Crypto Examples

This directory contains bounded crypto-analysis topologies for the aeon-logic cover-space audit surface.

Getting Started

What: example material for the crypto topic.
Why: it gives a concrete graph or fixture before you need to understand the full runtime implementation.
How: read one small example first, then run the matching test or benchmark only when you need executable confirmation.
Next: use examples to learn shape; use source READMEs to change behavior.

Families included:

ucan-zk-*: UCAN issuance/verification/delegation plus ZK envelope gating.
aead-kem-*: KDF, session-key, nonce, encrypt/decrypt, and envelope flows.
password-digest-*: offline-risk password digest surfaces for slow/salted, fast/unsalted, truncated, low-work-factor, and toy MD5/reduced-strength comparisons.
recovery-trust-*: socio-technical recovery, approval, audit, trust-freshness, and helpdesk-boundary topologies.
signing-custodial-*: authorization plus custodial signing boundaries.

Each family ships three variants:

*-secure.gg: intended to satisfy the default security claims.
*-weak.gg: intentionally weak but still structurally valid.
*-toy.gg: reduced-strength calibration variant that may produce bounded toy_break findings.
password-digest-md5-toy.gg: explicit MD5 toy calibration surface for validating fast-hash, unsalted, truncation, and toy-break reporting together.

The corresponding crypto-cover-space.test.gg suite verifies the corpus as GG modules.