Xio.Crypto 1.0.8

Xio.Crypto

Cryptographic primitives for the XIO distributed naming system: BLAKE3 and SHA-256 hashing, Ed25519 signing and verification, and Sparse Merkle Tree proof verification. The library implements none of these algorithms itself; it wraps Blake3 for BLAKE3, the .NET runtime for SHA-256, and NSec.Cryptography for Ed25519 behind a small, testable service surface.

Install

dotnet add package Xio.Crypto

Register

using Xio.Crypto;

services.AddXioCrypto();

This registers IHashService, ISignatureService, IProofVerificationService, the IXioCryptoService facade, and ICryptoUtilities.

Hashing

IHashService computes and verifies BLAKE3 (primary, internal) and SHA-256 (interop) hashes, from either a byte buffer or a stream:

public sealed class Example(IHashService hashService)
{
    public async Task<byte[]> Blake3Async(ReadOnlyMemory<byte> data)
    {
        var response = await hashService.ComputeBlake3HashAsync(new XioComputeHashRequest(data));
        return response.Hash.ToArray();
    }

    public async Task<bool> VerifyAsync(ReadOnlyMemory<byte> data, ReadOnlyMemory<byte> expected)
    {
        var request = new XioVerifyHashRequest(data, expected);
        var response = await hashService.VerifyBlake3HashAsync(request);
        return response.IsValid;
    }
}

Signatures

ISignatureService generates Ed25519 key pairs and signs or verifies data over the raw message bytes:

public sealed class SigningExample(ISignatureService signatureService)
{
    public async Task<byte[]> SignAsync(ReadOnlyMemory<byte> privateKey, ReadOnlyMemory<byte> data)
    {
        var request = new XioSignDataRequest(privateKey, data);
        var response = await signatureService.SignDataAsync(request);
        return response.Signature.ToArray();
    }

    public async Task<bool> VerifyAsync(
        ReadOnlyMemory<byte> publicKey, ReadOnlyMemory<byte> data, ReadOnlyMemory<byte> signature)
    {
        var request = new XioVerifySignatureRequest(publicKey, data, signature);
        var response = await signatureService.VerifySignatureAsync(request);
        return response.IsValid;
    }
}

IProofVerificationService verifies Sparse Merkle Tree inclusion and exclusion proofs over BLAKE3-hashed trees; see IXioCryptoService for the unified facade covering all three domains.

Dependencies

Delegates to Blake3, Microsoft.Extensions.DependencyInjection.Abstractions / Microsoft.Extensions.Logging.Abstractions, and NSec.Cryptography; SHA-256 comes from the .NET runtime itself.

License

Licensed under the XI Objects Binary License. You may use, copy and redistribute the package unmodified; modification is not permitted. Installing the package requires accepting the license. See LICENSE.txt for the full terms.