Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

PAXECT-Interface/paxect-aead-hybrid-plugin

Open more actions menu

PAXECT logo

Star this repo CI CodeQL Issues Discussions Security License Release

PAXECT — The Universal Deterministic Bridge

Build once, run anywhere. Connect all operating systems and programming languages through one reproducible, offline-first runtime. 🌐 Learn more about the ecosystem: PAXECT Universal Bridge


Looking for the full bundle (Core + plugins + demos)?
See PAXECT Core Complete →


🌐 PAXECT AEAD Hybrid Plugin — Authenticated Encryption for Every Platform

Status: v1.0.0 — Initial Public Release — October 22, 2025

" Deterministic, offline-first, and reproducible — built for secure data pipelines and NIS2-ready digital hygiene.”

🧩 Overview

The PAXECT AEAD Hybrid Plugin provides secure, deterministic, and streaming authenticated encryption for files, pipelines, and enterprise systems.

It combines AES-GCM (for x86 servers) and ChaCha20-Poly1305 (for ARM and mobile) in a unified hybrid implementation — delivering high performance, zero-dependency encryption that works identically across Linux, macOS, Windows, Android, and iOS.

Built for offline use, reproducible pipelines, and CI/CD automation, it powers everything from edge devices to enterprise cloud nodes.

Plug-and-play with zero dependencies and no vendor lock-in.

⚙️ One plugin. Two algorithms. Zero drift.


⚙️ Key Features

  • 🔐 AEAD Security — Authenticated encryption using AES-GCM and ChaCha20-Poly1305
  • ⚙️ Hybrid Cipher Mode — Auto-selects fastest algorithm per CPU (x86 ↔ ARM)
  • 🔄 Streaming I/O — Works with stdin/stdout for large data pipelines
  • 🧱 Deterministic Output — Bit-for-bit reproducibility across runs
  • 🧠 Zero Dependencies — Runs on pure Python with cryptography backend
  • 🧩 Cross-OS Compatibility — Linux · macOS · Windows · Android · iOS
  • 📊 Enterprise Logging — Structured JSONL logs for observability and audit trails

🌍 Supported Platforms

Operating System Architecture
Linux (Ubuntu, Debian, Fedora) x86_64, ARMv8
Windows 10/11 x86_64
macOS 13+ (Intel / Apple Silicon) arm64, x86_64
Android (via Termux) ARMv7, ARM64
iOS (via Pyto) ARM64
FreeBSD / OpenBSD Experimental
RISC-V Planned

🧠 Core Capabilities

Capability Description
Hybrid Cipher Combines AES-GCM and ChaCha20-Poly1305 seamlessly
Scrypt Key Derivation Adaptive parameters for CPU/memory cost control
Chunked Streaming Framed I/O for large files (1–8 MiB per chunk)
AEAD Verification Each frame verified by authentication tag
Offline Operation No external services or network calls
Cross-Platform Determinism Identical ciphertext across OS boundaries

🚀 Demos Included

All AEAD demos are deterministic, self-contained, and safe to run locally or in CI pipelines. Each demo validates a different reliability or security aspect of the PAXECT AEAD Enterprise Engine.

Demo Script Description Status
01 demo_1_quick_encrypt_decrypt.py Quick AEAD encrypt→decrypt round-trip verification
02 demo_2_cli_stream_pipe.sh Stream encryption using stdin ↔ stdout pipes
03 demo_3_scrypt_tuning.py Scrypt parameter tuning and performance benchmark
04 demo_4_aead_integrity_fail.py Tamper-detection test (auth-tag failure)
05 demo_5_enterprise_integration.py Enterprise integration + SHA-256 verification
06 demo_6_parallel_throughput.py Parallel throughput and scalability benchmark
07 demo_7_cross_platform_smoke.sh Cross-platform determinism check (Linux/macOS/Win)
08 demo_8_fail_and_recover.py AEAD fail → self-recover demonstration (resilience)
09 demo_9_stress_test_aead.py One-minute stability & reliability stress test (100 %)

🧩 Run all demos sequentially

for d in demos/demo_*; do
  echo "▶ Running $d ..."
  chmod +x "$d"
  "$d"
done

Each demo runs fully offline, uses only local files, and produces deterministic results across platforms. Failures—if any—are logged to /tmp/paxect_demo*/ with reproducible output for enterprise validation.


🧩 Architecture Overview

paxect-aead-hybrid-plugin/
├── paxect_aead_enterprise.py     # Core AEAD engine (AES-GCM + ChaCha20-Poly1305)
│                                 # Hybrid streaming encryption with Scrypt key derivation
│                                 # Deterministic, cross-platform, offline-safe
│
├── demos/                        # Enterprise Demo Suite (1–9)
│   ├── demo_1_quick_encrypt_decrypt.py    # Quick round-trip check
│   ├── demo_2_cli_stream_pipe.sh          # Stream I/O test (stdin ↔ stdout)
│   ├── demo_3_scrypt_tuning.py            # Scrypt parameter benchmark
│   ├── demo_4_aead_integrity_fail.py      # Tamper detection / auth tag failure
│   ├── demo_5_enterprise_integration.py   # Logging + SHA-256 verification
│   ├── demo_6_parallel_throughput.py      # Parallel throughput benchmark
│   ├── demo_7_cross_platform_smoke.sh     # Cross-platform determinism validation
│   ├── demo_8_fail_and_recover.py         # AEAD fail → self-recover resilience test
│   └── demo_9_stress_test_aead.py         # 1-minute continuous reliability stress test
│
├── tests/                       # Automated regression and integrity tests
│   ├── test_determinism.py               # Verifies bit-identical output across runs
│   ├── test_recovery_scenarios.py        # Simulates corrupted stream recovery
│   └── test_cross_platform_equivalence.py# Confirms identical hashes on all OS targets
│
├── pytest.ini                    # Pytest configuration for deterministic runs
└── README.md                     # Full documentation, demos, and enterprise guidance

⚙️ Installation

Requirements: Python ≥ 3.10 · cryptography package installed

# Clone repository
git clone https://github.com/<your-org>/paxect-aead-hybrid-plugin.git
cd paxect-aead-hybrid-plugin

# Optional virtual environment
python3 -m venv .venv
source .venv/bin/activate

# Install core dependency
python3 -m pip install cryptography

✅ Verification

Encrypt / decrypt test:

echo "Hello PAXECT" | python3 paxect_aead_enterprise.py --mode encrypt --cipher auto --pass test > test.aead
cat test.aead | python3 paxect_aead_enterprise.py --mode decrypt --pass test

Expected output:

Hello PAXECT

Integrity check:

sha256sum test.aead

🧪 Testing & Coverage

Run the test suite:

python3 -m pytest -v

Sample output:

============================= test session starts ==============================
platform linux -- Python 3.12
collected 8 items

tests/test_aead_hybrid.py::test_aes_roundtrip PASSED
tests/test_aead_hybrid.py::test_chacha_roundtrip PASSED
tests/test_core_full.py::test_bigfile_autochannels PASSED
tests/test_core_quick.py::test_stream_hash PASSED
============================== 8 passed in 1.08s ===============================

📦 Integration in CI/CD

GitHub Actions Example

jobs:
  aead-tests:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: '3.12'
      - name: Run AEAD Tests
        run: pytest -v

📈 Verification Summary

Environment Result
Ubuntu 24.04 (x86_64) ✅ All demos completed deterministically
macOS 14 Sonoma ✅ Identical hashes and performance validated
Windows 11 ✅ Cross-platform reproducibility confirmed
Android (Termux) ✅ AEAD pipeline validated
iOS (Pyto) ✅ Portable execution confirmed

💼 Enterprise Readiness

PAXECT AEAD Hybrid Plugin is designed for enterprise security and reproducibility audits. It supports structured logging (.jsonl), time-stamped traceability, and deterministic replay — making it ideal for compliance, forensic validation, and secure CI/CD pipelines.

Key enterprise benefits:

  • Audit-friendly deterministic encryption
  • Fail-safe authentication and data verification
  • Platform-agnostic deployment (ARM/x86)
  • Ready for long-term maintenance and SLA contracts

PAXECT logo

Star this repo CI CodeQL Issues Discussions Security License Release

PAXECT Core Complete

Status: v1.0.0 — Initial Public Release — October 22, 2025

The curated PAXECT bundle: Core + AEAD Hybrid + Polyglot + SelfTune + Link — with 10 integrated demos, observability, and deterministic performance across OSes.

What it is: the official reference implementation of the PAXECT ecosystem — a verified, reproducible, cross-OS runtime that showcases the multi-OS bridge and in-freq multi-channel architecture in real workflows.

  • Unified Ecosystem: Core + AEAD + SelfTune + Polyglot + Link in one deterministic bundle
  • Reproducibility: bit-identical behavior across Linux, macOS, Windows (best-effort: BSD, mobile shells)
  • Offline-first: zero telemetry, no network dependencies
  • Enterprise-ready: 10 reproducible demo pipelines, audit trail, and metrics endpoints
  • Zero-AI Runtime: SelfTune provides adaptive guardrails without ML or heuristics (no cloud)

Relationship

  • PAXECT Core is a stand-alone OS-level deterministic bridge (plugin-capable).
  • PAXECT Core Complete is the curated bundle that includes Core plus the official plugins and demo suite.
    Use Core when you want a minimal, plug-and-play bridge.
    Use Core Complete when you want the full experience (plugins + demos) out of the box.

Installation

Requirements

  • Python 3.9 – 3.12 (recommended 3.11+)
  • Works on Linux, macOS, Windows, FreeBSD, OpenBSD, Android (Termux), and iOS (Pyto).
  • No external dependencies or internet connection required — fully offline-first runtime.

Optional Utilities

Some demos use these standard tools if available:

  • bash (for demo_05_link_smoke.sh)
  • dos2unix (for normalizing line endings)
  • jq (for formatting JSON output)

Install

git clone https://github.com/PAXECT-Interface/paxect-core-complete.git
cd paxect-core-complete
python3 -m venv venv
source venv/bin/activate      # on Windows: venv\Scripts\activate
pip install -e .

Verify the deterministic core import:

python3 -c "import paxect_core; print('PAXECT Core OK')"

Then run any of the integrated demos from the demos/ folder to validate deterministic reproducibility.


📁 Repository Structure

paxect-core-complete/
├── paxect_core.py
├── paxect_aead_hybrid_plugin.py
├── paxect_polyglot_plugin.py
├── paxect_selftune_plugin.py
├── paxect_link_plugin.py
├── demos/
│   ├── demo_01_quick_start.py
│   ├── demo_02_integration_loop.py
│   ├── demo_03_safety_throttle.py
│   ├── demo_04_metrics_health.py
│   ├── demo_05_link_smoke.sh
│   ├── demo_06_polyglot_bridge.py
│   ├── demo_07_selftune_adaptive.py
│   ├── demo_08_secure_multichannel_aead_hybrid.py
│   ├── demo_09_enterprise_all_in_one.py
│   └── demo_10_enterprise_stability_faults.py
├── test_paxect_all_in_one.py
├── ENTERPRISE_PACK_OVERVIEW.md
├── SECURITY.md
├── CONTRIBUTING.md
├── CODE_OF_CONDUCT.md
├── TRADEMARKS.md
├── LICENSE
└── .gitignore

Modules

Module Purpose
paxect_core.py Deterministic runtime · encode/decode · CRC32 + SHA-256 checksums
paxect_aead_hybrid_plugin.py Hybrid AES-GCM / ChaCha20-Poly1305 encryption for data integrity
paxect_polyglot_plugin.py Cross-language bridge · UTF-safe transformation between runtimes
paxect_selftune_plugin.py Adaptive ε-greedy self-tuning · resource-aware control · no AI
paxect_link_plugin.py Secure inbox/outbox relay · policy validation · offline file sync

PAXECT Architecture


Plugins (Official)

Plugin Scope Highlights Repo
Core Deterministic data container .freq v42 · multi-channel · CRC32 + SHA-256 · cross-OS · offline-first paxect-core-plugin
AEAD Hybrid Encryption & Integrity Hybrid AES-GCM / ChaCha20-Poly1305 — fast, zero dependencies, cross-platform paxect-aead-hybrid-plugin
Polyglot Multi-language bridge Python · Node.js · Go — deterministic pipeline parity paxect-polyglot-plugin
SelfTune 5-in-1 Runtime control & observability Guardrails, backpressure, overhead limits, metrics, and jitter smoothing paxect-selftune-plugin
Link (Inbox/Outbox Bridge) Cross-OS file exchange Shared-folder relay: auto-encode/decode .freq containers deterministically paxect-link-plugin

Plug-and-play: Core operates standalone, with optional plugins attachable via flags or config. Deterministic behavior remains identical across environments.


🧪 Demo Suite (01 – 10)

Run reproducible demos from the repository root:

python3 demos/demo_01_quick_start.py
python3 demos/demo_02_integration_loop.py
python3 demos/demo_03_safety_throttle.py
python3 demos/demo_04_metrics_health.py
bash    demos/demo_05_link_smoke.sh
python3 demos/demo_06_polyglot_bridge.py
python3 demos/demo_07_selftune_adaptive.py
python3 demos/demo_08_secure_multichannel_aead_hybrid.py
python3 demos/demo_09_enterprise_all_in_one.py
python3 demos/demo_10_enterprise_stability_faults.py

All demos generate structured JSON audit logs under /tmp/, verifiable through deterministic SHA-256 outputs.


Testing & Verification

Internal pytest suites validate core reproducibility. End-users can rely on the integrated demo suite (01–10) for deterministic verification. Each demo reports performance, checksum validation, and exit status cleanly.


🔒 Security & Privacy

  • Default mode: offline, zero telemetry.
  • Sensitive configuration via environment variables.
  • AEAD Hybrid is simulation-grade; for production, integrate with verified crypto or HSM.
  • Adheres to Digital Hygiene 2027 and NIS2 security standards.
  • Follows responsible disclosure in SECURITY.md.

🏢 Enterprise Pack

See ENTERPRISE_PACK_OVERVIEW.md for extended features and enterprise integration roadmap.

Includes:

  • HSM / KMS / Vault integration
  • Extended policy and audit engine
  • Prometheus, Grafana, Splunk, and Kafka observability connectors
  • Deployment assets (systemd, Helm, Docker)
  • Compliance documentation (ISO · IEC · NIST · NIS2)

🤝 Community & Governance

  • License: Apache-2.0
  • Ownership: All PAXECT trademarks and brand assets remain property of the Owner.
  • Contributions: PRs welcome; feature branches must pass deterministic CI pipelines.
  • Core merges: Require owner approval for brand or architecture-sensitive changes.
  • Community Conduct: See CODE_OF_CONDUCT.md

Join as a maintainer or contributor — see CONTRIBUTING.md for details.


🔄 Updates & Maintenance

PAXECT Core Complete follows an open contribution and verification-first model:

  • No fixed release schedule — determinism prioritized over speed.
  • Verified updates only, across OSes and environments.
  • Maintainers focus on innovation, reproducibility, and architecture quality.

💠 Sponsorships & Enterprise Support

PAXECT Core Complete is a verified, plug-and-play runtime ecosystem unifying all PAXECT modules. Sponsorships fund ongoing cross-platform validation, reproducibility testing, and audit compliance for deterministic and secure data pipelines across Linux, Windows, and macOS.

Enterprise Sponsorship Options

  • Infrastructure validation and multi-OS QA
  • Deterministic CI/CD performance testing
  • OEM and observability integration partnerships
  • Extended reproducibility assurance for regulated industries

Get Involved

Sponsorships help sustain open, verifiable, and enterprise-ready innovation.


Governance & Ownership

  • Ownership: All PAXECT products and trademarks (PAXECT™ name + logo) remain the property of the Owner.
  • License: Source code under Apache-2.0; trademark rights are not granted by the license.
  • Core decisions: Architectural merges for Core and brand repos require Owner approval.
  • Contributions: PRs reviewed under CODEOWNERS and branch protection.
  • Brand Use: Do not use PAXECT branding for derivatives without written permission. See TRADEMARKS.md.

Path to Paid — Sustainable Open Source

PAXECT Core Complete is free and open-source at its foundation. Sustainable sponsorship ensures long-term maintenance, reproducibility, and enterprise adoption.

Principles

  • Core remains free forever — no vendor lock-in.
  • Full transparency, open changelogs, and audit-ready releases.
  • Global 6-month free enterprise window after public release.
  • Community-driven decision-making on renewals and roadmap.

Why This Matters

  • Motivates contributors with lasting value.
  • Ensures reproducible stability for enterprises.
  • Balances open innovation with sustainable funding.

Contact

📧 PAXECT-Team@outlook.com 💬 Issues 💭 Discussions

For security disclosures, please follow responsible reporting procedures.

Copyright © 2025 PAXECT Systems — All rights reserved.

About

Cross-platform AEAD hybrid encryption plugin — combining AES-GCM and ChaCha20-Poly1305 for deterministic, reproducible, and authenticated data protection across systems and pipelines.

Topics

Resources

Code of conduct

Contributing

Security policy

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages

Morty Proxy This is a proxified and sanitized view of the page, visit original site.