pqsafe/pkg/ctx/ctx.go

// Copyright (C) 2025-2026, Lux Industries Inc. All rights reserved.
// See the file LICENSE for licensing terms.

// Package ctx holds the canonical PQSAFE domain-separation context
// strings used everywhere a KDF or signature is computed. Kept in a
// leaf package with no Lux deps so every other PQSAFE package can
// reference them without import cycles.
//
// One way only. Two layers MUST NOT share a context string. New
// layers require a new context constant; renaming an existing one
// is a wire-format break.
package ctx

const (
	DEKWrap     = "PQSAFE-DEK-WRAP-v1"
	ChunkAEAD   = "PQSAFE-CHUNK-AEAD-v1"
	Manifest    = "PQSAFE-MANIFEST-SIG-v1"
	Rewrap      = "PQSAFE-REWRAP-v1"
	Recovery    = "PQSAFE-RECOVERY-SHARE-v1"
	AuditAnchor = "PQSAFE-QCHAIN-AUDIT-ANCHOR-v1"
)