Skip to content
Все главы гайда

Cryptography by default

Primitives and the identity-encryption flow used for private single-destination traffic.

Primitive inventory

Primitive inventory

Reticulum-Go matches the Python reference on-wire crypto. The suite is Curve25519-based (X25519 and Ed25519), SHA-256, HKDF-SHA256, AES-256-CBC, and HMAC-SHA256. This is not TLS and not AEAD unless a future coordinated protocol change adds that.

  • X25519 for ECDH, ratchets, and related key agreement
  • Ed25519 for announce signatures and related authentication
  • AES-256-CBC with PKCS#7 where the reference uses CBC
  • HMAC-SHA256 authenticates identity ciphertext before decrypt

Identity keys

X25519 + Ed25519

ECDH / HKDF

Ephemeral key agreement, key expansion

AES-256-CBC + HMAC-SHA256

Encrypt and authenticate ciphertext

Wire token

On-wire identity ciphertext

Both stacks speak the same on-wire crypto vocabulary

import RNS

# Identity holds X25519 (encryption) + Ed25519 (signing) material.
identity = RNS.Identity()
print(identity.hash)

Шаг 1 из 4