Public Key

GET 
/pubkey

Generates a new one-time-use X25519 keypair and returns the public key with an identifier. Use public_key to seal a proving request via libsodium cryptobox (sealed box) before submitting it to POST /prove — or, for the deprecated byte-format routes, POST /prove/encrypted / POST /prove/authorization / POST /prove/request. The key material is deleted after a single use; reusing a key_id fails the follow-up request.

Responses

200

Ephemeral public key and key ID

401

Unauthorized