Minimal no_std Ed25519 verification crate for EriX secure boot and related validation paths.
Find a file
Erik Inkinen 0c3c2774d6
All checks were successful
CI / markdown (push) Successful in 3s
CI / test (push) Successful in 18s
Tighten CI markdown policy
2026-05-22 15:10:19 +03:00
.github Tighten CI markdown policy 2026-05-22 15:10:19 +03:00
src Add constant-time operations for field and point arithmetic; enhance signature verification tests 2026-02-26 17:25:01 +02:00
.editorconfig Initial commit 2026-02-26 15:21:49 +01:00
.gitignore Ignore local .ci workspace 2026-04-15 21:52:49 +03:00
.markdownlint-cli2.yaml Tighten CI markdown policy 2026-05-22 15:10:19 +03:00
ARCHITECTURE.md Tighten CI markdown policy 2026-05-22 15:10:19 +03:00
Cargo.toml Update CI policy checks 2026-05-22 15:01:32 +03:00
CODE_OF_CONDUCT.md Tighten CI markdown policy 2026-05-22 15:10:19 +03:00
CONTRIBUTING.md Tighten CI markdown policy 2026-05-22 15:10:19 +03:00
LICENSE Initial commit 2026-02-26 15:21:49 +01:00
README.md Tighten CI markdown policy 2026-05-22 15:10:19 +03:00
ROADMAP.md Tighten CI markdown policy 2026-05-22 15:10:19 +03:00
rustfmt.toml lib-ed25519: drop unstable rustfmt options for stable toolchains 2026-03-23 10:19:54 +02:00
SECURITY.md Tighten CI markdown policy 2026-05-22 15:10:19 +03:00

lib-ed25519

lib-ed25519 provides shared ed25519 primitives and contracts used by EriX components.

EriX is a clean-room, capability-based microkernel operating system written entirely in Rust.

Technical requirements are tracked in the EriX requirements, conventions, and project documentation.

See:

  • docs for design documents, specifications, and development plans.
  • Related architecture repositories for kernel, services, libraries, drivers, and integration tooling.

Purpose of This Repository

This repository implements the EriX Ed25519 library. Its purpose in EriX is to provide reusable Ed25519 primitives and contracts to EriX components.

Functionally, it exposes the Ed25519 APIs, validation tests, and documentation used by dependent repositories. The repository keeps the implementation, interface contracts, tests, and documentation for that behavior in one reviewable ownership boundary.

The maintained responsibilities are:

  • expose the lib-ed25519 crate API for Ed25519 behavior used by dependent components
  • keep data formats, constants, and validation helpers documented and tested
  • preserve clean-room, no-external-crate implementation boundaries
  • maintain compatibility expectations for downstream repositories

Clean-Room Policy

EriX follows a strict clean-room philosophy:

  • No external source code may be copied.
  • No external Rust crates are allowed.
  • No code generation tools that embed third-party code.
  • All code must be authored within the project.

Violations will result in rejection of the contribution.

License

All EriX repositories are licensed under the ISC License.

Development Model

EriX development is modular, deterministic, reproducible, authority-explicit, security-first, and self-hosting oriented.

This repository follows the project roadmap and the validation rules documented in its own roadmap.

Status

Implemented baseline.

Strict parsing/validation and verification APIs are implemented with unit coverage. Remaining work is hardening and broader integration fixture coverage.

See ARCHITECTURE.md and ROADMAP.md.

Governance Principles

lib-ed25519 governance is scoped to reusable Ed25519 contracts shared by dependent repositories.

The scoped governance rules are:

  • It must expose narrow, documented APIs rather than component-specific policy.
  • It keeps wire formats, constants, parsers, and validation helpers deterministic and testable.
  • It preserves clean-room implementation boundaries and does not introduce external crate dependencies.
  • Breaking API or format changes require coordinated updates in every dependent repository.

Library Boundaries

  • lib-ed25519 carries no runtime authority by itself; authority is held by callers that use the library.
  • The crate must not hide ambient I/O, allocation policy, or service discovery behind helper APIs.

Contact

Development occurs in EriX organization and discussions happen in issues and design documents.

No decisions are considered valid without documented rationale.

Maintainers can be reached via email: admin@erikinkinen.fi.