Origin Crypto SDK

Standalone Rust cryptographic SDK with classical and post-quantum primitives. Hybrid signing by default.

Quick Start

use origin_crypto_sdk::prelude::*;

// Hybrid Ed25519 + Falcon-1024 signature (recommended default)
let master_seed = [0x42u8; 32];
let bundle = HybridSigningKeyBundle::from_seed(&master_seed, "my-app")
    .expect("valid seed");

let sig = bundle.sign_hybrid(b"sign this");
// sig is an Ed25519 + Falcon-1024 hybrid signature — both must verify

What's Inside

Category	Primitives	Recommended
Signatures	Ed25519, Falcon-512/1024, SLH-DSA, ML-DSA, Ed448, Ed41417	Hybrid (Ed25519 + Falcon-1024)
Encryption	XChaCha20-Poly1305, ChaCha20-BLAKE3, Serpent CBC	ChaCha20-BLAKE3 (committing AEAD)
KDF	Argon2id, HKDF-SHA3-256, HMAC-SHA3-256	Argon2id for passwords, HKDF for derivation
Hashing	BLAKE3, SHA3-256, SHAKE128/256, Skein-512/1024	BLAKE3 or SHA3-256
PQC KEM	NTRU Prime (sntrup761), hybrid X25519+NTRU+Ed41417	Hybrid KEM
Utilities	ChaCha20-DRBG, seed hierarchy, Reed-Solomon, OTP/TOTP, compression, entropy analysis	--

Features

Feature	Enables	Default
`parallel`	Rayon-based parallel ops	yes
`slh-dsa`	SLH-DSA / SPHINCS+ (FIPS 205, hash-based signatures)	no
`ml-dsa`	ML-DSA / Dilithium (FIPS 204, lattice signatures)	no
`pqc-simd`	SIMD acceleration for NTRU Prime (placeholder)	no

# Minimal (no parallel, no optional PQC)
origin-crypto-sdk = { version = "0.4", default-features = false }

# With FIPS 204 + FIPS 205 signatures
origin-crypto-sdk = { version = "0.4", features = ["slh-dsa", "ml-dsa"] }

Security Posture

Hybrid-first: signatures remain secure if either classical or PQ primitive breaks
Committing AEAD by default: ChaCha20-BLAKE3 prevents partitioning oracle attacks
External + custom implementations: see SECURITY.md for a full source table
Custom PQC implementations (NTRU Prime, Ed41417) are not independently audited
Constant-time verification on Ed25519, Falcon, Ed448 paths
Memory zeroing via zeroize where applicable

Do not use custom implementations in production without independent audit.

Module Map

origin_crypto_sdk::
  signing::             -- Ed25519, Falcon, SLH-DSA, ML-DSA, hybrid
    hybrid::            -- HybridSigningKeyBundle (recommended)
    classical::         -- Ed25519 alone
    postquantum::       -- Falcon-512/1024 alone (OOP signers)
    legacy_shim::       -- Deprecated: old `hybrid::*` re-exports
  aead::                -- XChaCha20-Poly1305
    symmetric::         -- Serpent CBC (non-AEAD)
    streaming::         -- Streaming encryption
  chacha20_blake3::     -- ChaCha20-BLAKE3 (committing AEAD)
  kdf::                 -- Argon2id, HKDF-SHA3-256
    mac::               -- HMAC-SHA3-256 (keyed hash)
  pqc::                 -- Raw PQC primitives (advanced)
    falcon512::         -- Falcon-512
    falcon1024::        -- Falcon-1024
    ed448::             -- Ed448 (Goldilocks, RFC 8032)
    curve41417::        -- Curve41417 / Ed41417
    ntru_prime::        -- NTRU Prime sntrup761
    slhdsa::            -- SLH-DSA (feature-gated)
    mldsa::             -- ML-DSA (feature-gated)
  drbg::                -- ChaCha20 DRBG (auto-reseed at 16 MB)
    otp::               -- One-time pad (HOTP/TOTP, RFC 4226/6238)
  entropy::            -- Entropy quality analysis (internal)
  seed::                -- Hierarchical seed derivation
    gen::               -- Multi-hash seed generation
  blob::                -- Encrypted seed at rest (internal)
  mmr::                 -- Merkle Mountain Range (internal)
  stealth::             -- Stealth address primitives
    kdf::               -- Stealth master/child key derivation
    pow::               -- Hashcash PoW for enumeration rate-limiting
  ec_schnorr::          -- secp256k1 Schnorr (native, zero deps)
  prelude::             -- Common re-exports
  test_utils::          -- Deterministic test helpers (feature = "test-utils")
  types::               -- Zeroizing byte array newtypes (XNonce, CNonce, Seed, etc.)
  error::               -- CryptoError, Result alias
  signing_legacy::      -- Deprecated flat signing API (removed in 0.5)
  internal::            -- Internals (hidden, not for external use)

Note: Modules marked (internal) are #[doc(hidden)] — they compile and work but don't appear in public docs. Use at your own risk.

Usage: Two Layers for Signing

// Layer 1: OOP signers (easy, recommended for single-primitive use)
use origin_crypto_sdk::signing::postquantum::Falcon1024Signer;
let signer = Falcon1024Signer::from_seed(&[0x42u8; 32]).expect("valid seed");
signer.sign(b"hello").expect("sign failed");

// Layer 2: Raw primitives (advanced, for custom composition)
use origin_crypto_sdk::pqc::falcon1024::{FalconPrivateKey, FalconPublicKey, sign, verify};
let (pk, sk) = falcon1024::generate_keypair_from_seed(&seed).expect("keygen");
let sig = sign(b"hello", &sk).expect("sign failed");
verify(b"hello", &sig, &pk).expect("verify failed");

The signing::postquantum OOP types are thin wrappers over pqc:: — no duplicate implementations.

Examples

cargo run --example hybrid_sign
cargo run --example encrypt_file
cargo run --example kdf_derive
cargo run --example seed_tree

Requirements

MSRV: Rust 1.85
Platform: Linux, macOS, Windows (requires getrandom)

License

Apache-2.0 — see LICENSE.

API Stability

Pre-1.0 notice: This crate is at version 0.4.0. Per Cargo's SemVer guidance, anything below 1.0 may contain breaking changes in minor releases.

Stable (breaking changes will require a major version bump):

CryptoError variants and their Display output
HybridSigningKeyBundle API
ChaCha20Blake3::encrypt / decrypt signatures
Argon2id::derive_key signature

Unstable (may change in minor releases):

The exact set of items in prelude::*
Low-level PQC module APIs (pqc::falcon1024, pqc::ed448, etc.)
signing_legacy — kept for one release cycle, will be removed
test_utils API — stabilizing in 0.5

Frozen (will not change):

Wire formats of HybridSignatureOutput byte representations
AEAD ciphertext format (32-byte auth tag appended to ciphertext)
Domain separation labels for HybridSigningKeyBundle::from_seed

origin-crypto-sdk 0.4.0