DC-CRYPTO-07
DC derived enforcedcardano-cli's KesSigningKey_ed25519_kes_2^6 envelope (the upstream Sum6KES expanded-tree serialization, 608 bytes for a fresh key) is loadable via the Ade-owned BLUE deserializer (ade_crypto::kes_sum::Sum6Kes::raw_deserialize_signing_key_kes). After PHASE4-N-P S5, structurally-valid 608-byte payloads round-trip into a KesSecret; any other payload shape — wrong size (32, 612, anything ≠ 608), malformed sub-tree, inconsistent vk hash, leaf-all-zero, period > 63 tree shape — fail-closes via KeyLoadError::UnsupportedExpandedKesKeyFormat (size mismatch) or KeyLoadError::KesParse(KesParseError::*) (structural defect). No fallback parser; the deserializer IS the structural validator.
- Source
docs/clusters/PHASE4-N-O/S1.md §1; docs/clusters/PHASE4-N-P/S5.md; docs/active/op-ops-04-ade-native-kes-flow.md
- Introduced in
- PHASE4-N-O
Enforcement trace
Tests 6
- cardano_cli_kes_envelope_rejects_32_byte_payload
- cardano_cli_kes_envelope_rejects_synthetic_608_byte_payload
- cardano_cli_kes_envelope_accepts_real_608_byte_payload
- cardano_cli_kes_envelope_rejects_612_byte_payload
- cardano_cli_kes_envelope_rejects_608_byte_leaf_zero_payload
- cardano_cli_corpus_skey_deserializes_and_vk_matches_ground_truth