| Ed25519 | Document signatures, lineage proofs, credentials |
| X25519 | OAAP ephemeral key exchange |
| HKDF-SHA256 | Deterministic child key derivation |
| BLAKE3 | Document integrity, session ID derivation |
| AES-256-GCM | Encrypted session tokens, data at rest |
| XChaCha20-Poly1305 | Alternative AEAD (embedded environments) |
| Argon2id | Password-derived key wrapping |
| FROST-Ed25519 | Threshold signatures for MHR |
| JCS (RFC 8785) | Deterministic JSON canonicalization |
| Multibase base58btc | Public key encoding in DIDs |
