TysonCrypt

TysonCrypt is provides a drop-in end-to-end encryption wrapper for .NET HTTP APIs. It serves as an all-in-one authentication, authorization, and transport solution to provide added security on top of traditional TLS. It implements the Double Ratchet Algorithm used by Signal. Encryption leverages BouncyCastle to handle low level primitives, and uses separate signing and encryption keys to work around needing to roll custom encryption code required to map between Montgomery form and twisted Edwards form. Signing keys are used to establish user identity and identities are exposed both via a Dependency-Injected provider and ASP.NET Core Authorization framework, allowing for quick and easy integration with existing RBAC APIs.