tokens go brrrrrrrr (13¢)
OPERANDI / HAIKU 5.5
⏺ HPKE base mode is in seal and committed as c9885f3. It uses the suite Tinfoil's EHBP pins: DHKEM(X25519, HKDF-SHA256), HKDF-SHA256, AES-256-GCM (IDs 0x0020/0x0001/0x0002). The module is src/crypto/hpke.lisp, and it reuses seal's HKDF and AES-GCM plus natrium's X25519. The RFC 9180 A.1.1 vector passes 8/8 under AES-128-GCM, which exercises the same DHKEM and key schedule. The AES-256 path passes 4/4 against an independent Python cryptography oracle on the same keys. The RFC has no X25519 + AES-256 base vector, so that path rests on the oracle. Offline seal checks are green (0 failures). The full run.lisp hit the 120s limit because of its live network checks, so I didn't run it to completion.
Still open: EHBP also needs the request/response framing (Ehbp-Encapsulated-Key, Ehbp-Response-Nonce), which isn't in seal yet, and the Routstr e2ee-* route hasn't been confirmed as Tinfoil EHBP.
29 iter · 13.031¢, 1413567 prompt (278516 cached)/28031 completion tok, 29 calls
ynniv
npub12a…x6fdh
2026-10-12 02:13:45 UTC
Author Public Key
npub12akj8hpakgzk6gygf9rzlm343nulpue3pgkx8jmvyeayh86cfrus4x6fdhSeen on
wss://relay.mostr.pubPublished at
2026-10-12 02:13:45 UTCEvent JSON
{
"id": "c2c10410c7a5937aa0348e0ad31430bba4d6161699a0a5d40fc3fa131a75defa",
"pubkey": "576d23dc3db2056d208849462fee358cf9f0f3310a2c63cb6c267a4b9f5848f9",
"created_at": 1791771225,
"kind": 1,
"tags": [
[
"r",
"wss://nostr.wine/"
],
[
"r",
"wss://relay.damus.io/"
],
[
"r",
"wss://nostr-pub.wellorder.net/"
],
[
"r",
"wss://nostr.bitcoiner.social/"
],
[
"r",
"wss://nos.lol/"
],
[
"r",
"wss://relay.primal.net/"
],
[
"r",
"wss://premium.primal.net/"
],
[
"r",
"wss://relay.snort.social/"
],
[
"r",
"wss://eden.nostr.land/"
],
[
"r",
"wss://nostr.land/"
],
[
"client",
"Primal Web"
]
],
"content": "tokens go brrrrrrrr (13¢)\n\nOPERANDI / HAIKU 5.5\n\n⏺ HPKE base mode is in seal and committed as c9885f3. It uses the suite Tinfoil's EHBP pins: DHKEM(X25519, HKDF-SHA256), HKDF-SHA256, AES-256-GCM (IDs 0x0020/0x0001/0x0002). The module is src/crypto/hpke.lisp, and it reuses seal's HKDF and AES-GCM plus natrium's X25519. The RFC 9180 A.1.1 vector passes 8/8 under AES-128-GCM, which exercises the same DHKEM and key schedule. The AES-256 path passes 4/4 against an independent Python cryptography oracle on the same keys. The RFC has no X25519 + AES-256 base vector, so that path rests on the oracle. Offline seal checks are green (0 failures). The full run.lisp hit the 120s limit because of its live network checks, so I didn't run it to completion.\n\nStill open: EHBP also needs the request/response framing (Ehbp-Encapsulated-Key, Ehbp-Response-Nonce), which isn't in seal yet, and the Routstr e2ee-* route hasn't been confirmed as Tinfoil EHBP.\n 29 iter · 13.031¢, 1413567 prompt (278516 cached)/28031 completion tok, 29 calls\n",
"sig": "bbd385d9521ed4bf41dd3f01e55bf706d554c529ed6164956789f7be286728d125413513729b227a537c450c17a6c6e345e90c0436dcab2bffe3b9d42c7ef889"
}