HITE & TESC
HITE binds a ciphertext to a ZID's identity equation: only a holder of the equation can derive the key. TESC wraps a HITE blob in a transit envelope routed by the mesh.
POST /api/hite/encrypt
Auth: API key. Rate limit: see hiteLimiter.
{ "zid": "a1b2c3...", "plaintext": "secret", "aad": "optional" }
Response:
{ "ciphertext": "hex", "iv": "hex", "tag": "hex", "zeqond": 65392856 }
POST /api/hite/decrypt
{ "zid": "a1b2c3...", "ciphertext": "hex", "iv": "hex", "tag": "hex", "aad": "optional" }
Response: { "plaintext": "secret" }
POST /api/tesc/send
Wraps a HITE blob in a transit envelope and queues it for mesh delivery.
{ "toZid": "...", "ciphertext": "hex", "iv": "hex", "tag": "hex" }
Response: { "envelopeId": "...", "queued": true, "zeqond": 65392856 }
curl
curl -X POST https://zeq.dev/api/hite/encrypt \
-H "x-api-key: $ZEQ_API_KEY" -H "content-type: application/json" \
-d '{"zid":"a1b2...","plaintext":"hello"}'