<feed xmlns='http://www.w3.org/2005/Atom'>
<title>nymdrop/internal/pow, branch main</title>
<subtitle>Nym-native anonymous submission system (SecureDrop-style), using the Nym mixnet as transport instead of Tor.
</subtitle>
<id>https://git.virebent.art/virebent/nymdrop/atom?h=main</id>
<link rel='self' href='https://git.virebent.art/virebent/nymdrop/atom?h=main'/>
<link rel='alternate' type='text/html' href='https://git.virebent.art/virebent/nymdrop/'/>
<updated>2026-07-01T15:41:47+00:00</updated>
<entry>
<title>Add client-side proof of work and fix X25519 WebCrypto API usage</title>
<updated>2026-07-01T15:41:47+00:00</updated>
<author>
<name>Gab Virebent</name>
<email>gabriel1@virebent.art</email>
</author>
<published>2026-07-01T15:41:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.virebent.art/virebent/nymdrop/commit/?id=78d57b1090a5a23abce2a732f091a4ef007d60cc'/>
<id>urn:sha1:78d57b1090a5a23abce2a732f091a4ef007d60cc</id>
<content type='text'>
Self-contained hashcash-style PoW on /submit: client finds a nonce so
SHA-256("&lt;unix-ts&gt;:&lt;nonce&gt;") has enough leading zero bits, sent as an
X-Nymdrop-Pow header; server verifies and rejects expired or replayed
stamps, no challenge round-trip required. Difficulty tunable via
--pow-difficulty without a rebuild.

Also fixes a latent bug in the browser crypto: X25519 was being
requested as ECDH with namedCurve "X25519", which is not a valid
WebCrypto combination and always throws. Modern WebCrypto exposes
X25519 as its own algorithm identifier.
</content>
</entry>
</feed>
