@7h3/protocol 0.1.2 → 0.5.0

package/SECURITY.md

@@ -0,0 +1,70 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please do not open a GitHub Issue for security findings. Use coordinated disclosure instead.
+
+**Send private reports to:** tech@mysms.promo  
+**Subject line:** `[AIP Security] <brief description>`
+
+### What to include
+
+A useful report contains:
+
+- A clear description of the vulnerability and which component it affects
+- Steps to reproduce, ideally as a minimal test case or fixture
+- Your assessment of the impact (confidentiality, integrity, availability, scope)
+- The affected versions (check `package.json` version and the wire version `aip/0.1`)
+- Any suggested fix or mitigation you have in mind (optional but appreciated)
+
+Reports that include a conformance vector demonstrating the issue are especially
+helpful and make the triage process faster.
+
+## Response Timeline
+
+| Event | Target |
+|---|---|
+| Acknowledgement | 48 hours |
+| Triage and severity assignment | 5 business days |
+| Patch for critical/high severity | 14 days from confirmation |
+| Patch for medium/low severity | 60 days from confirmation |
+| Public disclosure | After patch is released and verified |
+
+We ask that reporters hold off on public disclosure until a patch is available.
+If the 14-day critical window is going to slip, we will contact you to agree on
+an extended timeline or coordinated partial disclosure.
+
+## Scope
+
+The following are in scope:
+
+- Envelope signing and verification (`src/aip/`)
+- Canonicalization logic and determinism guarantees
+- Replay-safety (nonce and timestamp validation)
+- Wire format parsing in all three runtimes (TypeScript, Python, Rust)
+- Intent vocabulary validation
+
+Out of scope: third-party dependencies (report those upstream), benchmark
+scripts, and documentation typos.
+
+## Audit Status
+
+No independent third-party security audit has been performed on this codebase
+as of the current release. The protocol design has been reviewed by the
+maintainer against known attack classes for signed messaging systems, but that
+is not a substitute for a formal audit. Reproductions of conformance vectors
+that reveal edge-case signing or deserialization behavior are welcome and
+treated as high-value contributions.
+
+## Hall of Thanks
+
+Researchers who report valid, confirmed vulnerabilities will be acknowledged
+here (with their permission).
+
+_No entries yet._
+
+---
+
+Maintainer: [@IceMasterT](https://github.com/IceMasterT)  
+Package: `@7h3/protocol`  
+License: MIT

package/bench-results/replay-cache-full-1777891033256.json

@@ -0,0 +1,10 @@
+{
+  "generatedAt": "2026-05-04T10:37:13.242Z",
+  "profile": "full",
+  "iterations": 500000,
+  "batchSize": 128,
+  "singleOpsPerSecond": 2046707.947,
+  "batchOpsPerSecond": 1936866.811,
+  "singleUsPerOp": 0.489,
+  "batchUsPerOp": 0.516
+}

package/bench-results/replay-cache-full-1777896317488.json

@@ -0,0 +1,10 @@
+{
+  "generatedAt": "2026-05-04T12:05:17.474Z",
+  "profile": "full",
+  "iterations": 500000,
+  "batchSize": 128,
+  "singleOpsPerSecond": 2196802.03,
+  "batchOpsPerSecond": 2513299.501,
+  "singleUsPerOp": 0.455,
+  "batchUsPerOp": 0.398
+}

package/bench-results/replay-cache-full-1777900993184.json

@@ -0,0 +1,10 @@
+{
+  "generatedAt": "2026-05-04T13:23:13.169Z",
+  "profile": "full",
+  "iterations": 500000,
+  "batchSize": 128,
+  "singleOpsPerSecond": 1943753.028,
+  "batchOpsPerSecond": 2330929.665,
+  "singleUsPerOp": 0.514,
+  "batchUsPerOp": 0.429
+}

package/bench-results/replay-cache-full-1777901019285.json

@@ -0,0 +1,10 @@
+{
+  "generatedAt": "2026-05-04T13:23:39.285Z",
+  "profile": "full",
+  "iterations": 500000,
+  "batchSize": 128,
+  "singleOpsPerSecond": 1650105.21,
+  "batchOpsPerSecond": 2241347.099,
+  "singleUsPerOp": 0.606,
+  "batchUsPerOp": 0.446
+}

package/bench-results/replay-cache-quick-1777870170126.json

@@ -0,0 +1,10 @@
+{
+  "generatedAt": "2026-05-04T04:49:30.121Z",
+  "profile": "quick",
+  "iterations": 50000,
+  "batchSize": 32,
+  "singleOpsPerSecond": 520177.319,
+  "batchOpsPerSecond": 140227.322,
+  "singleUsPerOp": 1.922,
+  "batchUsPerOp": 7.131
+}

package/bench-results/signature-profiles-quick-1775875160079.json

@@ -0,0 +1,85 @@
+{
+  "generatedAt": "2026-04-11T02:39:20.079Z",
+  "profile": "quick",
+  "iterations": 2000,
+  "payloadSizes": [
+    256,
+    1024,
+    4096,
+    16384
+  ],
+  "results": [
+    {
+      "profile": "quick",
+      "payloadBytes": 256,
+      "algorithm": "HS256",
+      "signUsPerOp": 16.5,
+      "verifyUsPerOp": 14.176,
+      "signOpsPerSecond": 60606.367,
+      "verifyOpsPerSecond": 70539.362
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 256,
+      "algorithm": "ED25519",
+      "signUsPerOp": 45.6,
+      "verifyUsPerOp": 119.231,
+      "signOpsPerSecond": 21929.753,
+      "verifyOpsPerSecond": 8387.068
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 1024,
+      "algorithm": "HS256",
+      "signUsPerOp": 23.745,
+      "verifyUsPerOp": 18.396,
+      "signOpsPerSecond": 42113.324,
+      "verifyOpsPerSecond": 54360.747
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 1024,
+      "algorithm": "ED25519",
+      "signUsPerOp": 51.284,
+      "verifyUsPerOp": 106.092,
+      "signOpsPerSecond": 19499.138,
+      "verifyOpsPerSecond": 9425.777
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 4096,
+      "algorithm": "HS256",
+      "signUsPerOp": 18.235,
+      "verifyUsPerOp": 20.365,
+      "signOpsPerSecond": 54839.636,
+      "verifyOpsPerSecond": 49103.017
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 4096,
+      "algorithm": "ED25519",
+      "signUsPerOp": 53.216,
+      "verifyUsPerOp": 101.756,
+      "signOpsPerSecond": 18791.24,
+      "verifyOpsPerSecond": 9827.469
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 16384,
+      "algorithm": "HS256",
+      "signUsPerOp": 33.59,
+      "verifyUsPerOp": 32.805,
+      "signOpsPerSecond": 29770.829,
+      "verifyOpsPerSecond": 30483.215
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 16384,
+      "algorithm": "ED25519",
+      "signUsPerOp": 96.924,
+      "verifyUsPerOp": 141.141,
+      "signOpsPerSecond": 10317.338,
+      "verifyOpsPerSecond": 7085.133
+    }
+  ]
+}

package/bench-results/signature-profiles-quick-1775983539716.json

@@ -0,0 +1,85 @@
+{
+  "generatedAt": "2026-04-12T08:45:39.716Z",
+  "profile": "quick",
+  "iterations": 2000,
+  "payloadSizes": [
+    256,
+    1024,
+    4096,
+    16384
+  ],
+  "results": [
+    {
+      "profile": "quick",
+      "payloadBytes": 256,
+      "algorithm": "HS256",
+      "signUsPerOp": 17.09,
+      "verifyUsPerOp": 16.676,
+      "signOpsPerSecond": 58514.475,
+      "verifyOpsPerSecond": 59965.552
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 256,
+      "algorithm": "ED25519",
+      "signUsPerOp": 48.942,
+      "verifyUsPerOp": 129.521,
+      "signOpsPerSecond": 20432.528,
+      "verifyOpsPerSecond": 7720.783
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 1024,
+      "algorithm": "HS256",
+      "signUsPerOp": 16.402,
+      "verifyUsPerOp": 13.4,
+      "signOpsPerSecond": 60968.249,
+      "verifyOpsPerSecond": 74629.015
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 1024,
+      "algorithm": "ED25519",
+      "signUsPerOp": 41.484,
+      "verifyUsPerOp": 106.096,
+      "signOpsPerSecond": 24105.829,
+      "verifyOpsPerSecond": 9425.432
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 4096,
+      "algorithm": "HS256",
+      "signUsPerOp": 41.471,
+      "verifyUsPerOp": 21.896,
+      "signOpsPerSecond": 24113.328,
+      "verifyOpsPerSecond": 45669.707
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 4096,
+      "algorithm": "ED25519",
+      "signUsPerOp": 53.73,
+      "verifyUsPerOp": 118.702,
+      "signOpsPerSecond": 18611.446,
+      "verifyOpsPerSecond": 8424.459
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 16384,
+      "algorithm": "HS256",
+      "signUsPerOp": 37.261,
+      "verifyUsPerOp": 39.437,
+      "signOpsPerSecond": 26837.366,
+      "verifyOpsPerSecond": 25356.841
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 16384,
+      "algorithm": "ED25519",
+      "signUsPerOp": 120.929,
+      "verifyUsPerOp": 163.363,
+      "signOpsPerSecond": 8269.337,
+      "verifyOpsPerSecond": 6121.336
+    }
+  ]
+}

package/bench-results/signature-profiles-quick-1776237913190.json

@@ -0,0 +1,85 @@
+{
+  "generatedAt": "2026-04-15T07:25:13.190Z",
+  "profile": "quick",
+  "iterations": 2000,
+  "payloadSizes": [
+    256,
+    1024,
+    4096,
+    16384
+  ],
+  "results": [
+    {
+      "profile": "quick",
+      "payloadBytes": 256,
+      "algorithm": "HS256",
+      "signUsPerOp": 22.028,
+      "verifyUsPerOp": 16.82,
+      "signOpsPerSecond": 45396.554,
+      "verifyOpsPerSecond": 59452.295
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 256,
+      "algorithm": "ED25519",
+      "signUsPerOp": 46.164,
+      "verifyUsPerOp": 103.618,
+      "signOpsPerSecond": 21662.042,
+      "verifyOpsPerSecond": 9650.834
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 1024,
+      "algorithm": "HS256",
+      "signUsPerOp": 12.433,
+      "verifyUsPerOp": 12.785,
+      "signOpsPerSecond": 80430.499,
+      "verifyOpsPerSecond": 78216.853
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 1024,
+      "algorithm": "ED25519",
+      "signUsPerOp": 37.853,
+      "verifyUsPerOp": 98.984,
+      "signOpsPerSecond": 26417.71,
+      "verifyOpsPerSecond": 10102.674
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 4096,
+      "algorithm": "HS256",
+      "signUsPerOp": 31.288,
+      "verifyUsPerOp": 21.144,
+      "signOpsPerSecond": 31961.127,
+      "verifyOpsPerSecond": 47295.763
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 4096,
+      "algorithm": "ED25519",
+      "signUsPerOp": 52.753,
+      "verifyUsPerOp": 108.71,
+      "signOpsPerSecond": 18956.391,
+      "verifyOpsPerSecond": 9198.782
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 16384,
+      "algorithm": "HS256",
+      "signUsPerOp": 36.642,
+      "verifyUsPerOp": 32.576,
+      "signOpsPerSecond": 27290.862,
+      "verifyOpsPerSecond": 30697.597
+    },
+    {
+      "profile": "quick",
+      "payloadBytes": 16384,
+      "algorithm": "ED25519",
+      "signUsPerOp": 93.648,
+      "verifyUsPerOp": 140.267,
+      "signOpsPerSecond": 10678.28,
+      "verifyOpsPerSecond": 7129.262
+    }
+  ]
+}

package/bench-results/wire-codecs-full-1777891019803.json

@@ -0,0 +1,93 @@
+{
+  "generatedAt": "2026-05-04T10:36:59.803Z",
+  "profile": "full",
+  "iterations": 100000,
+  "payloadSizes": [
+    256,
+    1024,
+    4096,
+    16384
+  ],
+  "results": [
+    {
+      "profile": "full",
+      "payloadBytes": 256,
+      "format": "compact-json",
+      "encodedBytes": 498,
+      "encodeUsPerOp": 0.871,
+      "decodeUsPerOp": 0.846,
+      "encodeOpsPerSecond": 1147888.7,
+      "decodeOpsPerSecond": 1182094.018
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 256,
+      "format": "binary",
+      "encodedBytes": 426,
+      "encodeUsPerOp": 6.03,
+      "decodeUsPerOp": 2.594,
+      "encodeOpsPerSecond": 165840.776,
+      "decodeOpsPerSecond": 385485.005
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 1024,
+      "format": "compact-json",
+      "encodedBytes": 1269,
+      "encodeUsPerOp": 1.011,
+      "decodeUsPerOp": 0.979,
+      "encodeOpsPerSecond": 989524.233,
+      "decodeOpsPerSecond": 1021032.577
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 1024,
+      "format": "binary",
+      "encodedBytes": 1197,
+      "encodeUsPerOp": 7.83,
+      "decodeUsPerOp": 2.143,
+      "encodeOpsPerSecond": 127710.375,
+      "decodeOpsPerSecond": 466610.385
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 4096,
+      "format": "compact-json",
+      "encodedBytes": 4341,
+      "encodeUsPerOp": 2.405,
+      "decodeUsPerOp": 1.454,
+      "encodeOpsPerSecond": 415830.048,
+      "decodeOpsPerSecond": 687659.376
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 4096,
+      "format": "binary",
+      "encodedBytes": 4269,
+      "encodeUsPerOp": 8.232,
+      "decodeUsPerOp": 3.499,
+      "encodeOpsPerSecond": 121470.1,
+      "decodeOpsPerSecond": 285787.277
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 16384,
+      "format": "compact-json",
+      "encodedBytes": 16632,
+      "encodeUsPerOp": 7.041,
+      "decodeUsPerOp": 6.088,
+      "encodeOpsPerSecond": 142021.041,
+      "decodeOpsPerSecond": 164249.051
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 16384,
+      "format": "binary",
+      "encodedBytes": 16560,
+      "encodeUsPerOp": 12.829,
+      "decodeUsPerOp": 4.781,
+      "encodeOpsPerSecond": 77948.266,
+      "decodeOpsPerSecond": 209141.901
+    }
+  ]
+}

package/bench-results/wire-codecs-full-1777896260964.json

@@ -0,0 +1,93 @@
+{
+  "generatedAt": "2026-05-04T12:04:20.964Z",
+  "profile": "full",
+  "iterations": 100000,
+  "payloadSizes": [
+    256,
+    1024,
+    4096,
+    16384
+  ],
+  "results": [
+    {
+      "profile": "full",
+      "payloadBytes": 256,
+      "format": "compact-json",
+      "encodedBytes": 498,
+      "encodeUsPerOp": 0.725,
+      "decodeUsPerOp": 0.854,
+      "encodeOpsPerSecond": 1379340.728,
+      "decodeOpsPerSecond": 1171266.376
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 256,
+      "format": "binary",
+      "encodedBytes": 426,
+      "encodeUsPerOp": 5.926,
+      "decodeUsPerOp": 2.479,
+      "encodeOpsPerSecond": 168754.579,
+      "decodeOpsPerSecond": 403328.781
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 1024,
+      "format": "compact-json",
+      "encodedBytes": 1269,
+      "encodeUsPerOp": 1.169,
+      "decodeUsPerOp": 1.086,
+      "encodeOpsPerSecond": 855546.881,
+      "decodeOpsPerSecond": 921166.777
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 1024,
+      "format": "binary",
+      "encodedBytes": 1197,
+      "encodeUsPerOp": 7.344,
+      "decodeUsPerOp": 2.558,
+      "encodeOpsPerSecond": 136162.207,
+      "decodeOpsPerSecond": 390905.125
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 4096,
+      "format": "compact-json",
+      "encodedBytes": 4341,
+      "encodeUsPerOp": 2.744,
+      "decodeUsPerOp": 1.614,
+      "encodeOpsPerSecond": 364451.4,
+      "decodeOpsPerSecond": 619485.948
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 4096,
+      "format": "binary",
+      "encodedBytes": 4269,
+      "encodeUsPerOp": 8.049,
+      "decodeUsPerOp": 2.825,
+      "encodeOpsPerSecond": 124237.744,
+      "decodeOpsPerSecond": 354024.566
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 16384,
+      "format": "compact-json",
+      "encodedBytes": 16632,
+      "encodeUsPerOp": 7.81,
+      "decodeUsPerOp": 4.271,
+      "encodeOpsPerSecond": 128044.375,
+      "decodeOpsPerSecond": 234138.851
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 16384,
+      "format": "binary",
+      "encodedBytes": 16560,
+      "encodeUsPerOp": 13.755,
+      "decodeUsPerOp": 4.153,
+      "encodeOpsPerSecond": 72701.905,
+      "decodeOpsPerSecond": 240791.753
+    }
+  ]
+}

package/bench-results/wire-codecs-full-1777901004247.json

@@ -0,0 +1,93 @@
+{
+  "generatedAt": "2026-05-04T13:23:24.247Z",
+  "profile": "full",
+  "iterations": 100000,
+  "payloadSizes": [
+    256,
+    1024,
+    4096,
+    16384
+  ],
+  "results": [
+    {
+      "profile": "full",
+      "payloadBytes": 256,
+      "format": "compact-json",
+      "encodedBytes": 498,
+      "encodeUsPerOp": 0.624,
+      "decodeUsPerOp": 0.702,
+      "encodeOpsPerSecond": 1602360.829,
+      "decodeOpsPerSecond": 1423500.452
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 256,
+      "format": "binary",
+      "encodedBytes": 426,
+      "encodeUsPerOp": 4.988,
+      "decodeUsPerOp": 2.053,
+      "encodeOpsPerSecond": 200491.897,
+      "decodeOpsPerSecond": 487198.326
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 1024,
+      "format": "compact-json",
+      "encodedBytes": 1269,
+      "encodeUsPerOp": 0.869,
+      "decodeUsPerOp": 0.846,
+      "encodeOpsPerSecond": 1150110.357,
+      "decodeOpsPerSecond": 1182337.332
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 1024,
+      "format": "binary",
+      "encodedBytes": 1197,
+      "encodeUsPerOp": 7.191,
+      "decodeUsPerOp": 2.513,
+      "encodeOpsPerSecond": 139070.874,
+      "decodeOpsPerSecond": 398006.723
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 4096,
+      "format": "compact-json",
+      "encodedBytes": 4341,
+      "encodeUsPerOp": 2.528,
+      "decodeUsPerOp": 1.705,
+      "encodeOpsPerSecond": 395510.237,
+      "decodeOpsPerSecond": 586432.501
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 4096,
+      "format": "binary",
+      "encodedBytes": 4269,
+      "encodeUsPerOp": 8.741,
+      "decodeUsPerOp": 2.829,
+      "encodeOpsPerSecond": 114399.142,
+      "decodeOpsPerSecond": 353500.956
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 16384,
+      "format": "compact-json",
+      "encodedBytes": 16632,
+      "encodeUsPerOp": 7.262,
+      "decodeUsPerOp": 3.881,
+      "encodeOpsPerSecond": 137696.221,
+      "decodeOpsPerSecond": 257643.134
+    },
+    {
+      "profile": "full",
+      "payloadBytes": 16384,
+      "format": "binary",
+      "encodedBytes": 16560,
+      "encodeUsPerOp": 12.18,
+      "decodeUsPerOp": 3.845,
+      "encodeOpsPerSecond": 82104.791,
+      "decodeOpsPerSecond": 260069.289
+    }
+  ]
+}