mirror of
https://github.com/luxfi/pqsafe.git
synced 2026-10-30 15:21:41 +00:00
zeekay
85d8a99ef8
PQSAFE is a crypto-agile, hybrid post-quantum envelope-encryption
profile for DoD-grade file storage and transfer. The paper at
luxfi/papers/pqsafe-il5/pqsafe-il5.tex is the authoritative spec;
this repo is the reference Go implementation.
Initial drop:
- cmd/pqsafe CLI surface: seal/open/verify/revoke/rewrap/push
- pkg/envelope profile + version + domain-separation strings
- pkg/manifest (skeleton; CBOR/COSE canonical manifest)
- pkg/capsule (skeleton; X-Wing recipient capsule wrapping the DEK)
- pkg/aead (skeleton; AES-256-GCM + ChaCha20-Poly1305 chunk AEAD)
- vectors deterministic KAT vectors (populated as primitives land)
- .github/workflows CI (build / vet / test / gofmt)
- LICENSE Apache-2.0
- README crypto stack, layout, CLI, domain separation, status
Primitives (per spec):
bulk AEAD AES-256-GCM (FIPS) or ChaCha20-Poly1305 (software)
KEM X-Wing hybrid (X25519 + ML-KEM-768, IETF draft-connolly-cfrg-xwing-kem)
sig Ed25519 + ML-DSA-65 detached pair
root sig SLH-DSA-SHA2-192f
manifest deterministic CBOR/COSE
KDF HKDF-SHA-384 with explicit per-layer context strings:
PQSAFE-DEK-WRAP-v1
PQSAFE-CHUNK-AEAD-v1
PQSAFE-MANIFEST-SIG-v1
PQSAFE-REWRAP-v1
PQSAFE-RECOVERY-SHARE-v1
PQSAFE-QCHAIN-AUDIT-ANCHOR-v1
No two layers ever derive a key from the same transcript.
18 lines
750 B
Plaintext
18 lines
750 B
Plaintext
Apache License
|
|
Version 2.0, January 2004
|
|
http://www.apache.org/licenses/
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
|
|
Copyright 2025-2026 Lux Industries Inc.
|