Add post-quantum (age ML-KEM-768 / X-Wing) scaffold for WebCrypt/onlyagent#39
Open
0c-coder wants to merge 3 commits into
Open
Add post-quantum (age ML-KEM-768 / X-Wing) scaffold for WebCrypt/onlyagent#390c-coder wants to merge 3 commits into
0c-coder wants to merge 3 commits into
Conversation
Author
|
Related post-quantum (ML-KEM-768 / X-Wing) work across the stack:
|
- xwing.js: verified split-decaps crypto (mlkem seed expansion, recipient build, encapsulate, xwingSplitDecapsulate) against @noble/post-quantum - onlykey-pqc.js: 64-byte derive wrappers (getRecipient / decapsulate) over the existing FIDO2 derive flow; device returns [ss_X|mlkem_seed], sk_X never leaves - age-pqc.js: recipient/encrypt/decrypt wired to the verified KEM (age container framing left as scoped TODOs to byte-match the age mlkem768x25519 format) - INTEGRATION.md: pinned spec (HKDF domain separation, 64-byte layout, combiner) - test/xwing-split.test.mjs: proves split decaps == standard encaps shared secret
Author
|
Firmware counterpart (the 64-byte derive response, UNTESTED): trustcrypto/libraries#30. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Host-side post-quantum KEM scaffold for the WebCrypt/onlyagent app, mirroring the age PQC support in python-onlykey#90 + firmware libraries#29 (ML-KEM-768 = keytype 5, X-Wing = keytype 6).
New files only, no edits to existing files:
Design: the web path has no key slots -- keys are derived per-identity from the reserved web-derivation key. The 32-byte derived secret feeds X-Wing directly (its private key is a 32-byte seed) and expands to ML-KEM's (d,z). Only the keytype byte (5/6) is added to the derive request.
Compatibility with #38 (OnlyAgent reskin): disjoint file sets. #38 only touches src/app-src.html, src/index-src.html, and two asset files; this only adds device-layer JS and a new src/plugins/age/ folder. They merge cleanly in either order, and the reskin's app_pages loop auto-styles the new age plugin page.
Status: scaffold / WIP. Encapsulation and the derive-flow shape are real; the TODO(verify) items in INTEGRATION.md (identity->keyhandle encoding, decaps op, ML-KEM seed expansion, age stanza/HPKE) must be matched byte-for-byte against python-onlykey#90 (tests/test_age_wire.py) before interop.