Skip to content

refactor(crypto): preserve Ed25519 wire format with dalek - #14

Merged
rldyourmnd merged 1 commit into
mainfrom
refactor/maintained-ed25519
Sep 2, 2026
Merged

refactor(crypto): preserve Ed25519 wire format with dalek#14
rldyourmnd merged 1 commit into
mainfrom
refactor/maintained-ed25519

Conversation

@rldyourmnd

Copy link
Copy Markdown
Contributor

Moves authentication signing from the unmaintained signing wrapper to ed25519-dalek 3.0 while preserving both deployed layouts: 64-byte seed || public key keypairs and signature || message signed payloads.

The compatibility boundary is executable: RFC 8032 vector 1 must produce the exact signature bytes, persisted keypairs with mismatched public halves are rejected, and modified signatures fail verification. The root server no longer declares sodiumoxide; the vendored common library still uses it only for the separate box_ and XSalsa20-Poly1305 secretbox protocol operations.

Validation:

  • cargo test --locked --all-targets: 7 + 5 + 1 tests passed
  • cargo test --locked --manifest-path libs/hbb_common/Cargo.toml crypto_sign: 2 passed
  • cargo clippy --locked --all-targets -- -D warnings
  • cargo fmt --all --check
  • git diff --check

@rldyourmnd
rldyourmnd enabled auto-merge September 2, 2026 19:24
@rldyourmnd
rldyourmnd merged commit ca621fa into main Sep 2, 2026
26 checks passed
@rldyourmnd
rldyourmnd deleted the refactor/maintained-ed25519 branch September 2, 2026 19:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant