History

dev c57ed4869c Spec v0.8.2: corrections from the formal review A formal review of the whole v0.8.2 text found it approvable after these corrections, recorded in §76 ("Correcciones de la revisión formal"): - §27 no longer calls header_binding the authenticity of PUBLIC_HEADER: it binds the header to the opened control, never authorship or date (§55.1); the age MAC only protects against whoever lacks the file key. - §63 steps 9 and 10: a network source (relay, Release API, cache) MUST verify every response and gives ERR_RELEASE_UNAVAILABLE at step 9 when none verifies; the step-10 codes are for a directly supplied release. The reference already behaved so; TestReleaseFromANetworkSource pins both paths. - §54 and §72: registrations declare the objects and arrays where an extension may appear, and a known extension out of place counts as unknown there. The reference gains the optional extension.Placement interface, used at steps 4, 9.a and 14. - §63 step 11 fixes the GT serialization hashed by H2 (kilic/kyber order) with the frozen vector H2(e(G1, G2))[:16] = cb87319f..., shared as testdata/vectors/tlock_ibe.json; H2-H4 are cited to drand/kyber. - Step 5 makes the SEALED_CONTROL read mandatory, step 15 names ERR_HEADER_BINDING, §21 makes capsule_id 16 CSPRNG bytes a MUST, §76 is made accurate (four dk1.json vectors, the §36 time_only rule, two cases rewritten against the texts that really existed), and editorial fixes in §5, §36, §55.1, §69.1 and §77. §73 lists the three new decisions. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>		2 weeks ago
..
DateKeys_Protocol_Specification_v0.8.2.md	Spec v0.8.2: corrections from the formal review	2 weeks ago
README.md	Spec v0.8.2: corrections from the formal review	2 weeks ago
datekeys.cddl	Spec v0.8.2 amendment: canonical point encoding; no library error text	2 weeks ago

README.md

Specification

DateKeys_Protocol_Specification_v0.8.2.md: frozen copy of the normative draft v0.8.2 (26 September 2026) implemented by this module. SHA-256: 96edce44f12debeb456a1101d2c68dfc5946e1b180b01c5bbbb14b809cddb140. v0.8.2 replaces v0.8.1 with one normative change to extensions, refined before release (error precedence, trust model, extension order, and rules the reference had applied without normative text), amended (the canonical encoding of BLS12-381 points and the tlock stanza body) and corrected after a formal review (an invalid release from a network source, the objects and arrays where each extension may appear, the serialization of GT in the tlock H2), all recorded with their reproducible cases in the specification's §76.
datekeys.cddl: the CBOR schemas of the specification as implemented, with the encoding rules CDDL cannot express.

The specification is licensed under the Creative Commons Attribution 4.0 International License (CC-BY-4.0): https://creativecommons.org/licenses/by/4.0/. The code of this repository is licensed separately under Apache-2.0.

Changes to the specification follow its §76: a normative change should answer a reproducible case found through the reference implementation, the CDDL, a fixture, a mutation test, an interoperability test, fuzzing, a second implementation or an external review.