Protocol

The DMP wire format, crypto primitives, and threat model.

Start here:

• Spec overview — the top-level reference: versioning, record-type registry, common invariants, trust model.

Deep dives:

• Wire encoding conventions — prefix, base64, Ed25519 placement, magic bytes, multi-string TXT, DNS-name rules.
• DNS name routing — how every record’s DNS owner name is computed.
• End-to-end flows — send, receive, identity publish/fetch, cluster discovery.
• Threat model — adversaries, defenses, out-of-scope items.

Per-record-type references:

• Wire format — exact TXT record layouts for chunks, manifests, identities, and prekeys.
• Cluster manifests.
• Bootstrap records.

Supporting material:

• Cryptography — X25519, Ed25519, ChaCha20-Poly1305, Argon2id, and how they compose.
• Security model — what the protocol protects, what it doesn’t, and a pointer to the full SECURITY.md.

---

Table of contents

• Spec overview
• Wire encoding
• Wire format
• Cryptography
• DNS name routing
• End-to-end flows
• Security model
• Threat model
• Cluster manifests
• Bootstrap records
• Key rotation + revocation