Canonical protocol specification for Continuum Ghost Zero-Knowledge Proof Authentication.
Part of the Continuum Ghost authentication platform — The Secret That Doesn't Exist.
This package contains no implementation — only constants, types, and interfaces that define the @2fapi protocol. It is the shared contract between clients and servers.
npm install @2fapi/protocol-spec- Protocol constants: version, domain separation tags, byte lengths
- TypeScript interfaces: TranscriptFields, ProofData, ChallengeData, CommitmentData
- Error codes: canonical error codes for all protocol operations
- Specification documents: canonical Fiat-Shamir transcript format, test vectors
Continuum Ghost uses a Schnorr/Sigma proof system over Ristretto255 with Pedersen commitments:
- Commitment:
C = s·G + r·H(client stores secret, server stores commitment) - Proof: Sigma protocol with Fiat-Shamir transform for non-interactivity
- Security: 128-bit under DLOG assumption in Random Oracle Model
- Transcript: Length-prefixed canonical serialization with domain separation
See spec/protocol.md for the full protocol specification.
Apache-2.0 — Free for any use.