encapsulation Mechanism Standard
|
|
(ML-KEM),'' FIPS~203, August 2024.
|
|
|
|
\end{thebibliography}
|
|
|