r00tpig/secure-messaging
Watch
1
0
Fork
You've already forked secure-messaging
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

S25: npe adapter matches real send/keygen CLI; config key rotate script

Browse source 
Probe reports usable without enabling PFC_REQUIRE_NPE. Fail-closed if
sender .seed or recipient .npeid is missing.
This commit is contained in:
Scott "R00tPiG Security" Lindsey 2026-09-15 23:19:37 -04:00
commit 203c04051c
1 changed files with 109 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -14,6 +14,8 @@ Config must be a signed wrapper. Unsigned files are rejected. Admin changes
append prev + new + unified diff to a `kind=admin-history` JSONL chain.
`crypto.mode`: `npe` | `lab-xor` | `plain-lab` (see signed payload).
Live ns1 lab uses `lab-xor` until `PFC_REQUIRE_NPE=1` is explicitly cut over.
Live ns1 lab uses `lab-xor`. The real NPE CLI is `npe send|keygen|id`
(not `npe seal`). Probe `GET /v1/npe`. Do not set `PFC_REQUIRE_NPE=1` on
pfc-py-admin until every bus client uses `npe send`.
Not a HIPAA/SOC 2/ISO certificate.