sirraya-did-kr 2.1.2

A production-hardened enterprise solution for Decentralized Identifier (DID) key recovery by Sirraya Labs, offering three complementary recovery architectures—social threshold recovery with multiple guardians, deterministic seed-based recovery, and distributed MPC recovery with proactive security. Built with AES-256-GCM encryption, circuit breakers, audit logging, and metrics collection, it ensures secure key recovery without vendor lock-in. Deploy as a Python library, CLI tool, or REST API server.

Sirraya DID Key Recovery (DID-KR) Enterprise v2.1

A production-hardened implementation of Decentralized Identifier (DID) key recovery by Sirraya Labs.

🏢 Sirraya Labs - Enterprise Implementation

This is the official reference implementation from Sirraya Labs, designed for enterprise-grade DID key recovery with production-ready security and mathematical rigor.

🔥 Key Features

• Three Recovery Architectures:

  • 🔐 Social ZKP Recovery - Feldman Verifiable Secret Sharing with t-of-n guardians
  • ⏰ Deterministic Temporal Recovery - Seed-based recovery with PBKDF2
  • 🤝 MPC-Mediated Recovery - Threshold cryptography with proactive refresh

• Enterprise-Grade Security:

  • AES-256-GCM encryption with AAD
  • Circuit breakers for fault tolerance
  • Comprehensive audit logging
  • Metrics collection

• Multiple Interfaces:

  • 🖥️ CLI tool
  • 🌐 REST API (Flask)
  • 📦 Python library

📦 Installation

# Basic installation (core crypto)
pip install sirraya-did-kr

# With API server support
pip install sirraya-did-kr[flask]

# With Ethereum DID support
pip install sirraya-did-kr[eth]

# Full installation (all features)
pip install sirraya-did-kr[full]

🚀 Quick Start

As a CLI tool:

# Generate DIDs
sirraya-did-kr generate-dids --count 5

# Setup social recovery
sirraya-did-kr social-setup --did did:key:z6Mk... --guardians did:key:z6Mk... --threshold 2

# Start API server
sirraya-did-kr --api --port 8080

As a Python library:

from sirraya_did_kr import RecoveryService, RecoveryDatabase, MemoryCache

# Initialize
db = RecoveryDatabase("did_kr.db")
cache = MemoryCache()
service = RecoveryService(db, cache)

# Setup social recovery
result = service.setup_social_recovery(
    did="did:key:z6Mk...",
    guardian_dids=["did:key:z6Mk...", "did:key:z6Mk..."],
    threshold=2
)
print(f"Recovery setup: {result['recovery_id']}")

As an API server:

# Terminal 1: Start the server
sirraya-did-kr --api --port 8080

# Terminal 2: Test the API
curl -X POST http://localhost:8080/api/v1/did/generate \
  -H "Content-Type: application/json" \
  -d '{"method": "key"}'

📚 Documentation

API Endpoints

Method	Endpoint	Description
GET	/health	Health check
GET	/metrics	System metrics
POST	/api/v1/did/generate	Generate new DID
POST	/api/v1/recovery/social/setup	Setup social recovery
POST	/api/v1/recovery/social/refresh/<did>	Proactive refresh
POST	/api/v1/recovery/deterministic/setup	Setup seed recovery
POST	/api/v1/recovery/deterministic/recover	Recover with seed
POST	/api/v1/recovery/mpc/setup	Setup MPC recovery
GET	/api/v1/recovery/validate/<did>	Validate recovery graph
GET	/api/v1/recovery/status/<did>	Get recovery status

CLI Commands

sirraya-did-kr generate-dids [--count N] [--method key|ethr]
sirraya-did-kr social-setup --did DID --guardians DIDS... [--threshold N] [--auto-refresh DAYS]
sirraya-did-kr refresh --did DID
sirraya-did-kr det-setup --did DID --seed-phrase WORDS...
sirraya-did-kr det-recover --did DID --seed-phrase WORDS...
sirraya-did-kr mpc-setup --did DID --providers DIDS...
sirraya-did-kr status --did DID
sirraya-did-kr validate --did DID
sirraya-did-kr --api [--port PORT]

👨‍💻 Author

Amir Hameed Mir - Principal Architect - Sirraya Labs

📄 License

Apache 2.0 - See LICENSE file.

---

Built by Sirraya Labs for production-grade decentralized identity systems