# Latticra Cryptographic Assurance and Key Management Baseline

Status: cryptographic assurance and key management baseline
Source refresh date: 2026-05-26
Scope: cryptographic module boundaries, FIPS/CMVP claim gates, algorithm and parameter inventory, key lifecycle, key storage, key destruction, randomness, self-tests, sensitive-data handling, post-quantum migration planning, Seal metadata, signing authority, and cryptographic non-claims.

This baseline records cryptographic assurance requirements only. The current substrate includes authority-neutral verification, envelope encryption, generated envelope salt/nonce bytes, and local self-test evidence, but it does not implement production cryptography, signing authority, key storage, production key generation, entropy collection, standalone random-bit generation authority, FIPS validation, CMVP submission, CAVP testing, post-quantum migration, compliance, or runtime authority.

## Authoritative Cryptographic Sources

Date checked: 2026-05-26

| Source | Latticra use |
| --- | --- |
| NIST FIPS 140-3 | cryptographic module boundary, security level, and validation vocabulary |
| NIST CMVP FIPS 140-3 standards and validated modules guidance | validation path and claim caveats for validated modules |
| NIST FIPS 186-5 | digital signature standard tracking for future approved signature policy |
| RFC 8032 | Ed25519 deterministic test-vector tracking for the current local verify-only layer |
| NIST FIPS 180-4 | SHA-256 digest vocabulary for current message/artifact digest reporting |
| NIST SP 800-57 Part 1 Rev. 5 | key-management lifecycle, key inventory, metadata, protection, usage period, and compromise vocabulary |
| NIST SP 800-131A Rev. 2 | algorithm and key-length transition vocabulary |
| NIST SP 800-90A Rev. 1 and SP 800-90B | deterministic random bit generation and entropy-source review vocabulary |
| NIST FIPS 203 | ML-KEM post-quantum key-establishment planning vocabulary |
| NIST SP 800-227 | KEM usage, application binding, key-confirmation, KDF, key-separation, and shared-secret lifecycle vocabulary |
| NIST FIPS 204 | ML-DSA post-quantum signature planning vocabulary |
| NIST FIPS 205 | SLH-DSA post-quantum signature planning vocabulary |
| Apple Security Research and Apple corecrypto 2026-05 source release | ML-KEM/ML-DSA reference implementation and formal-verification research source; direct embedding remains blocked by the evaluation-only license |
| Open Quantum Safe liboqs | candidate open-source prototype provider for future no-effect PQC adapter planning; production use remains blocked until license, notice, validation, and side-channel review |
| NSA CNSA 2.0 and post-quantum cybersecurity resources | post-quantum migration planning and no-premature-deployment posture for high-assurance systems |
| NSA/CISA/NIST Quantum-Readiness guidance | inventory-first post-quantum transition planning |
| CISA/FBI Product Security Bad Practices | known-insecure cryptography, weak defaults, and unsupported cryptographic configurations remain blocked |

Authoritative URLs:

```text
https://csrc.nist.gov/pubs/fips/140-3/final
https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-standards
https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules
https://csrc.nist.gov/pubs/fips/186-5/final
https://www.rfc-editor.org/rfc/rfc8032
https://csrc.nist.gov/pubs/fips/180-4/upd1/final
https://csrc.nist.gov/pubs/sp/800/57/pt1/r5/final
https://csrc.nist.gov/pubs/sp/800/131/a/r2/final
https://csrc.nist.gov/pubs/sp/800/90/a/r1/final
https://csrc.nist.gov/pubs/sp/800/90/b/final
https://csrc.nist.gov/pubs/fips/203/final
https://csrc.nist.gov/pubs/sp/800/227/final
https://csrc.nist.gov/pubs/fips/204/final
https://csrc.nist.gov/pubs/fips/205/final
https://security.apple.com/blog/formal-verification-corecrypto/
https://github.com/apple/corecrypto/tree/2026-05
https://github.com/apple/corecrypto/blob/main/License.txt
https://github.com/open-quantum-safe/liboqs
https://openquantumsafe.org/
https://www.nsa.gov/Cybersecurity/Post-Quantum-Cybersecurity-Resources/
https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/article/3498776/post-quantum-cryptography-cisa-nist-and-nsa-recommend-how-to-prepare-now/
https://www.nsa.gov/serve-from-netstorage/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3148990/nsa-releases-future-quantum-resistant-qr-algorithm-requirements-for-national-se/index.html
https://www.cisa.gov/resources-tools/resources/product-security-bad-practices
```

## Current Fields

```text
cryptographic_assurance_key_management_baseline_present=1
cryptographic_assurance_key_management_guard_present=1
seal_crypto_graduation_gate_present=1
seal_crypto_graduation_gate_guard_present=1
seal_ed25519_provider_self_test_present=1
seal_ed25519_provider_self_test_passed=1
seal_ed25519_provider_self_test_key_generation_performed=1
seal_ed25519_provider_self_test_signature_generation_performed=1
seal_ed25519_provider_self_test_signature_verification_performed=1
seal_ed25519_provider_self_test_tampering_rejected=1
seal_ed25519_provider_self_test_private_key_output_emitted=0
seal_ed25519_provider_self_test_signature_output_emitted=0
seal_ed25519_provider_self_test_runtime_authority_granted=0
seal_pqc_integration_frame_present=1
seal_pqc_integration_frame_guard_present=1
seal_pqc_provider_adapter_present=1
seal_pqc_provider_adapter_guard_present=1
seal_hybrid_provider_self_test_present=1
seal_hybrid_provider_self_test_passed=1
seal_hybrid_provider_self_test_authority_neutral=1
seal_hybrid_provider_self_test_ml_kem_parameter_sets_tested=3
seal_hybrid_provider_self_test_records_authenticated_total=3
seal_hybrid_provider_self_test_committed_detached_provider_crypto_cases_total=3
seal_hybrid_provider_self_test_committed_detached_tampering_rejected_total=3
seal_hybrid_provider_self_test_committed_detached_constant_time_compare_cases_total=3
seal_hybrid_provider_self_test_committed_detached_successful_ciphertext_tail_cleared_cases_total=3
seal_hybrid_provider_self_test_committed_detached_successful_plaintext_tail_cleared_cases_total=3
seal_hybrid_provider_self_test_p256_peer_public_keys_reimported=1
seal_hybrid_provider_self_test_p256_ecdh_peer_public_key_only=1
seal_hybrid_provider_self_test_ml_kem_keypair_algorithm_identity_verified_cases_total=3
seal_hybrid_provider_self_test_ml_kem_public_key_reimported_cases_total=3
seal_hybrid_provider_self_test_ml_kem_public_key_algorithm_identity_verified_cases_total=3
seal_hybrid_provider_self_test_ml_kem_encapsulation_public_key_only_cases_total=3
seal_hybrid_provider_self_test_ml_kem_tampered_ciphertext_shared_secret_mismatch_total=3
seal_hybrid_provider_self_test_ml_kem_ciphertext_tampering_rejected_total=3
seal_hybrid_provider_self_test_ml_kem_malformed_ciphertext_length_decapsulation_rejected_total=3
seal_hybrid_provider_self_test_ml_kem_malformed_ciphertext_length_staged_secret_cleared_total=3
seal_hybrid_provider_self_test_wrong_pqc_secret_rejected_total=3
seal_hybrid_provider_self_test_provider_crypto_evidence_bound=1
seal_hybrid_provider_self_test_provider_crypto_cases_total=3
seal_hybrid_provider_self_test_hkdf_provider_cases_total=3
seal_hybrid_provider_self_test_aes_gcm_provider_cases_total=3
seal_hybrid_provider_self_test_commitment_mac_provider_cases_total=3
seal_hybrid_provider_self_test_commitment_constant_time_compare_cases_total=3
seal_hybrid_provider_self_test_random_bytes_ex_cases_total=3
seal_hybrid_provider_self_test_no_legacy_crypto_fallback_cases_total=3
seal_hybrid_provider_self_test_successful_record_tail_cleared_cases_total=3
seal_hybrid_provider_self_test_successful_plaintext_tail_cleared_cases_total=3
seal_hybrid_provider_self_test_transcript_aad_bound=1
seal_hybrid_provider_self_test_ml_kem_public_key_transcript_bound=1
seal_hybrid_provider_self_test_ml_kem_public_key_transcript_bytes_total_nonzero=1
seal_hybrid_provider_self_test_transcript_tampering_rejected_total=3
seal_hybrid_provider_self_test_transcript_tamper_constant_time_compare_cases_total=3
seal_hybrid_provider_self_test_wrong_pqc_secret_constant_time_compare_cases_total=3
seal_hybrid_provider_self_test_secret_output_emitted=0
seal_hybrid_provider_self_test_record_output_emitted=0
seal_hybrid_provider_self_test_runtime_authority_granted=0
q_seal_ml_kem_provider_self_test_present=1
q_seal_ml_kem_provider_self_test_passed=1
q_seal_ml_kem_provider_self_test_authority_neutral=1
q_seal_ml_kem_provider_self_test_keypair_algorithm_identity_verified=1
q_seal_ml_kem_provider_self_test_public_key_reimported=1
q_seal_ml_kem_provider_self_test_public_key_algorithm_identity_verified=1
q_seal_ml_kem_provider_self_test_encapsulation_public_key_only=1
q_seal_ml_kem_provider_self_test_tampered_ciphertext_shared_secret_mismatch=1
q_seal_ml_kem_provider_self_test_tampered_ciphertext_rejected=1
q_seal_ml_kem_provider_self_test_malformed_ciphertext_length_decapsulation_rejected=1
q_seal_ml_kem_provider_self_test_malformed_ciphertext_length_no_secret_output=1
q_seal_ml_kem_provider_self_test_shared_secret_constant_time_compare=1
q_seal_ml_kem_provider_self_test_tampered_ciphertext_constant_time_compare=1
q_seal_ml_kem_provider_self_test_secret_output_emitted=0
q_seal_ml_kem_provider_self_test_ciphertext_output_emitted=0
q_seal_ml_kem_provider_self_test_runtime_authority_granted=0
q_seal_ml_kem_sp800_227_usage_profile_present=1
q_seal_ml_kem_sp800_227_source_bound=1
q_seal_ml_kem_sp800_227_publication_date_recorded=1
q_seal_ml_kem_sp800_227_kem_use_case_review_recorded=1
q_seal_ml_kem_sp800_227_application_protocol_binding_recorded=1
q_seal_ml_kem_sp800_227_key_confirmation_decision_recorded=1
q_seal_ml_kem_sp800_227_kdf_binding_recorded=1
q_seal_ml_kem_sp800_227_domain_separation_reviewed=1
q_seal_ml_kem_sp800_227_shared_secret_lifecycle_reviewed=1
q_seal_ml_kem_sp800_227_failure_handling_reviewed=1
q_seal_ml_kem_sp800_227_key_separation_reviewed=1
q_seal_ml_kem_sp800_227_algorithm_agility_reviewed=1
q_seal_ml_kem_sp800_227_kem_usage_profile_accepted=1
q_seal_ml_kem_sp800_227_required_usage_items_satisfied=30
q_seal_ml_kem_sp800_227_operation_execution_allowed=0
q_seal_ml_kem_sp800_227_shared_secret_emission_allowed=0
q_seal_ml_kem_sp800_227_runtime_authority_granted=0
fips_140_3_boundary_required_before_production_crypto=1
cmvp_validation_path_required_before_fips_claim=1
validated_module_claim_requires_certificate=1
algorithm_parameter_inventory_required=1
approved_algorithm_transition_review_required=1
known_insecure_crypto_forbidden=1
ed25519_rfc8032_test_vector_required=1
authority_neutral_crypto_graduation_required=1
fips_186_5_signature_standard_tracked=1
fips_180_4_digest_standard_tracked=1
fips_203_ml_kem_planning_tracked=1
fips_204_ml_dsa_planning_tracked=1
fips_205_slh_dsa_planning_tracked=1
apple_corecrypto_pqc_reference_tracked=1
apple_corecrypto_embedding_allowed=0
apple_corecrypto_redistribution_allowed=0
apple_corecrypto_code_copied=0
oqs_liboqs_candidate_provider_tracked=1
oqs_liboqs_comparison_provider_allowed=1
oqs_liboqs_linked=0
oqs_liboqs_runtime_used=0
oqs_liboqs_production_use_blocked_until_review=1
hybrid_classical_pqc_transition_required=1
clean_room_pqc_provider_adapter_required=1
clean_room_pqc_provider_adapter_present=1
key_lifecycle_contract_required=1
key_inventory_required=1
key_metadata_protection_required=1
key_storage_contract_required=1
key_zeroization_contract_required=1
key_compromise_response_required=1
randomness_entropy_source_contract_required=1
drbg_review_required=1
self_test_failure_behavior_required=1
side_channel_sensitive_data_review_required=1
post_quantum_migration_inventory_required=1
cnsa_2_pq_planning_tracked=1
non_fips_disclosure_required_if_not_validated=1
seal_crypto_metadata_only_current=0
seal_crypto_authority_neutral_current=1
seal_true_crypto_substrate_present=1
seal_hybrid_envelope_hkdf_provider_api_used=1
seal_hybrid_envelope_hkdf_sha256_digest_bound=1
seal_hybrid_envelope_hkdf_manual_fallback_used=0
seal_hybrid_envelope_aes_gcm_provider_api_used=1
seal_hybrid_envelope_aes_gcm_provider_cipher_fetched=1
seal_hybrid_envelope_aes_gcm_96bit_nonce_configured=1
seal_hybrid_envelope_aes_gcm_128bit_tag_bound=1
seal_hybrid_envelope_aes_gcm_static_cipher_fallback_used=0
seal_hybrid_envelope_random_bytes_ex_api_used=1
seal_hybrid_envelope_random_bytes_strength_bits_requested=256
seal_hybrid_envelope_random_bytes_manual_fallback_used=0
seal_hybrid_envelope_generated_salt_csprng_success=1
seal_hybrid_envelope_generated_nonce_csprng_success=1
seal_hybrid_envelope_aead_nonce_uniqueness_required=1
seal_hybrid_envelope_salt_bound_to_hkdf=1
seal_hybrid_envelope_nonce_bound_to_aead=1
seal_hybrid_envelope_generated_key_nonce_pair_csprng_backed=1
seal_hybrid_envelope_caller_salt_nonce_reuse_guard_required_reported=1
seal_hybrid_envelope_caller_salt_nonce_reuse_tracking_present=1
seal_hybrid_envelope_caller_salt_nonce_reuse_guard_capacity=64
seal_hybrid_envelope_caller_salt_nonce_reuse_guarded_encrypt_rejects_reuse_before_kdf=1
seal_hybrid_envelope_caller_salt_nonce_reuse_guarded_encrypt_clears_reused_outputs=1
seal_hybrid_envelope_caller_salt_nonce_reuse_guarded_committed_encrypt_rejects_reuse_before_kdf=1
seal_hybrid_envelope_caller_salt_nonce_reuse_guarded_committed_encrypt_clears_commitment=1
seal_hybrid_envelope_successful_ciphertext_tail_cleared=1
seal_hybrid_envelope_successful_plaintext_tail_cleared=1
seal_hybrid_envelope_successful_record_tail_cleared=1
seal_hybrid_envelope_cli_commitment_output=redacted
seal_hybrid_envelope_cli_record_buffer_zeroized=1
seal_hybrid_envelope_cli_committed_ciphertext_buffer_zeroized=1
seal_hybrid_envelope_cli_committed_secret_outputs_zeroized=1
seal_hybrid_envelope_cli_recovered_plaintext_buffer_zeroized=1
seal_hybrid_envelope_cli_committed_recovered_plaintext_buffer_zeroized=1
seal_hybrid_envelope_cli_committed_tamper_plaintext_buffer_zeroized=1
seal_hybrid_envelope_cli_committed_detached_envelope_checked=1
seal_hybrid_envelope_cli_committed_detached_commitment_tampering_rejected_before_decrypt=1
seal_hybrid_envelope_commitment_mac_provider_api_used=1
seal_hybrid_envelope_commitment_mac_provider_fetched=1
seal_hybrid_envelope_commitment_mac_hmac_sha256_digest_bound=1
seal_hybrid_envelope_commitment_mac_256bit_key_used=1
seal_hybrid_envelope_commitment_mac_input_streamed=1
seal_hybrid_envelope_commitment_mac_legacy_fallback_used=0
seal_hybrid_envelope_detached_commitment_constant_time_compare=1
seal_hybrid_envelope_record_commitment_constant_time_compare=1
implementation_behavior_changed=1
production_crypto_added=0
signing_authority_granted=0
key_storage_added=0
key_generation_added=0
entropy_collection_added=0
fips_validation_claimed=0
cmvp_submission_performed=0
cavp_testing_claimed=0
post_quantum_migration_performed=0
production_crypto_claim_allowed=0
fips_claim_allowed=0
compliance_claim_allowed=0
external_endorsement_claimed=0
```

## Required Cryptographic Promotion Gate

No future cryptographic verification, signing, encryption, key storage, key generation, key derivation, randomness, release-signing, update-signing, receipt-signing, post-quantum migration, FIPS, CMVP, or production-cryptography claim may be promoted until this gate is complete:

```text
cryptographic_module_boundary_recorded=1
module_interface_inventory_recorded=1
approved_algorithm_inventory_recorded=1
algorithm_parameters_recorded=1
security_strength_recorded=1
algorithm_transition_review_recorded=1
key_types_and_usage_periods_recorded=1
key_generation_path_recorded=1
key_storage_path_recorded=1
key_access_control_recorded=1
key_rotation_and_expiration_recorded=1
key_zeroization_behavior_recorded=1
key_compromise_response_recorded=1
entropy_source_recorded=1
drbg_or_random_bit_generator_recorded=1
self_test_behavior_recorded=1
self_test_failure_mode_recorded=1
sensitive_data_logging_reviewed=1
side_channel_review_recorded=1
validated_module_certificate_recorded_before_fips_claim=1
non_fips_disclosure_recorded_if_unvalidated=1
post_quantum_inventory_recorded=1
pqc_provider_license_review_recorded=1
pqc_clean_room_source_boundary_recorded=1
pqc_provider_adapter_contract_recorded=1
pqc_known_answer_tests_recorded=1
pqc_side_channel_review_recorded=1
pqc_hybrid_transition_review_recorded=1
operator_visible_non_claims_recorded=1
```

Until this gate is complete:

```text
production_crypto_allowed=0
fips_claim_allowed=0
cmvp_claim_allowed=0
release_signing_allowed=0
update_signing_allowed=0
receipt_signing_allowed=0
key_generation_allowed=0
key_storage_allowed=0
key_derivation_allowed=0
entropy_collection_allowed=0
random_bit_generation_allowed=0
post_quantum_migration_claim_allowed=0
post_quantum_key_establishment_allowed=0
post_quantum_signature_allowed=0
cryptographic_module_validation_claim_allowed=0
```

## Seal Boundary

Current Seal crypto-related records include authority-neutral local cryptographic mechanisms and evidence-oriented metadata. They do not grant production cryptography, signing authority, capability enforcement, or runtime authority.

```text
seal_crypto_verify_backend_ready_authority_neutral=1
seal_ed25519_verify_only_authority_neutral=1
seal_crypto_graduation_gate_authority_neutral=1
seal_pqc_integration_frame_authority_neutral=1
seal_pqc_provider_adapter_authority_neutral=1
seal_hybrid_provider_self_test_authority_neutral=1
q_seal_ml_kem_provider_self_test_authority_neutral=1
seal_signing_metadata_only=1
seal_key_material_metadata_only=1
seal_runtime_authority_granted=0
seal_production_crypto_enforcement_claimed=0
```

## Current Evidence

Current supporting evidence:

```text
docs/HIGH_ASSURANCE_SECURITY_BASELINE.md
docs/LATTICRA_SEAL_CRYPTO_VERIFY_BACKEND_CONTRACT.md
docs/LATTICRA_SEAL_CRYPTO_VERIFY_BACKEND_IMPLEMENTATION.md
docs/status/SEAL_CRYPTO_VERIFY_BACKEND_STATUS.md
docs/status/SEAL_ED25519_VERIFY_STATUS.md
docs/LATTICRA_SEAL_CRYPTO_GRADUATION_GATE_IMPLEMENTATION.md
docs/status/SEAL_CRYPTO_GRADUATION_GATE_STATUS.md
docs/LATTICRA_SEAL_PQC_INTEGRATION_FRAME.md
docs/status/SEAL_PQC_INTEGRATION_FRAME_STATUS.md
docs/LATTICRA_SEAL_PQC_PROVIDER_ADAPTER.md
docs/status/SEAL_PQC_PROVIDER_ADAPTER_STATUS.md
docs/LATTICRA_SEAL_HYBRID_PROVIDER_SELF_TEST.md
docs/status/SEAL_HYBRID_PROVIDER_SELF_TEST_STATUS.md
docs/LATTICRA_SEAL_ED25519_PROVIDER_SELF_TEST.md
docs/status/SEAL_ED25519_PROVIDER_SELF_TEST_STATUS.md
latticra-q-seal/docs/LATTICRA_Q_SEAL_ML_KEM_PROVIDER_SELF_TEST.md
latticra-q-seal/evidence/ML_KEM_PROVIDER_SELF_TEST.md
latticra-q-seal/docs/LATTICRA_Q_SEAL_ML_KEM_SP800_227_USAGE_PROFILE.md
latticra-q-seal/evidence/ML_KEM_SP800_227_USAGE_PROFILE.md
SECURITY.md
scripts/test-high-assurance-security-baseline.sh
scripts/test-cryptographic-assurance-key-management-baseline.sh
scripts/test-latticra-seal-crypto-graduation-gate.sh
scripts/test-latticra-seal-ed25519-provider-self-test.sh
scripts/test-latticra-seal-pqc-integration-frame.sh
scripts/test-latticra-seal-pqc-provider-adapter.sh
scripts/test-latticra-seal-hybrid-provider-self-test.sh
scripts/test-latticra-q-seal-ml-kem-provider-self-test.sh
scripts/test-latticra-q-seal-ml-kem-sp800-227-usage-profile.sh
```

## Validation

This baseline is guarded by:

```sh
sh scripts/test-cryptographic-assurance-key-management-baseline.sh
```