kernoid-e2e

End-to-end encryption of kernoid's apps (kernoid's RFC 0006) – OpenPGP through rpgp, nothing of its own:

• Keys (keys): an account's OpenPGP key of one of two kinds – pqc, a v6 key with ML-DSA-65+Ed25519 and ML-KEM-768+X25519 (RFC 9980), or compatible, a v4 Curve25519 key for older software – and protected copies of its secret key (Argon2 with AES-256-OCB), unlocked with a recovery code or a passkey's PRF.
• Messages (message): encrypting to several recipients and signing, decrypting and verifying.
• Mail (mime, compose): PGP/MIME with header protection (RFC 9788) and the encrypted summary kernoid's apps show in lists; mail built and read in the client.

With the feature wasm it builds the Keyring of kernoid's web app (wasm-bindgen). The protocol around it – finding keys, publishing them, the copies kept by the server – is in kernoid-client.

MIT – see LICENSE.