No description

Find a file

Snider f5fb34c7fb chore: go mod tidy for 1.26.0 Co-Authored-By: Virgil <virgil@lethean.io>		2026-02-22 20:35:59 +00:00
auth	feat(auth): Phase 2 key management — Argon2id, rotation, revocation	2026-02-20 02:27:03 +00:00
cmd	feat: migrate crypt and test commands from CLI	2026-02-21 19:38:16 +00:00
crypt	test(phase0): expand test coverage, security audit, and benchmarks	2026-02-20 01:14:41 +00:00
docs	docs: graduate TODO/FINDINGS into production documentation	2026-02-20 15:01:55 +00:00
trust	feat(trust): Phase 3 — approval workflow, audit log, dynamic policies, scope wildcards	2026-02-20 04:02:47 +00:00
CLAUDE.md	docs: graduate TODO/FINDINGS into production documentation	2026-02-20 15:01:55 +00:00
go.mod	chore: bump go directive to 1.26.0	2026-02-22 20:33:48 +00:00
go.sum	chore: go mod tidy for 1.26.0	2026-02-22 20:35:59 +00:00
README.md	docs: add README with quick start and docs links	2026-02-20 15:11:19 +00:00

README.md

go-crypt

Cryptographic primitives, authentication, and trust policy engine for the Lethean agent platform. Provides symmetric encryption (ChaCha20-Poly1305 and AES-256-GCM with Argon2id KDF), OpenPGP challenge-response authentication with online and air-gapped courier modes, Argon2id password hashing, RSA-OAEP key generation, RFC-0004 deterministic content hashing, and a three-tier agent trust policy engine with an audit log and approval queue.

Module: forge.lthn.ai/core/go-crypt Licence: EUPL-1.2 Language: Go 1.25

Quick Start

import (
    "forge.lthn.ai/core/go-crypt/crypt"
    "forge.lthn.ai/core/go-crypt/auth"
    "forge.lthn.ai/core/go-crypt/trust"
)

// Encrypt with ChaCha20-Poly1305 + Argon2id KDF
ciphertext, err := crypt.Encrypt(plaintext, passphrase)

// OpenPGP authentication
a := auth.New(medium, auth.WithSessionStore(auth.NewSQLiteSessionStore(dbPath)))
session, err := a.Login(userID, password)

// Trust policy evaluation
engine := trust.NewPolicyEngine(registry)
decision := engine.Evaluate("Charon", "repo.push", "core/go-crypt")

Documentation

Architecture — crypt primitives, auth protocol, trust tiers, policy engine
Development Guide — building, testing, security standards
Project History — completed phases and known limitations

Build & Test

go test ./...
go test -race ./...
go build ./...

Licence

European Union Public Licence 1.2 — see LICENCE for details.