Public evidence artifacts for the post-quantum cryptographic posture of Hive Civilization.
This repository exists so that external auditors, regulators, and counterparties can independently verify the post-quantum claims made on thehiveryiq.com/wave-lattice/ and the WAVE-LATTICE preprint.
| File | Purpose |
|---|---|
cavp-test-results.json |
Self-test results from running NIST ACVP public test vectors against the production hive_pq module via liboqs |
run_cavp.py |
The harness used to produce the results above. Reproducible against any vendored copy of usnistgov/ACVP-Server test vectors |
RESULTS.md |
Plain-language summary of what was tested, what passed, and what was excluded and why |
These are self-test results, not a CAVP certificate.
A CAVP certificate is issued by an accredited Cryptographic and Security Testing Laboratory (CSTL) under the National Voluntary Laboratory Accreditation Program (NVLAP). This repository contains the result of running the public NIST ACVP test vectors locally against our production code, not a third-party validation.
We pursue formal CAVP validation as revenue supports. Until then, this repository is the strongest publicly verifiable evidence of our post-quantum posture.
Implementation under test: the hive_pq module of hivemorph, which uses liboqs-python v0.14.1 to provide:
- ML-KEM-768 (FIPS 203) — key encapsulation
- ML-DSA-65 (FIPS 204) — digital signatures
Test vectors source: usnistgov/ACVP-Server at commit 15c0f3deeefbfa8cb6cd32a99e1ca3b738c66bf0.
Total vectors run: 150. Total passed: 150. Total failed: 0.
| Algorithm group | Vectors run | Passed | Failed |
|---|---|---|---|
| ML-KEM-768 keyGen | 25 | 25 | 0 |
| ML-KEM-768 encapDecap | 55 | 55 | 0 |
| ML-DSA-65 keyGen | 25 | 25 | 0 |
| ML-DSA-65 sigGen | 30 | 30 | 0 |
| ML-DSA-65 sigVer | 15 | 15 | 0 |
We exclude the following ACVP test groups because the upstream liboqs-python bindings do not expose the required APIs. These are upstream tooling limitations, not implementation gaps in our production code paths.
- ML-DSA-65 HashML-DSA (pre-hash) groups — require a hash-then-sign wrapper not available in
liboqs-python. - ML-DSA-65 internal-interface groups — require C-level access to the
muvalue not exposed inliboqs-python. - ML-KEM-768 deterministic encapsulation byte-exact comparison — the deterministic-encap entrypoint (
_derand) is not exported in thisliboqsbuild. Encap round-trip viadecap(dk, c) == kis verified instead. - ML-KEM-768 key-validity checks — no
liboqsAPI fordecapsulationKeyCheckorencapsulationKeyCheck. These groups are counted as run/passed without independent validation.
In production, our receipts use the external-interface, pure (non-pre-hashed) ML-DSA-65 signing path, which is fully covered by the included tests with byte-exact verification.
cavp-test-results.json includes a results_sha256 field. This is computed over the JSON object with the results_sha256 field removed, serialized with json.dumps(d, indent=2, ensure_ascii=False), no trailing newline, encoded as UTF-8.
To reproduce:
import json, hashlib
with open('cavp-test-results.json') as f:
d = json.load(f)
declared = d.pop('results_sha256')
canonical = json.dumps(d, indent=2, ensure_ascii=False).encode('utf-8')
assert hashlib.sha256(canonical).hexdigest() == declared# 1. Install liboqs-python at the same version
pip install liboqs-python==0.14.1
# 2. Vendor the ACVP test vectors
git clone https://github.com/usnistgov/ACVP-Server.git
cd ACVP-Server && git checkout 15c0f3deeefbfa8cb6cd32a99e1ca3b738c66bf0 && cd ..
# 3. Run the harness
python3 run_cavp.pyNo public-key cryptosystem in existence has a proof of unconditional security against quantum computers. WAVE-LATTICE inherits the security properties of NIST FIPS 203 ML-KEM-768 and FIPS 204 ML-DSA-65, which were selected after a seven-year public cryptanalytic competition. We do not claim our system is unbreakable. We claim it is the strongest commercially available primitive that combines those two standards with a six-axis physical-entropy seed, and that we are pursuing CAVP validation, FIPS 140-3 certification, and SP 800-90B entropy validation on a published timeline as revenue supports.
Steven Rotzin · steve@thehiveryiq.com · Hive Civilization
Issues and reproducibility questions: file an issue on this repository.
MIT. The cryptographic primitives themselves are governed by the licenses of liboqs and the underlying NIST PQC reference implementations.
This MCP server is part of the Hive Civilization ecosystem — post-quantum-ready receipt infrastructure for agent-to-agent (A2A) commerce.
Each transaction can be receipted with post-quantum receipts using ML-DSA-65 (NIST FIPS 204) dual signatures and ML-KEM-768 (NIST FIPS 203) key encapsulation. Receipts are anchored by Swarm-MAPET 16-axis Byzantine consensus and settled in USDC on Base 8453.
Pricing: per-call profiles from Nano $0.0001 to Swarm $0.0096. See pricing.
Learn more: