Skip to content
Oumuamua Labs
Primitives menu

Primitives

Hekate chiplets that prove ML-DSA, ML-KEM, AES, Keccak-f[1600], SHA-256 and RSA-2048 PKCS#1 v1.5 inside zero-knowledge proofs over binary tower fields.

Updated primitives.md

A primitive is a chiplet, an AIR table or a pipeline of them that a Hekate program attaches to prove a cryptographic operation inside a zero-knowledge proof, or the binary tower field arithmetic the Hekate engine and its chiplets compute in. Hekate proves over those fields with sumcheck and Brakedown commitments, at 100 bits of soundness. The chiplet crates are open source under AGPL-3.0-only, and hekate-math under Apache-2.0.

Chiplets compose over LogUp buses. The RSA chiplet hashes through the SHA-256 chiplet, and the ML-DSA and ML-KEM pipelines hash through Keccak. The host program decides which values a proof publishes; each page lists what its example programs publish and what stays in the witness.

None of the crates has been audited. Commercial licenses for the chiplet crates are available from Oumuamua Labs at info@oumuamua.dev.

Digital signatures

Prove a signature is valid without revealing it: post-quantum ML-DSA (Dilithium) at all three FIPS 204 levels, and RSA-2048 PKCS#1 v1.5.

FIPS 204hekate-pqc ML-DSA Verification Verify post-quantum ML-DSA (Dilithium) signatures in zero knowledge at all FIPS 204 levels, many per proof, without revealing the key or the signature. RFC 8017hekate-rsa RSA-2048 PKCS#1 v1.5 Verification Verify RSA-2048 PKCS#1 v1.5 signatures with SHA-256 in zero knowledge: the modulus is public, the signature and the signed message stay private.

Hashing

Prove you know the data behind a hash without revealing it: Keccak-f[1600] for SHA-3 and SHAKE, and SHA-256.

FIPS 202hekate-keccak Keccak-f[1600] Prove SHA-3, SHAKE128 and SHAKE256 hashes in zero knowledge with a Keccak-f[1600] circuit; your program chains the sponge over the permutation calls. FIPS 180-4hekate-sha2 SHA-256 Prove SHA-256 hashes in zero knowledge: all 64 rounds of the FIPS 180-4 compression function per block, with padding and block chaining in your program.

Encryption and key exchange

Verifiable encryption with post-quantum key exchange: ML-KEM (Kyber) key generation, encapsulation and decapsulation, and AES-128 and AES-256.

FIPS 203hekate-pqc ML-KEM Sender / Receiver Prove post-quantum ML-KEM (Kyber) KeyGen, Encaps and Decaps in zero knowledge at all FIPS 203 levels, with keys and shared secrets kept private. FIPS 197hekate-aes AES-128 and AES-256 Encryption Prove AES-128 and AES-256 encryption in zero knowledge, key expansion included, with the key kept private and constant-time trace generation by default.

Math

Binary tower field arithmetic from GF(2) to GF(2^256): the fields the Hekate engine and its chiplets compute in.

hekate-math Binary Tower Fields Binary tower fields from GF(2) to GF(2^256) in Rust, constant-time by default, PMULL on aarch64: the math core of the Hekate engine and its chiplets.