Crypto primitives.

use tenzro_crypto::signatures::{Ed25519Signer, Signer};

let kp = Ed25519Signer::generate();
let sig = kp.sign(b"hello");
assert!(kp.public_key().verify(b"hello", &sig));

use tenzro_crypto::hash::{sha256, keccak256};
let h = sha256(b"hello");

use tenzro_crypto::aead::aes_gcm;
let (key, nonce) = aes_gcm::generate();
let ct = aes_gcm::encrypt(&key, &nonce, b"plain", b"aad")?;
let pt = aes_gcm::decrypt(&key, &nonce, &ct, b"aad")?;

X25519 key exchange wraps a per-message AES-256-GCM key. Used by all four TEE providers under enclave_crypto.rs with HKDF-SHA256 key derivation and a vendor-specific domain tag.