Standard Library: Crypto & Protocol Primitives

A library of cryptographic, TLS 1.3, and HTTP/2 primitives written in pure MIND — no C bindings, no vendored crypto library. Every primitive is verified against the published RFC or NIST known-answer test (KAT) vectors, in keeping with the compiler’s evidence-gated approach: a primitive ships only with its reference vectors passing.

Cryptographic primitives

TLS 1.3 primitives

HTTP primitives

Verification approach

Each module carries its reference vectors as executable checks — AES-GCM against the NIST KATs, the TLS 1.3 handshake against the RFC 8448 keying-material trace, ML-KEM against the FIPS 203 vectors, and so on. The point is the same one the compiler makes elsewhere: a claim ships with the evidence that checks it.

// Shape of the verification harness (illustrative)
// Every primitive module ships a kat_* entry point that
// returns 0 on success and a nonzero vector index on the
// first failing known-answer test.
fn kat_aes128_gcm() -> i64;   // NIST GCM vectors
fn kat_tls13_rfc8448() -> i64; // RFC 8448 handshake replay
fn kat_mlkem768() -> i64;      // FIPS 203 vectors

Roadmap

See also std.io for the syscall surface these modules would pair with, and Determinism for the execution guarantees that apply to this integer-only code.