suaveplan/openspec/archive/2026-04-19-enterprise-crypto/tasks.md

Archived 2026-04-19: all tasks retroactively ticked; packages shipped under universal/crypto/.

Tasks: enterprise-crypto

• 1. Add crypto catalog (@noble/ciphers, @noble/curves, @noble/hashes) to root package.json
• 2. Scaffold package.json, tsconfig, vite/vitest configs (100 thresholds)
• 3. errors: CryptoError extending SuaveplanError with CRYPTO_CODES
• 4. random: randomBytes with injectable RNG; single module-level crypto.getRandomValues callsite
• 5. compare: constantTimeEqual
• 6. zeroize: zeroize
• 7. hash: sha256/sha384/sha512
• 8. hmac: hmac with algorithm dispatch
• 9. kdf: hkdf, pbkdf2, argon2id with parameter validation
• 10. aead: aeadEncrypt/aeadDecrypt dispatching AES-256-GCM + ChaCha20-Poly1305
• 11. sign: ed25519, ecdsaP256 namespaces
• 12. agree: x25519 namespace
• 13. Cross-cutting tests/: dep-graph, no-disallowed, tree-shake
• 14. Property-based tests via fast-check for every primitive
• 15. Co-located .md per implementation file
• 16. README
• 17. bunx turbo lint typecheck build test:coverage --filter=@suaveplan/crypto --force green at 100/100/100/100
• 18. Publish to Verdaccio at 0.0.0
• 19. Archive change folder to openspec/archive/<yyyy-mm-dd>-enterprise-crypto/