feat(ca): decentralized threshold CA with RFC 9591 FROST, single-round enrollment, and ROAST (#39) by vxfemboy · Pull Request #180 · femboyisp/yip

feat(ca): add FROST threshold dealer generation and certificate signing compatibility (tasks 1-2)

vxfemboy

committed

ac2759c

feat(ca): implement interactive Distributed Key Generation (DKG) protocol (task 3)

vxfemboy

committed

0a8975d

feat(ca): implement binary RPC framing and enrollment PoP verification (task 4)

vxfemboy

committed

0e52bcc

feat(ca): implement rollback-immune EphemeralNonceVault and signer policy engine (task 5)

vxfemboy

committed

c56a577

feat(ca): implement ROAST asynchronous coordinator with Byzantine fault tolerance (task 6)

vxfemboy

committed

07a4303

feat(ca): implement proactive share refresh with CVE-2025-58359 guard and lost share repair (task 7)

vxfemboy

committed

6dcee72

feat(ca): implement yip-ca serve and yip-ca enroll network daemons (task 8)

vxfemboy

committed

42d0e85

feat(daemon): implement automated 70% TTL certificate renewal and control hooks (task 9)

vxfemboy

committed

9b36b9f

test(netns): add end-to-end threshold CA enrollment and renewal netns test (task 10)

vxfemboy

committed

59ed854

ci: fix cargo-deny unmaintained advisory and cargo-shear unused dependencies

vxfemboy

committed

7eb86b7

docs: comprehensive guides, architecture diagrams, examples, and changelog for decentralized threshold CA (#39)

vxfemboy

committed

346d11d

docs(readme): polish landing page hierarchy, fix mermaid syntax, and elevate threshold CA hero narrative

vxfemboy

committed

4fd23c4

Navigation Menu

Repository navigation

feat(ca): decentralized threshold CA with RFC 9591 FROST, single-round enrollment, and ROAST (#39) - #180

feat(ca): decentralized threshold CA with RFC 9591 FROST, single-round enrollment, and ROAST (#39)#180
vxfemboy merged 12 commits into
mainfrom
feat/threshold-ca

Commits on Oct 27, 2026

feat(ca): add FROST threshold dealer generation and certificate signing compatibility (tasks 1-2)

feat(ca): implement interactive Distributed Key Generation (DKG) protocol (task 3)

feat(ca): implement binary RPC framing and enrollment PoP verification (task 4)

feat(ca): implement rollback-immune EphemeralNonceVault and signer policy engine (task 5)

feat(ca): implement ROAST asynchronous coordinator with Byzantine fault tolerance (task 6)

feat(ca): implement proactive share refresh with CVE-2025-58359 guard and lost share repair (task 7)

feat(ca): implement yip-ca serve and yip-ca enroll network daemons (task 8)

feat(daemon): implement automated 70% TTL certificate renewal and control hooks (task 9)

test(netns): add end-to-end threshold CA enrollment and renewal netns test (task 10)

ci: fix cargo-deny unmaintained advisory and cargo-shear unused dependencies

docs: comprehensive guides, architecture diagrams, examples, and changelog for decentralized threshold CA (#39)

docs(readme): polish landing page hierarchy, fix mermaid syntax, and elevate threshold CA hero narrative