mirror of
https://github.com/luxfi/crypto.git
synced 2026-07-27 01:54:50 +00:00
- promptseal: KEM X25519 → X-Wing (X25519 + ML-KEM-768), making the prompt-confidentiality envelope POST-QUANTUM (secure if either half holds) — matching the strict-PQ posture of ML-DSA staking. The proof layer was already PQ (keccak + information-theoretic Freivalds). 6/6 still green. - attestation: a REAL TEE quote verifier (closes the audit's TEE stub). Verify() checks an ECDSA-P256 report signature, an x509 cert chain to a PINNED vendor root, a measurement allow-list, AND that the report binds the operator's confidentiality key — so a sealed prompt opens ONLY inside the attested enclave (custody end to end). 6/6 incl. forged-sig, unpinned-root (an attacker's own well-formed quote is rejected), wrong-measurement, unbound-key, tampered-measurement. - poi/scale_test.go: 1/10/100/1000-node scaling. VerifyOpening is per-node-independent → linear aggregate throughput (542 → 542k proofs/sec) at constant latency, and fraud-caught probability → 1.0 as nodes grow. + BenchmarkVerifyOpening.