feat: crypto-core Phase 2 — PRF/VOPRF/dedup surface - #2

Merged

AtHeartEngineer merged 20 commits into

mainfrom

feat/signet-crypto-core-phase2

Jul 4, 2026

Commits on Jul 4, 2026

style(db): wrap test assertion to satisfy rustfmt
AtHeartEngineer
committed
1e2888e
test(keygen_dos): raise poll ceiling to 120s to match other suites
AtHeartEngineer
committed
14f9473
test: raise keygen poll ceilings to 360s across integration suites
AtHeartEngineer
committed
52cb1d3
fix(main): consume secret env vars before the async runtime starts
AtHeartEngineer
committed
bea2662
feat(db): service_keys and dedup_entries storage with record-first register
AtHeartEngineer
committed
66cbf5d
feat(prf): RFC 9497 VOPRF core, nullifier key schedule, pairwise oracle
AtHeartEngineer
committed
341429e
feat(dedup): service-key init/import lifecycle and fail-closed boot policy
AtHeartEngineer
committed
2f28a75
feat(prf): mount the PRF/dedup HTTP surface with fail-closed boot and per-route authz
AtHeartEngineer
committed
b5ed914
fix(dedup): verify the pubkey pin before sealing a pairwise import
AtHeartEngineer
committed
5d18796
fix(dedup): refuse init on a pinned node and boot on an orphaned pin
AtHeartEngineer
committed
92c9532
feat(handlers): re-check the PRF allow-list inside require_prf
AtHeartEngineer
committed
dd1db0d
fix(db): constant-time owner-handle comparisons on the dedup ledger
AtHeartEngineer
committed
6959dde
fix(handlers): drop per-request outcome status from dedup log lines
AtHeartEngineer
committed
0a79140
perf(handlers): run PRF/dedup ledger DB work in spawn_blocking
AtHeartEngineer
committed
846306b
docs(config): state what remove_var actually protects
AtHeartEngineer
committed
eb13086
docs(identity): record the CA issuance discipline the PRF list relies on
AtHeartEngineer
committed
310908a
fix(db): make the service/group key AAD domain split explicit
AtHeartEngineer
committed
6b4d291
test(keygen): raise unit-test wait ceilings to 360s
AtHeartEngineer
committed
47d9c56
feat(interop): cross-language VOPRF harness and CI gate (interop/prf.mjs)
AtHeartEngineer
committed
e284bc2
style: rustfmt
AtHeartEngineer
committed
aef7932

Navigation Menu

feat: crypto-core Phase 2 — PRF/VOPRF/dedup surface - #2

feat: crypto-core Phase 2 — PRF/VOPRF/dedup surface#2
AtHeartEngineer merged 20 commits into
mainfrom
feat/signet-crypto-core-phase2

Commits on Jul 4, 2026

style(db): wrap test assertion to satisfy rustfmt

test(keygen_dos): raise poll ceiling to 120s to match other suites

test: raise keygen poll ceilings to 360s across integration suites

fix(main): consume secret env vars before the async runtime starts

feat(db): service_keys and dedup_entries storage with record-first register

feat(prf): RFC 9497 VOPRF core, nullifier key schedule, pairwise oracle

feat(dedup): service-key init/import lifecycle and fail-closed boot policy

feat(prf): mount the PRF/dedup HTTP surface with fail-closed boot and per-route authz

fix(dedup): verify the pubkey pin before sealing a pairwise import

fix(dedup): refuse init on a pinned node and boot on an orphaned pin

feat(handlers): re-check the PRF allow-list inside require_prf

fix(db): constant-time owner-handle comparisons on the dedup ledger

fix(handlers): drop per-request outcome status from dedup log lines

perf(handlers): run PRF/dedup ledger DB work in spawn_blocking

docs(config): state what remove_var actually protects

docs(identity): record the CA issuance discipline the PRF list relies on

fix(db): make the service/group key AAD domain split explicit

test(keygen): raise unit-test wait ceilings to 360s

feat(interop): cross-language VOPRF harness and CI gate (interop/prf.mjs)

style: rustfmt