mirror of
https://github.com/luxfi/zwing.git
synced 2026-09-24 00:24:38 +00:00
zeekay
f21120ce2f
Z-Wing is the canonical Lux post-quantum secure channel. One construction,
one wire format, no negotiation. Layered design exposes a net.Conn so
luxfi/api/zap (and any other stream protocol) runs unchanged on top.
KEM: X-Wing (X25519 + ML-KEM-768, IETF draft-connolly-cfrg-xwing-kem
SHA3-256 combiner: "\./" || "X-Wing" || ssM || ssX || ctX || pkX)
Identity: Ed25519 + ML-DSA-65 hybrid signatures
AEAD: ChaCha20-Poly1305 with sequence-numbered nonces (per direction)
Transport: TCP (RNS routing is a follow-up package)
Public API: GenerateIdentity / Dial / Listen / Client / Server.
Six tests cover the spec end-to-end: handshake round-trip, TCP dial+listen,
ExpectedRemote pinning, key-zero-after-handshake forward secrecy, sequenced
nonces, and ZAP-over-Z-Wing application round-trip.
16 lines
287 B
AMPL
16 lines
287 B
AMPL
module github.com/luxfi/zwing
|
|
|
|
go 1.26.2
|
|
|
|
require (
|
|
github.com/luxfi/api v1.0.9
|
|
github.com/luxfi/crypto v1.18.3
|
|
golang.org/x/crypto v0.50.0
|
|
)
|
|
|
|
require (
|
|
github.com/cloudflare/circl v1.6.3 // indirect
|
|
github.com/luxfi/accel v1.0.7 // indirect
|
|
golang.org/x/sys v0.43.0 // indirect
|
|
)
|