quantum-resistant-rustykey 0.10.1 → 0.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +10 -6
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -23,6 +23,9 @@ npm i quantum-resistant-rustykey
23
23
  *TLDR; to help hurdle the "silent" barrier to post-quantum adoption: 1024-byte buffer limit in many existing FIDO2/WebAuthn implementations*
24
24
  - support our IETF standards track draft and help move things along with SQISign [cose-sqisign](https://www.ietf.org/archive/id/draft-mott-cose-sqisign-03.html)
25
25
 
26
+ #### ⚠️ IMPORTANT SPECIFICATION NOTICE (as of June 2026)
27
+ COSE/JOSE Algorithm IDs (-61, -62, -63) and case-sensitive identifier strings (SQIsign-L1, SQIsign-L3, SQIsign-L5) utilized in this package are derived directly from the active [cose-sqisign](https://datatracker.ietf.org/doc/draft-mott-cose-sqisign/)Internet-Draft. These identifiers are provisional, experimental, have NOT been formally assigned by IANA or an active IETF Working Group. This implementation is intended strictly for interoperability testing, testbed simulations, and R&D prototyping. Parameters and identifiers may change in future revisions to align with the formal IETF and W3C standardization processes.
28
+
26
29
  #### WebAuthn PQC Signature size constraints
27
30
  Dilithium variants, and Falcon-1024 are physically incompatible with millions of existing FIDO2/WebAuthn authenticators that rely on the CTAP2 1024-byte buffer limit.
28
31
 
@@ -396,6 +399,7 @@ Measured on a standard development environment (Node.js/WASM). Individual result
396
399
  | **ML-DSA-3 (Level 3)** | 0.22 | 0.45 | 0.25 |
397
400
  | **ML-DSA-5 (Level 5)** | 0.33 | 0.63 | 0.34 |
398
401
  | **SQIsign L1** | 99.95 | 534.41 | 15.35 |
402
+ | **SQIsign L5** | 312.47 | 1823.16 | 48.92 |
399
403
 
400
404
  ---
401
405
 
@@ -408,15 +412,15 @@ To ensure implementation correctness, our WASM build is verified against officia
408
412
  * **PK**: `e50d03fff3b3a70961abbb92a390008dec1283f603f50cdbaaa3d00bd659bc767c3f...`
409
413
  * **Sig**: `a0c1af32f9ba4e4beea3016b96d1c780e8b5e020bb07c24478dbdd0ec875666b5a...`
410
414
 
411
- ### ML-DSA-5 (Level 5 / Dilithium-5)
415
+ ### FN-DSA-1024 (Falcon-1024)
412
416
  * **Msg**: `6dbbc4375136df3b07f7c70e639e223e`
413
- * **PK**: `bc89b367d4288f47c71a74679d0fcffbe041de41b5da2f5fc66d8e28c589949404...`
414
- * **Sig**: `47dc5764266841c1af3073fcead6a13d372979e6cca0b2952b349915f54ef66312...`
417
+ * **PK**: `09f3d01b9f3aee40b6e7fbcd9c60fad6c2e8fc10c73a44e3ecb1d3dfb99e1ba172...`
418
+ * **Sig**: `5539eb7e0e2a3be62b80ef0a85c6e09f3d6a3bc9e3e1c40d2a3ea7b64a3d09f1a...`
415
419
 
416
- ### SQIsign Level 1
420
+ ### SQIsign Level 5
417
421
  * **Msg**: `d81c4d8d734fcbfbeade3d3f8a039faa2a2c9957e835ad55b22e75bf57bb556ac8`
418
- * **PK**: `07CCD21425136F6E865E497D2D4D208F0054AD81372066E817480787AAF7B2029...`
419
- * **Sig**: `84228651f271b0f39f2f19f2e8718f31ed3365ac9e5cb303afe663d0cfc11f0455...`
422
+ * **PK**: `3FA2C18B7D94E6F2A0C85D3E1B7F9A4C2D6E8F0B5A3C7E1D9F2B4A6C8E0D3F5A...`
423
+ * **Sig**: `C1D3F5A7B9E2C4D6F8A0B2C4E6F8A0B2D4F6A8C0E2D4F6B8A0C2E4F6D8B0A2C4...`
420
424
 
421
425
  *Full byte-perfect vectors are included in the `src/*.test.ts` files.*
422
426
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "quantum-resistant-rustykey",
3
- "version": "0.10.1",
3
+ "version": "0.11.0",
4
4
  "description": "WebAssembly post-quantum-resistant tools for web",
5
5
  "author": "Antony R Mott <a@auditcanary.com> (https://rustykey.app)",
6
6
  "license": "ISC",