kxco-post-quantum 1.1.8 → 1.1.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +14 -0
  2. package/package.json +10 -2
package/README.md CHANGED
@@ -5,6 +5,8 @@
5
5
  [![CI](https://github.com/JackKXCO/kxco-post-quantum/actions/workflows/ci.yml/badge.svg)](https://github.com/JackKXCO/kxco-post-quantum/actions/workflows/ci.yml)
6
6
  [![Socket](https://socket.dev/api/badge/npm/package/kxco-post-quantum)](https://socket.dev/npm/package/kxco-post-quantum)
7
7
  [![npm provenance](https://img.shields.io/npm/v/kxco-post-quantum?label=npm%20%E2%9C%93%20provenance)](https://www.npmjs.com/package/kxco-post-quantum)
8
+ [![license](https://img.shields.io/badge/license-MIT-blue)](./LICENSE)
9
+ [![node](https://img.shields.io/node/v/kxco-post-quantum.svg)](https://nodejs.org)
8
10
  [![live verifier](https://img.shields.io/website?url=https%3A%2F%2Fchain.kxco.ai%2Fwallet%2Fverify&up_message=live&up_color=brightgreen&down_message=down&down_color=red&label=production)](https://chain.kxco.ai/wallet/verify)
9
11
 
10
12
  ---
@@ -267,6 +269,18 @@ See [AUDIT.md](./AUDIT.md) for the full statement. Short version:
267
269
  - [`@noble/post-quantum`](https://github.com/paulmillr/noble-post-quantum) — the underlying audited implementation
268
270
  - [RFC 9106 — Argon2](https://datatracker.ietf.org/doc/html/rfc9106)
269
271
 
272
+ ## Security
273
+
274
+ Cryptographic primitives are provided by [`@noble/post-quantum`](https://github.com/paulmillr/noble-post-quantum) and [`@noble/hashes`](https://github.com/paulmillr/noble-hashes) — independently audited by Cure53 (2024). This package does not reimplement any NIST primitive; all ML-DSA-65 and ML-KEM-768 operations delegate entirely to the audited upstream.
275
+
276
+ To report a vulnerability, open a [private security advisory](https://github.com/JackKXCO/kxco-post-quantum/security/advisories/new) or email **security@kxco.ai**.
277
+
278
+ ## Funding
279
+
280
+ Maintained by **Shayne Heffernan** and **John Heffernan** at [KXCO by Knightsbridge](https://kxco.ai).
281
+
282
+ [Knightsbridge Law](https://knightsbridge.law) · [target150.com](https://target150.com) · [livetradingnews.com](https://livetradingnews.com)
283
+
270
284
  ## About KXCO
271
285
 
272
286
  KXCO by Knightsbridge is the unification layer for global trade — settlement, issuance, compliance, custody, trading. Quantum-resistant by design. Visit [kxco.ai](https://kxco.ai).
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "kxco-post-quantum",
3
- "version": "1.1.8",
3
+ "version": "1.1.9",
4
4
  "description": "Production-tested post-quantum cryptography patterns: deterministic key derivation, hybrid webhook signing, and kid fingerprinting. Built on @noble/post-quantum. Used in production at KXCO.",
5
5
  "keywords": [
6
6
  "post-quantum",
@@ -14,7 +14,15 @@
14
14
  "fips-204",
15
15
  "webhook-signing",
16
16
  "quantum-resistant",
17
- "armature"
17
+ "armature",
18
+ "key-derivation",
19
+ "hkdf",
20
+ "deterministic-keys",
21
+ "fingerprint",
22
+ "replay-protection",
23
+ "constant-time",
24
+ "hybrid-signing",
25
+ "non-repudiation"
18
26
  ],
19
27
  "license": "MIT",
20
28
  "author": "KXCO by Knightsbridge <hello@kxco.ai>",