后量子加密通信
密码学验证
Majax 发布结构化且已签名的技术结果，使研究人员、自动化工具和人工智能系统能够直接验证多项密码学属性。
最新公开认证
检查通过
- 已验证算法
- ML-KEM-1024
- 密码学域
- 5
- 证明生成时间
- 2026-08-29 03:15:37 UTC
证明更新
每天生成新的认证
发布的结果并非静态演示。每天的运行都会生成新的临时 ML-KEM 1024 密钥，重新执行五个域的全部检查，生成带日期的新声明并附加新的 Ed25519 签名。
说明页面和公钥保持稳定，以支持长期验证。每次成功运行后，安全清单、声明、认证和签名都会更新。
方法
不暴露生产环境的可复现检查
公开测试套件仅创建临时密钥。它检查密钥生成、封装、解封装、密文篡改以及五个密码学域之间的隔离。结果由独立于 Majax 运行密钥的认证密钥签名。
这些检查不会访问任何消息、媒体、用户账户、内部日志、环境文件、管理令牌或生产机密。
机器可读资源
可直接使用的数据
嵌入数据
当前技术快照
此副本直接嵌入 HTML，以便不执行 JavaScript 或不跟随外部链接的工具仍可读取。
显示 JSON 认证
{
"statement": {
"schema": "https://majax.app/security/schemas/attestation-v2.json",
"schema_version": 2,
"product": "Majax Messenger",
"attestation_type": "automated-self-verification",
"independent_audit": false,
"generated_at": "2026-08-29T03:15:37Z",
"overall_result": "PASS",
"scope": {
"description": "Ephemeral public verification with no production keys or user data",
"production_secrets_accessed": false,
"production_user_data_accessed": false,
"persistent_test_keys": false
},
"architecture": {
"kem_algorithm": "ML-KEM-1024",
"cryptographic_domains": [
"messages",
"voice",
"media",
"rtc",
"identity"
],
"domain_count": 5,
"domain_separation": true,
"rotation_policy": "daily-with-bounded-overlap",
"overlap_seconds": 3600
},
"implementation": {
"verification_binary_sha256": "88B805E34122F91F98F89D30B01BA560C0A0148133753257011900F4CE7D35CA"
},
"tests": {
"domains": [
{
"domain": "messages",
"algorithm": "ML-KEM-1024",
"result": "PASS",
"checks": {
"algorithm_identifier": true,
"mlkem_1024_object_dimensions": {
"public_key": true,
"private_key": true,
"ciphertext": true,
"shared_secret": true
},
"encapsulation_decapsulation_match": true,
"ephemeral_key_uniqueness": true
},
"timings_ms": {
"key_generation": 4.928,
"encapsulation": 1.673,
"decapsulation": 1.485
}
},
{
"domain": "voice",
"algorithm": "ML-KEM-1024",
"result": "PASS",
"checks": {
"algorithm_identifier": true,
"mlkem_1024_object_dimensions": {
"public_key": true,
"private_key": true,
"ciphertext": true,
"shared_secret": true
},
"encapsulation_decapsulation_match": true,
"ephemeral_key_uniqueness": true
},
"timings_ms": {
"key_generation": 1.149,
"encapsulation": 1.504,
"decapsulation": 1.185
}
},
{
"domain": "media",
"algorithm": "ML-KEM-1024",
"result": "PASS",
"checks": {
"algorithm_identifier": true,
"mlkem_1024_object_dimensions": {
"public_key": true,
"private_key": true,
"ciphertext": true,
"shared_secret": true
},
"encapsulation_decapsulation_match": true,
"ephemeral_key_uniqueness": true
},
"timings_ms": {
"key_generation": 1.176,
"encapsulation": 1.078,
"decapsulation": 1.254
}
},
{
"domain": "rtc",
"algorithm": "ML-KEM-1024",
"result": "PASS",
"checks": {
"algorithm_identifier": true,
"mlkem_1024_object_dimensions": {
"public_key": true,
"private_key": true,
"ciphertext": true,
"shared_secret": true
},
"encapsulation_decapsulation_match": true,
"ephemeral_key_uniqueness": true
},
"timings_ms": {
"key_generation": 1.143,
"encapsulation": 1.212,
"decapsulation": 1.141
}
},
{
"domain": "identity",
"algorithm": "ML-KEM-1024",
"result": "PASS",
"checks": {
"algorithm_identifier": true,
"mlkem_1024_object_dimensions": {
"public_key": true,
"private_key": true,
"ciphertext": true,
"shared_secret": true
},
"encapsulation_decapsulation_match": true,
"ephemeral_key_uniqueness": true
},
"timings_ms": {
"key_generation": 1.021,
"encapsulation": 1.549,
"decapsulation": 1.293
}
}
],
"negative": {
"tampered_ciphertext_implicit_rejection": {
"result": "PASS",
"semantics": "decapsulation returns a divergent pseudorandom secret",
"domains": [
{
"domain": "messages",
"result": "PASS",
"decapsulation_ms": 1.345
},
{
"domain": "voice",
"result": "PASS",
"decapsulation_ms": 1.304
},
{
"domain": "media",
"result": "PASS",
"decapsulation_ms": 1.338
},
{
"domain": "rtc",
"result": "PASS",
"decapsulation_ms": 1.275
},
{
"domain": "identity",
"result": "PASS",
"decapsulation_ms": 1.188
}
]
},
"cross_domain_private_key_implicit_rejection": {
"result": "PASS",
"semantics": "a private key from another domain cannot recover the original secret",
"domain_pairs": [
{
"ciphertext_domain": "messages",
"private_key_domain": "voice",
"result": "PASS",
"decapsulation_ms": 1.264
},
{
"ciphertext_domain": "voice",
"private_key_domain": "media",
"result": "PASS",
"decapsulation_ms": 1.248
},
{
"ciphertext_domain": "media",
"private_key_domain": "rtc",
"result": "PASS",
"decapsulation_ms": 1.17
},
{
"ciphertext_domain": "rtc",
"private_key_domain": "identity",
"result": "PASS",
"decapsulation_ms": 1.432
},
{
"ciphertext_domain": "identity",
"private_key_domain": "messages",
"result": "PASS",
"decapsulation_ms": 1.438
}
]
}
},
"maurice_hmac_v2": {
"result": "PASS",
"protocol": "Maurice-HMAC-v2",
"evidence_mode": "independent-reference-model-plus-production-source-binding",
"canonical_form": "METHOD|PATH|TS|NONCE|DEVICE_ID|SHA256(BODY)",
"production_middleware_sha256": "AC5DC96E21230A84E91BE616848EAF92905D388D046EB5886D465C7C373C697E",
"checks": {
"production_source_invariants": {
"canonical_form_present": true,
"strict_hmac_v2_present": true,
"replay_cache_check_present": true,
"replay_rejection_present": true,
"timing_safe_comparison_present": true
},
"valid_canonical_request_accepted": true,
"exact_replay_rejected": true,
"body_mutation_rejected": true,
"path_mutation_rejected": true,
"fresh_nonces_are_distinct": true
}
},
"not_evaluated": {
"signal_mlkem_composition": {
"result": "NOT_EVALUATED",
"reason": "Production composes a KEM envelope inside Signal; the public suite does not execute the Android Signal engine."
},
"signal_forward_secrecy": {
"result": "NOT_EVALUATED",
"reason": "Requires a stateful two-party Signal ratchet harness using the production Android stores."
},
"signal_post_compromise_recovery": {
"result": "NOT_EVALUATED",
"reason": "Requires compromise-and-recovery tests across successive production-compatible Signal ratchets."
},
"application_nonce_management": {
"result": "NOT_EVALUATED",
"reason": "Maurice request nonces are tested here; media, RTC and Android storage nonces require separate application harnesses."
}
}
},
"limitations": [
"This is a signed self-attestation and not an independent certification.",
"The suite uses ephemeral keys and deliberately excludes production secrets and user data."
]
},
"signature": {
"algorithm": "Ed25519",
"encoding": "base64",
"value": "ZexJDtzVDFQQk4iscmE4WPcqnPFMsLzV3xnY1gFn4WGzWDk1DtC48/qjnldEZtp2Vhn20CXkNNC3JLN7+BDBDA==",
"public_key": "/security/public-attestation-ed25519.pem"
}
}