Packages

@paramira/blind-tokens

Anonymous, rate-limited, publicly verifiable membership tokens: an issuer signs a blinded message once per member per epoch (RFC 9474 blind RSA, via @cloudflare/blindrsa-ts), the member unblinds a token the issuer can't link back to them, and anyone can verify it against the epoch's public key. Plus an issuance ledger that refuses a second token and repeats a lost one.

License: MIT. Generic: per-epoch framing, verification and issuance ledger around RFC 9474 blind RSA; the cryptography itself is @cloudflare/blindrsa-ts (Apache-2.0).

Source: packages/blind-tokens

What it does

Anonymous, rate-limited, publicly verifiable membership tokens. A community's issuer signs one blinded message per member per epoch; the member unblinds it into a token the issuer can't link back to them; anyone holding the epoch's public key can verify it.

Built on @cloudflare/blindrsa-ts (RFC 9474, RSABSSA-SHA384-PSS-Randomized, checked against the RFC's test vectors, Apache-2.0). This package adds no cryptography of its own: it frames the library with per-epoch keys, a wire format, verification, and the issuer's one-per-epoch ledger. The signed message names its epoch and key, so a token can't be relabelled into another epoch.

Used by

Packages: inquiry-board, inzira

In tests or development only: testimony.

Uses

@cloudflare/blindrsa-ts

auth-sdk

Verify a visitor controls a paramira community identity (did:iwacu:...) without your app ever touching their private key.

blob-store

A content-addressed BlobStore contract (put/get/has by sha256) with memory, relay-HTTP, local-disk and S3-compatible backends, an AES-GCM encrypting wrapper and replication across backends. Every read is re-verified against its hash.