confium_patterns/lib.rs
1//! Threshold crypto deployment patterns.
2//!
3//! Two patterns inspired by Thunderbird's revocation escrow and key backup
4//! designs, generalized to T-of-N threshold cryptography:
5//!
6//! - **Escrow**: A user's key is encrypted to a threshold public key; recovery
7//! requires T-of-N custodians to participate in an async decryption ceremony.
8//! - **Revocation service**: Threshold-backed revocation service replacing
9//! single-party authorization (eliminates compelled-revocation risk).
10//!
11//! See `TODO.roadmap/41-thunderbird-patterns-integration.md` for full spec.
12
13#![forbid(unsafe_code)]
14#![warn(missing_docs)]
15
16pub mod escrow {
17 //! Threshold key escrow.
18
19 mod blob;
20 mod metadata;
21 mod service;
22
23 pub use blob::*;
24 pub use metadata::*;
25 pub use service::*;
26}
27
28pub mod revocation {
29 //! Threshold-backed revocation service.
30
31 mod revocation_blob;
32 mod revocation_service;
33 mod revocation_submission;
34
35 pub use revocation_blob::*;
36 pub use revocation_service::*;
37 pub use revocation_submission::*;
38}