Cryptographic registry · 2026.09.1

MiracleMining Versioned Cryptographic Protocol

Canonical encodings, algorithm identifiers, domain separation, typed payloads, nonces, expiry, chain binding, replay protection, migrations, and deterministic test vectors are declared before activation.

Purpose-specific hash suites

Keccak-256: KEM claim authorization only. SHA-256: Salted integrity commitment for one private evidence object. SHA-256: Canonical public commitment to active, verified private evidence metadata. Argon2id: Required future password-storage construction; not the currently evidenced implementation.

Typed wallet authorization

Authorization for one bounded KEM claim. Claimant nonce, sessionId, and proofId are each consumed once; the typed-data domain binds chain and vault. issuedAt cannot be in the future; deadline must be current and no more than seven days after issuedAt. EIP-712 chainId and verifyingContract must exactly match the reviewed release.

Migration boundary

Any field, type, algorithm, or domain change creates a new explicit version. Historical evidence is not silently reinterpreted under a newer verifier.