qv-core 4.3.2

Sigvault — post-quantum cryptographic tokens (ML-DSA-87 + Falcon-512/1024, XChaCha20-Poly1305, SHA3-256, mutation-chain replay protection).
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

use thiserror::Error;

#[derive(Debug, Error)]
pub enum QVError {
    #[error("Invalid magic bytes: expected QVLT")]
    InvalidMagic,

    #[error("Unsupported token version: {0:#06x}")]
    UnsupportedVersion(u16),

    #[error("Unknown suite ID: {0:#04x}")]
    UnknownSuite(u8),

    #[error("Token has expired (issued {issued_at}, ttl {ttl}s)")]
    Expired { issued_at: u64, ttl: u32 },

    #[error("Token not yet valid")]
    NotYetValid,

    #[error("Signature verification failed")]
    SignatureInvalid,

    #[error("Payload decryption failed")]
    DecryptionFailed,

    #[error("Buffer too short: need {need}, have {have}")]
    BufferTooShort { need: usize, have: usize },

    #[error("Mutation counter replay: token counter {token} <= chain counter {chain}")]
    ReplayDetected { token: u64, chain: u64 },

    #[error("Entropy certification failed: compression ratio {0:.3} indicates non-random data")]
    LowEntropy(f64),

    #[error("Nonce reuse detected")]
    NonceReuse,

    #[error("Key generation failed")]
    KeyGenFailed,

    #[error("Serialization error: {0}")]
    SerializationError(String),

    #[error("Claims field missing: {0}")]
    MissingClaim(String),
}

pub type QVResult<T> = Result<T, QVError>;