KeiAuth — sign-in without passwords or vendor hardware keys.

An authentication scheme the lab derived itself for its own internal tools, built to remove the dependency on a third-party hardware trust anchor such as a YubiKey or an Apple Secure Enclave. The mechanism is proprietary and shared under NDA.

What it does

KeiAuth is designed to prove who is signing in without a stored password and without a vendor hardware key. How the identity is formed and verified is proprietary and available to partners under mutual NDA.

Why not WebAuthn

Hardware-vendor PKI (YubiKey, platform Secure Enclaves) is solid, but it is a third-party trust anchor and a supply-chain dependency. KeiAuth is the lab's own primitive, built for the lab's internal tools without that dependency. The trade-off is stated plainly: the key is held in software, so KeiAuth does not give a hardware key's physical isolation.

In our tests

In our tests the core Rust crate passes 57 of 57 tests.

cross-references

→ kgl-overlay (sibling)→ max-chain (sibling)⊘ Security overview