core/go-crypt
8
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
16 commits 1 branch 4 tags 308 KiB
Find a file
Snider f4eaab401d chore: pin forge deps to v0.0.1 tags for Go 1.26 compat 
Go 1.26 rejects non-semver version strings (like 'main') in go.mod.
Tags v0.0.1 now exist on all forge repos — workspace still overrides
for local development.

Co-Authored-By: Virgil <virgil@lethean.io>
2026-02-22 20:15:05 +00:00
auth feat(auth): Phase 2 key management — Argon2id, rotation, revocation 2026-02-20 02:27:03 +00:00
cmd feat: migrate crypt and test commands from CLI 2026-02-21 19:38:16 +00:00
crypt test(phase0): expand test coverage, security audit, and benchmarks 2026-02-20 01:14:41 +00:00
docs docs: graduate TODO/FINDINGS into production documentation 2026-02-20 15:01:55 +00:00
trust feat(trust): Phase 3 — approval workflow, audit log, dynamic policies, scope wildcards 2026-02-20 04:02:47 +00:00
CLAUDE.md docs: graduate TODO/FINDINGS into production documentation 2026-02-20 15:01:55 +00:00
go.mod chore: pin forge deps to v0.0.1 tags for Go 1.26 compat 2026-02-22 20:15:05 +00:00
go.sum feat: migrate crypt and test commands from CLI 2026-02-21 19:38:16 +00:00
README.md docs: add README with quick start and docs links 2026-02-20 15:11:19 +00:00

README.md

go-crypt

Cryptographic primitives, authentication, and trust policy engine for the Lethean agent platform. Provides symmetric encryption (ChaCha20-Poly1305 and AES-256-GCM with Argon2id KDF), OpenPGP challenge-response authentication with online and air-gapped courier modes, Argon2id password hashing, RSA-OAEP key generation, RFC-0004 deterministic content hashing, and a three-tier agent trust policy engine with an audit log and approval queue.

Module: forge.lthn.ai/core/go-crypt Licence: EUPL-1.2 Language: Go 1.25

Quick Start

import (
    "forge.lthn.ai/core/go-crypt/crypt"
    "forge.lthn.ai/core/go-crypt/auth"
    "forge.lthn.ai/core/go-crypt/trust"
)

// Encrypt with ChaCha20-Poly1305 + Argon2id KDF
ciphertext, err := crypt.Encrypt(plaintext, passphrase)

// OpenPGP authentication
a := auth.New(medium, auth.WithSessionStore(auth.NewSQLiteSessionStore(dbPath)))
session, err := a.Login(userID, password)

// Trust policy evaluation
engine := trust.NewPolicyEngine(registry)
decision := engine.Evaluate("Charon", "repo.push", "core/go-crypt")

Documentation

Build & Test

go test ./...
go test -race ./...
go build ./...

Licence

European Union Public Licence 1.2 — see LICENCE for details.