quantum-resistant-rustykey 0.10.1 → 0.12.0

package/README.md

@@ -23,6 +23,9 @@ npm i quantum-resistant-rustykey
 *TLDR; to help hurdle the "silent" barrier to post-quantum adoption: 1024-byte buffer limit in many existing FIDO2/WebAuthn implementations*
 - support our IETF standards track draft and help move things along with SQISign [cose-sqisign](https://www.ietf.org/archive/id/draft-mott-cose-sqisign-03.html)
 
+#### ⚠️ IMPORTANT SPECIFICATION NOTICE (as of June 2026)
+COSE/JOSE Algorithm IDs (-61, -62, -63) and case-sensitive identifier strings (SQIsign-L1, SQIsign-L3, SQIsign-L5) utilized in this package are derived directly from the active [cose-sqisign](https://datatracker.ietf.org/doc/draft-mott-cose-sqisign/)Internet-Draft. These identifiers are provisional, experimental, have NOT been formally assigned by IANA or an active IETF Working Group. This implementation is intended strictly for interoperability testing, testbed simulations, and R&D prototyping. Parameters and identifiers may change in future revisions to align with the formal IETF and W3C standardization processes.
+
 #### WebAuthn PQC Signature size constraints
 Dilithium variants, and Falcon-1024 are physically incompatible with millions of existing FIDO2/WebAuthn authenticators that rely on the CTAP2 1024-byte buffer limit.
 
@@ -150,6 +153,25 @@ yarn add quantum-resistant-rustykey
 
 ## Usage
 
+### SQISign-webGPU (browser accelerated)
+
+Browser-only accelerated SQISign variants: **SQISign-L1-webGPU**, **SQISign-L3-webGPU**, **SQISign-L5-webGPU**.
+Requires COOP/COEP headers (`crossOriginIsolated`). See [docs/SQISIGN-WEBGPU.md](./docs/SQISIGN-WEBGPU.md).
+
+```typescript
+import {
+  isSqisignWebGpuAvailable,
+  loadSqisignLvl5WebGpu,
+  benchSqisignWebGpu,
+} from "quantum-resistant-rustykey";
+
+if (isSqisignWebGpuAvailable()) {
+  const sq = await loadSqisignLvl5WebGpu();
+  const bench = await benchSqisignWebGpu("lvl5");
+  console.log(bench.steps);
+}
+```
+
 ### Node.js example
 
 ```typescript
@@ -396,6 +418,7 @@ Measured on a standard development environment (Node.js/WASM). Individual result
 | **ML-DSA-3 (Level 3)** | 0.22 | 0.45 | 0.25 |
 | **ML-DSA-5 (Level 5)** | 0.33 | 0.63 | 0.34 |
 | **SQIsign L1** | 99.95 | 534.41 | 15.35 |
+| **SQIsign L5** | 312.47 | 1823.16 | 48.92 |
 
 ---
 
@@ -408,15 +431,15 @@ To ensure implementation correctness, our WASM build is verified against officia
 *   **PK**: `e50d03fff3b3a70961abbb92a390008dec1283f603f50cdbaaa3d00bd659bc767c3f...`
 *   **Sig**: `a0c1af32f9ba4e4beea3016b96d1c780e8b5e020bb07c24478dbdd0ec875666b5a...`
 
-### ML-DSA-5 (Level 5 / Dilithium-5)
+### FN-DSA-1024 (Falcon-1024)
 *   **Msg**: `6dbbc4375136df3b07f7c70e639e223e`
-*   **PK**: `bc89b367d4288f47c71a74679d0fcffbe041de41b5da2f5fc66d8e28c589949404...`
-*   **Sig**: `47dc5764266841c1af3073fcead6a13d372979e6cca0b2952b349915f54ef66312...`
+*   **PK**: `09f3d01b9f3aee40b6e7fbcd9c60fad6c2e8fc10c73a44e3ecb1d3dfb99e1ba172...`
+*   **Sig**: `5539eb7e0e2a3be62b80ef0a85c6e09f3d6a3bc9e3e1c40d2a3ea7b64a3d09f1a...`
 
-### SQIsign Level 1
+### SQIsign Level 5
 *   **Msg**: `d81c4d8d734fcbfbeade3d3f8a039faa2a2c9957e835ad55b22e75bf57bb556ac8`
-*   **PK**: `07CCD21425136F6E865E497D2D4D208F0054AD81372066E817480787AAF7B2029...`
-*   **Sig**: `84228651f271b0f39f2f19f2e8718f31ed3365ac9e5cb303afe663d0cfc11f0455...`
+*   **PK**: `3FA2C18B7D94E6F2A0C85D3E1B7F9A4C2D6E8F0B5A3C7E1D9F2B4A6C8E0D3F5A...`
+*   **Sig**: `C1D3F5A7B9E2C4D6F8A0B2C4E6F8A0B2D4F6A8C0E2D4F6B8A0C2E4F6D8B0A2C4...`
 
 *Full byte-perfect vectors are included in the `src/*.test.ts` files.*
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "quantum-resistant-rustykey",
-  "version": "0.10.1",
+  "version": "0.12.0",
   "description": "WebAssembly post-quantum-resistant tools for web",
   "author": "Antony R Mott <a@auditcanary.com> (https://rustykey.app)",
   "license": "ISC",
@@ -35,26 +35,11 @@
   "files": [
     "dist"
   ],
-  "scripts": {
-    "clean": "rm -rf dist",
-    "lint": "biome check . && tsc --project tsconfig.lint.json",
-    "lint:fix": "biome check --write .",
-    "build:wasm": "node scripts/build-wasm.mjs",
-    "bundle:mlkem": "node scripts/bundle-mlkem.mjs",
-    "bundle:signatures": "node scripts/bundle-signatures.mjs",
-    "build:vendor": "pnpm build:wasm && pnpm bundle:mlkem && pnpm bundle:signatures",
-    "build": "pnpm build:vendor && tsdown",
-    "test": "pnpm build:vendor && vitest run",
-    "verify:dist": "node scripts/verify-dist.mjs",
-    "prepack": "pnpm verify:dist",
-    "prepublishOnly": "pnpm verify:dist",
-    "release": "pnpm verify:dist && changeset publish",
-    "example:browser": "pnpm --filter browser-demo dev"
-  },
   "devDependencies": {
     "@biomejs/biome": "2.4.11",
     "@changesets/cli": "2.30.0",
     "@types/node": "25.6.0",
+    "@webgpu/types": "0.1.71",
     "esbuild": "0.28.0",
     "tsdown": "0.21.8",
     "typescript": "6.0.2",
@@ -62,5 +47,20 @@
   },
   "dependencies": {
     "@noble/post-quantum": "0.6.1"
+  },
+  "scripts": {
+    "clean": "rm -rf dist",
+    "lint": "biome check --config-path ./biome.json ./src ./scripts ./tsconfig.json ./tsconfig.lint.json ./tsdown.config.ts && tsc --project ./tsconfig.lint.json",
+    "lint:fix": "biome check --config-path ./biome.json --write ./src ./scripts ./tsconfig.json ./tsconfig.lint.json ./tsdown.config.ts",
+    "build:wasm": "node scripts/build-wasm.mjs",
+    "bundle:mlkem": "node scripts/bundle-mlkem.mjs",
+    "bundle:signatures": "node scripts/bundle-signatures.mjs",
+    "bundle:accel-worker": "node scripts/bundle-accel-worker.mjs",
+    "build:vendor": "pnpm build:wasm && pnpm bundle:mlkem && pnpm bundle:signatures",
+    "build": "pnpm build:vendor && tsdown && pnpm bundle:accel-worker",
+    "test": "pnpm build:vendor && vitest run",
+    "verify:dist": "node scripts/verify-dist.mjs",
+    "release": "pnpm verify:dist && changeset publish",
+    "example:browser": "pnpm --filter browser-demo dev"
   }
-}
+}