No description
  • TeX 65.7%
  • eC 17.7%
  • Zig 10.2%
  • Python 6.4%
Find a file
Markus Maiwald f57fcfa06a
v2 patches: kill migration-artifact carve-out, add Archival Observer / G6, four-layer Sybil framing
- Abstract: Sybil resistance reframed as four-layer composition (nullifier,
  proof-of-cost, QVL trust graph, behavioral admission), not nullifier-centric.
- New section 1.5 Scope of This Paper: identity layer only; KEF consensus,
  settlement, currency, governance, dispute resolution are companion specs.
- Section 3.1: Archival Observer adversary (A_arc) — harvest-now-decrypt-later,
  cited to Babbush-Zalcman-Gidney et al. 2026 quantum resource estimates.
- Section 3.2: G6 Retroactive Unforgeability security goal — forces activation
  deadline discipline (T_act must precede T_crqc or G6 is unattainable).
- Section 4.2: DnakeyProfile table (inclusive / standard / sovereign) with
  Argon2id parameter sets; citizenship-tier-driven, not hardware-class.
- Section 4.4: migration-artifact DID carve-out removed. Footnote rewritten
  and the pre-Phase-5 zeroed-pk paragraph replaced with canonical-from-genesis
  requirement. DIDs committing to zeroed pk_MLDSA are no longer permitted.
- Section 5.2: Option C (deterministic re-keygen) named as normative Lattice
  HD instantiation. Lyubashevsky authorship provenance footnote added.
  Proofs-team verification acknowledged as gating concrete ratification.
- Section 5.7 and Conclusion: 'PQ from genesis' softened to 'PQ at the root
  and KEM from genesis; SoulKey signature hybridization on deadline-bounded
  path'. Cross-reference to SPEC-040 v0.2.0 section 10 for implementation
  supply chain (liboqs during Phase 1, pure-Zig before sovereign Phase 2).
- Section 9.5 Future Work: KEF (Key Event Framework) consensus specification
  explicitly deferred — equivocation detection, fork-choice, Byzantine
  witness thresholds, partition recovery. SPEC-KEF as companion doctrine.
- references.bib: Babbush-Zalcman-Gidney et al. 2026 whitepaper entry
  (Google Quantum AI + Ethereum Foundation + Stanford, dated 2026-03-30).
- PDF rebuilt: 35 pages, 713 KB. pdflatex + bibtex + pdflatex twice.
2026-04-24 16:07:32 +02:00
arxiv v2 patches: kill migration-artifact carve-out, add Archival Observer / G6, four-layer Sybil framing 2026-04-24 16:07:32 +02:00
bench v1: SKH arXiv preprint with phased PQ migration 2026-03-21 17:22:06 +01:00
easycrypt v1: SKH arXiv preprint with phased PQ migration 2026-03-21 17:22:06 +01:00
figures v1: SKH arXiv preprint with phased PQ migration 2026-03-21 17:22:06 +01:00
tamarin v1: SKH arXiv preprint with phased PQ migration 2026-03-21 17:22:06 +01:00
.gitignore v1: SKH arXiv preprint with phased PQ migration 2026-03-21 17:22:06 +01:00
LICENSE v1: SKH arXiv preprint with phased PQ migration 2026-03-21 17:22:06 +01:00
README.md v1: SKH arXiv preprint with phased PQ migration 2026-03-21 17:22:06 +01:00

SKH: Anonymous Root Keys for Quantum-Safe Decentralized Identity

A three-tier hierarchical identity architecture combining post-quantum key exchange, context-separated identities, Sybil resistance, and anonymous root keys -- without blockchain dependency.

Structure

arxiv/          LaTeX source + bibliography for the arXiv preprint
bench/          Benchmark harness (Zig) and comparative benchmarks (Python)
easycrypt/      EasyCrypt formal proofs (HKDF, hybrid sig, KEM)
tamarin/        Tamarin Prover protocol security model

Build

cd arxiv
pdflatex skh-arxiv-v1 && bibtex skh-arxiv-v1 && pdflatex skh-arxiv-v1 && pdflatex skh-arxiv-v1

Reproduce Benchmarks

See bench/README.md.

Reference Implementation

The SKH cryptographic core (Zig) and application layer (Janus) are part of the Libertaria identity stack.

Citation

@misc{maiwald2026skh,
    title         = {SKH: Anonymous Root Keys for Quantum-Safe
                     Decentralized Identity},
    author        = {Markus Maiwald},
    year          = {2026},
    eprint        = {2603.XXXXX},
    archivePrefix = {arXiv},
    primaryClass  = {cs.CR}
}

License

Libertaria Unbound License (LUL-1.0) -- use it, change it, ship it. Attribution required.