LibRustySigs

Description

RustySignatures offers high-security, post-quantum digital signature schemes with hedged signatures with easy to use API. It uses the algorithms:

• ShulginSigning (SPHINCS+ Level 5 & ED25519 with hedged signatures)
  • Benefits:
    • Offers Post-Quantum based on Hash-Algorithms and Classical Digital Signature Security based on Elliptic Curves with randomized security.
    • Offers Hedged Signatures, a more secure way of thwarting attacks on both SPHINCS+ and ED25519 signatures.
    • Offers Nonce Input of Ephermal Passwords for better CSPRNG
    • Offers Serialization, Zeroiziation, and other security features.
    • Offers Certificate Creation
    • Offers Easy To Use Public Key using both public keys delimited by a colon.
    • Contains a RustySignature Struct for simple verification.
    • ID_8 and Fingerprint
  • Purpose:
    • Long-Term Security and High Security Environments
    • Digital Integrity
    • Small Public Keys / Small Private Keys
    • Slower Speed at Verification and Signing than most, offering more security and being better suited for long-term security/digital integrity.
  • Key Size:
    • Public Keys
      • SPHINCS+: 64 bytes, or 128 hexadecimal characters
      • ED25519: 32 bytes, or 64 hexadecimal characters.
    • Private Keys:
      • SPHINCS+: 128 bytes, or 256 hexadecimal characters
      • ED25519: 32-64 bytes, or 64-128 hexadecimal character
    • Signatures:
      • SPHINCS+: ~29_000 bytes (signature can be hashed and stored by hash if need be)
      • ED25519: 64 bytes, or 128 hexadecimal characters.
• AnneSigning (Dilithium Level 3 + ED25519)
• PedraSigning (FALCON512/FALCON1024 + ED448)

Certificate System

It offers a certificate system for trust based design with a multitude of different Public Key Infrastructures (PKIs).

• [X59] Public Key Infrastructures
  • SelfSigned
  • Web of Trust
  • Certificate Authority
  • X59 (propiertary)
  • Smart Contracts / Blockchain

RustyFunds

Decentralized Funding Source (DFS) for Rust Projects implemented by Certificate Verification.

RFCS

1. Design of RustyCerts

The design of RustyCerts contains the following:

• A Keypair (ShulginSigning)
• A Certificate Request (Rusty-CertReq)

It uses the hash function:

• Finerprint: BLAKE2B(48 or 384 bits) and SHA3-224
• ID: BLAKE2s(8 bytes)

Contributors

Contributions are welcome :)

LICENSE

APACHE 2.0