coral-crypto

coral-crypto

Shared Go cryptographic library for the Coral Application Intelligence Mesh and its discovery service. Provides JWT token operations, Ed25519 key management, and certificate fingerprinting, with WebAssembly support for cloudflare workers.

Packages

Usage

import (
    "github.com/AnomalousCoders/coral-crypto/keys"
    "github.com/AnomalousCoders/coral-crypto/jwt"
)

// Generate a key pair
kp, _ := keys.GenerateKeyPair()

// Sign a referral ticket
signer := jwt.NewSigner(kp.PrivateKey, kp.ID)
token, _ := signer.CreateReferralTicket("reef-1", "colony-1", "agent-1", "join")

// Validate against JWKS
jwks := kp.PublicJWKS()
validator, _ := jwt.NewValidator(jwks)
claims, _ := validator.ValidateReferralTicket(token)

Commands

make test             # Run tests with race detection
make vet              # Run go vet
make lint             # Run golangci-lint
make build-wasm       # Compile to WebAssembly (requires TinyGo 0.39.0)
make gen-vectors      # Generate cross-implementation test vectors
make gen-signing-key  # Generate an Ed25519 signing key

WebAssembly

The wasm/ package compiles with TinyGo to produce crypto.wasm, exposing:

• coralCrypto.createReferralTicket(privateKeyB64, keyID, reefID, colonyID, agentID, intent, ttlSeconds) — returns {jwt, expiresAt}
• coralCrypto.verifySignature(tokenString, jwksJSON) — returns {valid}
• coralCrypto.generateKeyPair() — returns {id, privateKey, publicKey, jwk}

Standards

Built on Ed25519/EdDSA with strict algorithm enforcement.

Implements JWT (RFC 7519) and JWK (RFC 7517).