Module crypto 

Modules

adaptive_crypto

Adaptive Crypto Engine

aes_session

High-Performance AES-GCM Session Encryption

cid_chain

Rotating connection-ID chain (WIRE v5 / ε).

header_protection

Header protection (QUIC RFC 9001 §5.4) — the per-packet mask that hides the variable header fields (packet_number ‖ flags ‖ stream_id ‖ epoch ‖ path_id, the 14 bytes at wire offset [1..15] since ε / WIRE v5; [33..47] in v4) from a passive on-path observer.

hybrid_kem

Hybrid KEM: classical ECDH + ML-KEM-768 (FIPS 203, post-quantum).

hybrid_sign

Hybrid Digital Signatures: Ed25519 + ML-DSA-65 (FIPS 204).

kdf

Shared key-derivation helpers (Phase 4.1).

pow

rng

RngProvider — the indirection through which Phantom Protocol obtains cryptographic randomness. Default is OsRng, which delegates to getrandom::getrandom and therefore picks up the platform’s CSPRNG on every supported target (Linux getrandom(2), macOS / iOS CCRandomGenerateBytes, Windows BCryptGenRandom, wasm32 via the js feature → crypto.getRandomValues, etc.).

self_tests

Power-on + conditional self-tests for Phantom Protocol’s cryptographic primitives (FIPS 140-3 §7.7).