oh-my-term — Session Identity & Signed Updates

oh-my-term — Session Identity & Signed Updates An architecture diagram generated by Archify. Ed25519 Device Key · generated on device · Session trust Ed25519 Device Key generated on device Bootstrap Commit · 16-hex · human verifies · Session trust Bootstrap Commit 16-hex · human verifies Session Channel · AES-256-GCM end-to-end · Session trust Session Channel AES-256-GCM end-to-end Relay · ciphertext only · Architecture component Relay ciphertext only Release Build · release artifacts · Update trust Release Build release artifacts Release Signing · release signing key · Update trust Release Signing release signing key Update Verify · pinned before install · Update trust Update Verify pinned before install first connect channel binding unreadable payload signs artifacts ships signed Session trust Update trust Legend Backend Security

Keys never leave the device

  • • Ed25519 identity generated locally, never exported
  • • TOFU pinning on first connect; sessions bind to it

Signed updates

  • • Artifacts are signed with the release signing key
  • • Clients verify the signature against the pinned key before an update runs