Crate parley_core 

Parley core domain types.

This crate defines the wire types and identifiers for the Parley protocol as specified in spec/v0.1.md (with auth refactored per spec/v0.4.md §2). Types are deliberately thin: this crate contains no business logic, no I/O, no traits. It is depended on by every other crate in the workspace.

Re-exports

pub use keys::derive_auth_mldsa;

pub use keys::derive_identity_ed25519;

pub use keys::SEED_BYTES;

Modules

keys

Hierarchical key derivation from a single root seed.

pow

Hashcash-style proof-of-work for identity registration. Spec: spec/v0.5.md §3.

Structs

AgentPubkey

Ed25519 public key (32 bytes). Wire format is base64url-no-pad (43 chars).

BlobId

Channel

ChannelId

Message

MessageId

NetworkId

Network identifier, e.g. "parley-mainnet". Format: [a-z0-9-]{1,64}, no leading or trailing hyphen. See spec §4.

Nonce

ParsedSealed

Parsed sealed-sender header.

ParsedSignature

Parsed Parley-Signature header.

Seq

Monotonic per-channel message sequence number. Starts at 1, dense (no gaps).

Enums

ChannelKind

How a channel handles privacy and encryption.

CoreError

MessageType

Message type discriminator.

MlDsaError

SealedTokenError

SignatureParseError

SignatureVerifyError

Constants

EMPTY_BODY_SHA256

SHA-256 of the empty byte sequence, base64url-no-pad. Used for the body-hash field of requests with no body. 43 chars.

IDEMPOTENCY_RETENTION_SECS

Minimum window servers must retain idempotency records, in seconds.

MAX_IDEMPOTENCY_KEY_BYTES

Maximum size of an Idempotency-Key header value, in bytes.

MAX_INTRO_BYTES

Maximum size of a contact-request intro message, in UTF-8 bytes.

MAX_MLS_CONTENT_BYTES

Maximum size of an MLS message content field (base64url-encoded bytes on the wire). Generous to accommodate large group commits.

MAX_POST_CONTENT_BYTES

Maximum size of a signed public post’s content, in UTF-8 bytes.

MAX_REACTION_BYTES

Maximum size of a reaction token (e.g. “like”), in UTF-8 bytes.

MAX_TEXT_CONTENT_BYTES

Maximum size of a text message content field, in UTF-8 bytes.

ML_DSA_PUBKEY_BYTES

ML-DSA-65 (FIPS 204) public/verification key length, in bytes.

ML_DSA_SIG_BYTES

ML-DSA-65 (FIPS 204) signature length, in bytes.

NONCE_RETENTION_SECS

Minimum window for which servers must remember nonces, in seconds. Must be at least 2× TIMESTAMP_WINDOW_SECS so an edge-of-skew request cannot be replayed by walking the clock.

POST_CONTEXT

Domain-separation tag for signed public posts. Pinned as the first line of the canonical post string so a post signature can never be confused with an HTTP-auth signature (different first line + grammar).

SEALED_KEY_BYTES

Length of the per-(channel, epoch) sealed-sender key, in bytes.

SEALED_LABEL

MLS exporter label for deriving the sealed-sender root secret.

SEALED_SIGNATURE_VERSION

Signature version for sealed-sender posts. Distinct from the v2 identified header (which carries agent + Ed25519/ML-DSA sigs); a sealed header carries a channel-scoped MAC token and NO sender identity.

SIGNATURE_HEADER

HTTP header name carrying the Parley signature.

SIGNATURE_VERSION

Signature scheme version. Bump on incompatible changes to the canonical string or header grammar.

TIMESTAMP_WINDOW_SECS

Maximum allowed |now - ts| in seconds for signature freshness.

Functions

body_sha256_b64url

Compute SHA-256 of a body and base64url-no-pad encode it.

build_header_value

Build the Parley-Signature header value (v2, hybrid).

build_sealed_header_value

Build the sealed-sender Parley-Signature header value (v3). Note there is NO agent field — that is the whole point.

canonical_query_string

Canonicalize a raw query string per spec §2.2: parse, sort by key then value, percent-encode each pair, rejoin with &.

canonical_string

Build the canonical string-to-sign per spec §2.2.

derive_sealed_post_key

Derive the per-(channel, epoch) posting-MAC key from the MLS exporter secret (exported under SEALED_LABEL with the channel id as context). All members compute the same value; the relay is handed it to verify tokens. HKDF info-separates it so it can’t be confused with other uses of the exporter secret.

ml_dsa_sign

Sign a canonical string with an ML-DSA-65 key. Returns raw signature bytes (ML_DSA_SIG_BYTES long). Uses hedged (randomized) signing.

ml_dsa_verify

Verify an ML-DSA-65 signature over canonical against raw verification key bytes. Both pubkey_bytes and sig_bytes must be exactly the fixed FIPS 204 lengths or this returns MlDsaError.

parse_header_value

Parse a Parley-Signature header value per spec §2.1.

parse_sealed_header_value

Parse a sealed-sender (v=3) Parley-Signature header.

post_canonical_string

Build the canonical string for a signed public post or reply. Binds only author-controlled fields (NOT the server-assigned seq/message_id) so any third party can reproduce and verify it offline from the stored row.

sealed_canonical_string

Build the canonical string a sealed-post token MACs. Nine LF-joined lines:

sealed_token_mac

Compute the sealed-post token: HMAC-SHA256(post_key, sealed_canonical).

sign_post

Sign a post canonical string with an Ed25519 identity key. Returns the 64-byte detached signature that travels alongside the post.

verify_post

Verify a detached post signature against the author’s pubkey. Same Ed25519 check as request auth, but over a post canonical string.

verify_sealed_token

Constant-time verify of a sealed-post token.

verify_signature

Verify an Ed25519 signature against a canonical string.

Type Aliases

AuthKeyPair

MLDSA65SigningKey