docs consolidation work
This commit is contained in:
49
docs/modules/cryptography/README.md
Normal file
49
docs/modules/cryptography/README.md
Normal file
@@ -0,0 +1,49 @@
|
||||
# Cryptography
|
||||
|
||||
**Status:** Implemented
|
||||
**Source:** `src/Cryptography/`
|
||||
**Owner:** Platform Team
|
||||
|
||||
## Purpose
|
||||
|
||||
Cryptography provides pluggable cryptographic primitives supporting regional standards (eIDAS, FIPS, GOST, SM, PQ). Enables sovereign operation with country-specific crypto requirements while maintaining deterministic signing operations.
|
||||
|
||||
## Components
|
||||
|
||||
**Libraries:**
|
||||
- `StellaOps.Cryptography` - Core cryptographic abstractions and plugin loader
|
||||
- `StellaOps.Cryptography.Profiles.Ecdsa` - ECDSA signing profile (NIST curves, secp256k1)
|
||||
- `StellaOps.Cryptography.Profiles.EdDsa` - EdDSA signing profile (Ed25519, Ed448)
|
||||
|
||||
**Plugin Architecture:**
|
||||
Additional profiles can be loaded for:
|
||||
- GOST R 34.10-2012 (Russian Federation)
|
||||
- SM2/SM3/SM4 (China)
|
||||
- Post-quantum signatures (experimental)
|
||||
|
||||
## Configuration
|
||||
|
||||
Cryptographic profiles are configured through module-specific settings (Signer, Attestor, Authority).
|
||||
|
||||
Key features:
|
||||
- Algorithm agility with deterministic output
|
||||
- Offline key management support
|
||||
- HSM/TPM integration capability
|
||||
- Signature scheme negotiation
|
||||
|
||||
## Dependencies
|
||||
|
||||
- .NET Cryptography APIs
|
||||
- Optional: Hardware Security Modules (HSM)
|
||||
- Optional: CryptoPro CSP (for GOST support)
|
||||
|
||||
## Related Documentation
|
||||
|
||||
- Signer Module: `../signer/`
|
||||
- Attestor Module: `../attestor/`
|
||||
- Authority Module: `../authority/`
|
||||
- Air-Gap Operations: `../../24_OFFLINE_KIT.md`
|
||||
|
||||
## Current Status
|
||||
|
||||
Core ECDSA and EdDSA profiles implemented. Plugin architecture supports future regional crypto extensions. Integrated with Signer and Attestor modules for deterministic signing operations.
|
||||
Reference in New Issue
Block a user