affinidi-crypto 0.2.0

Cryptographic primitives and JWK types for Affinidi TDK
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

# affinidi-crypto

[![Crates.io](https://img.shields.io/crates/v/affinidi-crypto.svg)](https://crates.io/crates/affinidi-crypto)
[![Documentation](https://docs.rs/affinidi-crypto/badge.svg)](https://docs.rs/affinidi-crypto)
[![Rust](https://img.shields.io/badge/rust-1.90.0%2B-blue.svg?maxAge=3600)](https://github.com/affinidi/affinidi-tdk-rs/tree/main/crates/affinidi-tdk/common/affinidi-crypto)
[![License](https://img.shields.io/badge/license-Apache--2.0-green.svg)](https://github.com/affinidi/affinidi-tdk-rs/blob/main/LICENSE)

Cryptographic primitives and JWK types for the Affinidi Trust Development Kit.
Provides key generation, encoding, and conversion utilities across multiple
elliptic curve families.

## Supported Algorithms

| Algorithm | Feature Flag | Curve / Family |
|---|---|---|
| Ed25519 / X25519 | `ed25519` | Curve25519 |
| P-256 (secp256r1) | `p256` | NIST P-256 |
| P-384 | `p384` | NIST P-384 |
| secp256k1 | `k256` | secp256k1 |
| ML-DSA-44 / 65 / 87 | `ml-dsa` | FIPS 204 (post-quantum) |
| SLH-DSA-SHA2-128s | `slh-dsa` | FIPS 205 (post-quantum) |

The four classical curves are enabled by default. Post-quantum signatures
are off by default — enable `post-quantum` for both, or `ml-dsa` /
`slh-dsa` individually.

## `did:key` Raw-Bytes Helpers

Under the `ed25519` feature, the [`did_key`] module exposes a raw-bytes
API for apps doing HPKE, sealed transfer, or other non-DIDComm key
agreement: encode / decode between a `did:key:z6Mk…` identifier and a
`[u8; 32]` Ed25519 public key, and derive an X25519 public key without
round-tripping through a multikey string. The multikey-string helpers in
`ed25519.rs` remain for multikey-native callers.

[`did_key`]: https://docs.rs/affinidi-crypto/latest/affinidi_crypto/did_key/index.html

## Installation

```toml
[dependencies]
affinidi-crypto = "0.1"
```

Or with only specific curves:

```toml
[dependencies]
affinidi-crypto = { version = "0.1", default-features = false, features = ["ed25519", "p256"] }
```

## WASM Support

This crate supports `wasm32` targets with the `getrandom/js` feature
automatically enabled.

## Related Crates

- [`affinidi-encoding`](../affinidi-encoding/) — Multibase/multicodec encoding (dependency)
- [`affinidi-secrets-resolver`](../affinidi-secrets-resolver/) — Secret management built on this crate
- [`affinidi-data-integrity`](../affinidi-data-integrity/) — W3C Data Integrity proofs

## License

[Apache-2.0](https://github.com/affinidi/affinidi-tdk-rs/blob/main/LICENSE)