Expand description
joy-crypt: cryptographic primitives for Joy.
Leaf crate. Owns Argon2id KDF, AES-256-GCM AEAD, Ed25519 sign/verify, seed and zone-key wrapping, Job-bound session wraps, and secret containers. No knowledge of the joy item or auth-token model; that lives in joy-core.
See ADR-039 §“Crate boundary and dependency direction” for the decision that fixes joy-crypt as the leaf crate.
Re-exports§
pub use error::Error;
Modules§
- aead
- AES-256-GCM authenticated encryption with associated data.
- error
- Error type for joy-crypt primitives.
- identity
- Ed25519 identity primitives.
- kdf
- Argon2id and HKDF-SHA256 key derivation.
- pairwise
- Pairwise X25519 ECDH for Crypt zone-key wrapping.
- session_
wrap - Job-bound session wraps.
- wrap
- Seed and key wrapping under a KEK.
- zone
- Zone keys and per-member wraps.