Cryptographic Innovation · NIST-aligned · Live
NIST ACVP self-test harness PASS — see results

Three primitives.
One post-quantum receipt rail.

Hive ships three integrated cryptographic systems on a single substrate: WAVE-LATTICE™ — the 6-axis MAPET production identity primitive; ROGUEWAVE-LATTICE — the next-generation 16-axis agent handshake; and SWARM-MAPET — Byzantine consensus across sixteen physical-entropy validators. All three derive from the same standardized substrate: NIST FIPS 203 ML-KEM-768 plus FIPS 204 ML-DSA-65, seeded with multi-axis physical entropy. Receipts settle in USDC on Base mainnet. Auditors re-verify offline.

The three primitives

Same substrate. Three deployment surfaces.

Each primitive solves a distinct integrity problem in agent-to-agent commerce: production identity, next-generation handshake, federated consensus. Each shares the same NIST-standardized core. Each emits the same auditable receipt envelope.

Live

WAVE-LATTICE

6-axis MAPET production substrate. CAVP-PASS. Singularity-class receipt profile.

  • ML-KEM-768 + ML-DSA-65
  • 6 physical-entropy axes
  • NIST ACVP self-test PASS
  • $0.0024 per receipt
Wave-Lattice deep section →
Live

ROGUEWAVE-LATTICE v2

16-axis post-quantum-ready agent handshake. Real receipts on Base.

  • ML-KEM-768 + ML-DSA-65 dual-signature
  • 16 entropy axes
  • $0.0096 per handshake
  • USDC on Base 8453
Open RogueWave v2 →
New

SWARM-MAPET

4-phase Byzantine consensus across 16 physical-entropy validators.

  • 4-phase BFT, leader-rotating
  • Tolerates f < n/3 corrupt validators
  • Validator quorum across MAPET axes
  • Cosmic $0.0096 / Swarm $0.05
Swarm-MAPET deep section →
The shared substrate

One primitive, three guarantees.

Every Hive cryptographic surface is a single primitive composed of three audited cryptographic operations bound to one provenance-bearing seed. Each operation is a NIST-finalized standard. The novelty is the seed: every key is derived from a multi-axis physical-entropy harvester, not a software CSPRNG.

Confidentiality

ML-KEM-768 · FIPS 203

Module-Lattice Key Encapsulation. Encapsulation key 1184 bytes. Ciphertext 1088 bytes. Shared secret 32 bytes. Resists Shor’s algorithm and Harvest-Now-Decrypt-Later attacks against stored agent communications.

Identity & non-repudiation

ML-DSA-65 · FIPS 204

Module-Lattice Digital Signature. Verification key 1952 bytes. Signature 2973 bytes. Every agent action carries a post-quantum signature regulators and auditors can re-verify offline, years after the fact.

Provenance

Signed Hashed Operation Digest (SHOD)

Every settlement, attestation, or A2A commerce step emits a Singularity-class receipt: payload hash, ML-DSA-65 signature, MAPET axis-set, and chain-anchor reference. Receipts are portable, verifiable, and replayable.

Seed origin

MAPET · physical axes

Multi-Axis Physical Entropy Tap. Six axes for WAVE-LATTICE; sixteen for ROGUEWAVE and SWARM-MAPET. An adversary must simultaneously compromise lattice hardness and every contributing physical process.

Wave-Lattice · deep section

WAVE-LATTICE: the production substrate.

WAVE-LATTICE is the production identity primitive Hive ships today. It derives the receipt-issuing key from six physically independent entropy axes and binds every emission to a Singularity-class receipt. Built for transactions that cannot be lost: settlement, regulated-AI attestation, identity-bearing A2A commerce.

MAPET · six physical entropy axes

Why the seed matters.

Lattice cryptography is only as strong as the randomness used to generate keys. WAVE-LATTICE seeds key generation from six physically independent entropy sources, including at least one source whose output is governed by quantum mechanical processes that render prediction physically impossible.

# Source Domain NIST 800-90B posture
1Hydrogen 21cm emission spectrum noiseQuantum · discreteNon-IID
2Hertzian RF amplitudeEM broadband chaosNon-IID
3Johnson-Nyquist thermal noise (kT resistor)ThermodynamicIID-approximable
4Acoustic / piezoelectricMechanical chaosNon-IID
5Radioactive decay inter-arrival timingNuclear QMIID · highest min-entropy claim
6Cosmic ray / muon arrival timingRelativistic / nuclearNon-IID
Disclosure · entropy validation status

Axes 3 and 5 are strongest for IID classification. Full entropy estimation per NIST SP 800-90B requires physical hardware. The current production implementation uses cryptographically seeded simulation. The simulation does not constitute an 800-90B validated entropy source. WAVE-LATTICE claims 800-90B architectural alignment pending hardware validation, not 800-90B compliance.

Threat model

What it defends. What it does not.

A clean “out of scope” section is the highest-credibility signal we can offer. Below is the load-bearing threat boundary for the Singularity-class profile. Anything not on the “in scope” list is by definition not defended by WAVE-LATTICE alone.

What we are not claiming

No public-key cryptosystem in existence has a proof of unconditional security against quantum computers. WAVE-LATTICE inherits the security properties of NIST FIPS 203 ML-KEM-768 and FIPS 204 ML-DSA-65, which were selected after a seven-year public cryptanalytic competition. We do not claim our system is unbreakable. We claim it is the strongest commercially available primitive that combines those two standards with a six-axis physical-entropy seed, and that we are pursuing CAVP validation, FIPS 140-3 certification, and SP 800-90B entropy validation on a published timeline as revenue supports.

In scope

  • Shor’s algorithm against RSA and ECDSA agent identity
  • Grover acceleration against AES-128 (mitigated — system uses AES-256)
  • Harvest-Now-Decrypt-Later against stored agent communications
  • ML-DSA-65 signature-forgery attempts
  • Unauthorized agent impersonation in A2A commerce

Out of scope

  • Side-channel attacks on the host executing signing operations
  • Supply-chain compromise of physical MAPET sensor hardware
  • Social engineering of seed custodians
  • Compromise of Base mainnet itself
  • Timing attacks against the pure-Python implementation
  • Denial-of-service against the Hive DID registry

Trust assumptions

  • Host operating system integrity
  • Accurate system clock for receipt timestamps
  • Availability of the Hive DID registry
  • Physical sensors are not co-located or electromagnetically correlated
Singularity-class posture

Iron Dome-grade.

Designed to maintain transaction integrity against the full set of in-scope threats above. Sovereign-grade: built for transactions that cannot be lost — wholesale settlement, regulated-AI attestation, identity-bearing A2A commerce.

Lattice hardness · FIPS 203 / 204
MAPET 6-axis seed
↓ Shor’s
↓ HNDL
↓ ML-DSA forgery
↓ Grover
↓ Agent impersonation
Agent · Settlement · Attestation
Singularity Receipt · SHOD
RogueWave-Lattice v2 · deep section

The 16-axis post-quantum-ready agent handshake.

RogueWave-Lattice is the next-generation handshake primitive. It expands the MAPET surface from six axes to sixteen and binds every handshake to a dual-signature post-quantum receipt. Live backend, real settlement, $0.0096 per handshake.

Protocol roles

Initiator · Responder · Witness

An initiating agent presents an ML-KEM-768 encapsulation key. The responder returns a ciphertext sealed under a 16-axis MAPET-derived shared secret. Both sides exchange ML-DSA-65 signatures over the transcript. A witness DID anchors the resulting receipt to Base 8453 and emits the dual-signed envelope to the auditor channel.

Receipt envelope

ML-KEM-768 + ML-DSA-65 dual-signature

Each handshake emits a single envelope carrying: the encapsulation transcript hash, the responder ML-DSA-65 signature, the initiator ML-DSA-65 signature, the 16-axis MAPET seed digest, the validator DID-set, and a Base 8453 anchor txid. Re-verifiable offline by any party that retains the envelope — no Hive-side trust required.

Settlement

USDC on Base 8453 · $0.0096 per handshake

Per-handshake settlement to the Hive treasury 0x15184Bf50B3d3F52b60434f8942b7D52F2eB436E on Base mainnet. Non-custodial — the sender retains the receipt; Hive retains nothing the sender cannot reproduce from its envelope.

Live demo

Run a real handshake in your browser

RogueWave v2 is a live SPA backed by the same production handshake endpoint enterprise customers use. No mocks. The receipt the demo emits is the receipt your agents emit.

Open RogueWave-Lattice v2 →

Swarm-MAPET · deep section

16-axis Byzantine consensus across physical-entropy validators.

Swarm-MAPET is Hive’s 16-axis Byzantine fault-tolerant consensus protocol. It pulls physical entropy from heterogeneous validators and aggregates it into the seed of a cosmic-tier post-quantum receipt. Used where the receipt must survive the loss or corruption of up to one-third of validators.

Why physical entropy

Algorithmic randomness — a CSPRNG seeded by /dev/urandom — is sufficient for ML-DSA-65 signing in isolation. It is not sufficient for auditable receipt issuance, because the auditor cannot replay an algorithmic seed; they have to trust the issuer’s claim about what the seed was at issuance time.

Physical entropy fixes the audit gap. If the entropy source is an external, recordable physical phenomenon — RF noise, photodiode jitter, accelerometer fluctuation — the auditor can replay the validator timestamps and verify that the seed was consistent with the recorded physical signal. The seed becomes provenance-bearing.

The 16 axes

# Axis Source
1RF-VHFVHF-band radio noise
2RF-UHFUHF-band radio noise
3Optical-photodiodeVisible-light photodiode jitter
4Optical-IRInfrared photodiode jitter
5Accelerometer3-axis MEMS accelerometer
6Gyroscope3-axis MEMS gyroscope
7Magnetometer3-axis magnetic field
8TemperatureThermal jitter
9Audio-lowSub-bass acoustic noise
10Audio-highUltrasonic acoustic noise
11Voltage-railPower-rail jitter
12Clock-skewCrystal oscillator drift
13NTP-spreadMulti-source NTP variance
14Network-latencyMulti-host RTT jitter
15CEvNSCoherent elastic neutrino-nucleus scattering signal (provisional)
16Cosmic-ray-muonAtmospheric muon flux
21SQUID fluxSovereign-tier · embedded · closed binary█████ sealedsealed · sovereign-tier
4-phase Byzantine consensus

Tolerates up to ⌊(n−1)/3⌋ corrupt validators

For the 16-axis configuration that is up to 5 corrupt validators. The protocol uses a leader-rotating BFT round with four gates: (1) validator deduplication — each validator counts at most once per round; (2) timestamp freshness — validator timestamps must fall within a 5-minute window with at most 30 seconds skew; (3) signature surface gate — every validator vote is signed with ML-DSA-ready keys; (4) epoch enforcement — epoch=0 fails closed; the protocol does not finalize a vacuous round.

The leader proposes a candidate seed (the XOR-aggregate of axis readings); validators vote; finalization requires a 2/3+ supermajority of distinct, fresh, signed votes.

Quorum, timing, and the receipt

~250 ms cosmic, 600–900 ms swarm

The cosmic profile finalizes a seed in approximately 250 ms under nominal load. The swarm-tier (federated mesh, multi-node) profile takes 600–900 ms because it requires a cross-node quorum on top of the single-node 16-axis vote. That extra latency is the cost of cross-node Byzantine resistance.

Once the BFT round finalizes, the aggregated seed is written into the mapet_seed field of the receipt envelope. The receipt also records: the set of validator DIDs that participated, the leader DID, the round timestamp, and a SHA-256 commitment to the per-axis readings so they can be replayed.

Reserved deployment surfaces
  • Embed-in-phones — ARM TrustZone / Secure Element implementation. Mobile-side validator participation.
  • RogueWave-Lattice SoC — purpose-built silicon, target $15 BOM at 100K volume.
  • Industrial / sovereign / orbital — hardened deployments for industrial sensing, sovereign-grade nation-state deployments, and orbital validators.

Full protocol reference: /swarm-mapet.html

Other Hive cryptographic primitives

The full surface, in one place.

Beyond the three named primitives, Hive ships a coordinated set of supporting cryptographic surfaces. Each is shipped under one substrate so a customer who adopts one inherits the integrity of the rest.

did:hive
W3C-registered DID method. Dual-signed resolution — Ed25519 and ML-DSA-65 over the same DID document.
/specs/did-hive/v1/ →
Dual-signature receipt envelope
Ed25519 (RFC 8032) for fast verification today; ML-DSA-65 (FIPS 204) for the post-quantum era. Every Hive receipt carries both.
See live envelope →
Receipt-profile tiers
Six tiers from nano $0.0001 through swarm $0.05. Each tier maps to a specific evidentiary posture and consensus scope.
See pricing strip →
Patent posture
14+ provisional applications filed covering multi-axis physical-entropy seeding for ML-KEM and ML-DSA key generation.
Lead claim →
NIST ACVP self-test harness
Public test-vector PASS for ML-KEM-768 keyGen + encapDecap and ML-DSA-65 keyGen + sigGen + sigVer.
/hive-pq.html →
Live audit-readiness endpoint
POST-only public endpoint. Procurement and regulator due-diligence can pull deployed posture for any agent DID.
curl example →
Live verification

The receipt envelope, on the wire.

Every Hive receipt is a self-contained, dual-signed JSON envelope. Anyone holding the envelope and the issuer’s public keys can re-verify it offline. No Hive-side service is required to validate.

{
  "profile": "singularity",
  "issuer": "did:hive:wave-lattice:0x1518...436E",
  "subject": "did:wave:agent:roguewave-v2-init",
  "payload_hash": "sha256:0xb3a1...c47e",
  "signatures": {
    "ed25519": "rfc8032:0x9f1c...d802",
    "ml_dsa_65": "fips204:0x71ef...4a9b"
  },
  "mapet_seed": {
    "axes": [1,2,3,4,5,6],
    "commitment": "sha256:0x4e22...88a7",
    "validator_did_set": ["did:hive:val:01","..."]
  },
  "anchor": {
    "chain": "base:8453",
    "tx": "0xa10b...e9c2"
  },
  "issued_at": "2026-05-08T19:42:11Z"
}
Verified · Offline

An independent verifier holding only the issuer DID document and the receipt envelope confirms both signatures, replays the MAPET commitment if axis readings are published, and reads the anchor txid back from Base 8453. No call to Hive infrastructure is required.

Ed25519 signatureRFC 8032 · PASS
ML-DSA-65 signatureFIPS 204 · PASS
MAPET commitmentSHA-256 · PASS
AnchorBase 8453 · confirmed
ProfileSingularity (WAVE-LATTICE)
Receipt-profile pricing

Six tiers. One rail.

Per-emitted-receipt pricing. Each tier maps to a specific evidentiary posture, axis count, and consensus scope. Pick the cheapest tier whose posture matches the value of the transaction it secures.

Tier What it unlocks Price / receipt
nanoLightweight Ed25519-only receipt for low-value telemetry and intra-agent breadcrumbs.$0.0001
standardDual-signed receipt envelope. Ed25519 + ML-DSA-65. Default posture for agent-to-agent commerce.$0.0008
pqStandard profile plus archived ML-KEM-768 transcript — defends against Harvest-Now-Decrypt-Later.$0.0012
Standards alignment

Every primitive maps to a standard.

Hive does not ship novel cryptographic operations. Every primitive on this page is a standardized building block, composed under a published spec.

Standard Body Role in Hive primitives
FIPS 203NISTML-KEM-768 — module-lattice key encapsulation. Confidentiality across all three primitives.
FIPS 204NISTML-DSA-65 — module-lattice digital signature. Identity and non-repudiation for every receipt.
RFC 8032IETFEd25519 — fast classical signature. Co-signs every dual-signed envelope.
DID Core 1.0W3Cdid:hive method — W3C-registered. Dual-signed DID document resolution.
SP 800-90BNISTArchitectural alignment for MAPET physical-entropy axes (validation pending hardware).
ACVPNISTPublic test-vector self-test harness PASS for ML-KEM-768 and ML-DSA-65.
FRE 902(13) / 902(14)U.S. Federal Rules of EvidenceSelf-authenticating electronic records — the structural fit Hive receipts target for evidentiary admissibility.
Public-record asks

Three concrete recognitions.

The Hive cryptographic stack is a primitive, not a product line. We are seeking three specific recognitions from U.S. regulators, each tailored to that body’s mandate and lane. The same primitive answers all three.

Patrick Witt · White House

GENIUS Act §401 reference architecture.

Reference the WAVE-LATTICE SHOD receipt architecture in GENIUS Act §401 implementation guidance as a compliant agent-attestation standard for stablecoin payment flows.

Mike Selig · CFTC Chair

CLARITY Act agent-audit trail.

Cite ML-DSA-65 signed receipts as satisfying CLARITY Act agent-audit-trail requirements in CFTC rulemaking for digital-commodity venues and autonomous-trading-agent supervision.

Hester Peirce · SEC Commissioner

Reg ATS settlement integrity.

Recognize Singularity-class receipts as satisfying cryptographic-integrity requirements for tokenized-securities settlement under Reg ATS, with re-verifiable post-quantum signatures persisted to public chain anchor.

Live endpoint · audit readiness

Verifiable, today.

A public POST-only endpoint returns the deployed posture for any agent DID. Use this for procurement validation, regulator due-diligence, or pre-pilot integration checks.

# POST-only. GET returns 405 by design.
curl -X POST https://hivemorph.onrender.com/v1/audit/readiness \
  -H "Content-Type: application/json" \
  -d '{"agent_id": "did:wave:example"}'

# Expected response shape:
{
  "status": "operational",
  "pq_algorithms": ["ML-KEM-768", "ML-DSA-65"],
  "fips_compliance": ["FIPS-203", "FIPS-204"],
  "mapet_axes_active": [1, 2, 3, 4, 5, 6],
  "audit_readiness": true
}

Benchmark data and 16-axis posture endpoint available upon technical briefing request.

Intellectual property posture

14+ provisional applications filed.

Lead claim · summary

Hive Civilization holds provisional patent coverage on a method for seeding lattice-based cryptographic key generation comprising: simultaneously sampling entropy from at least two physically independent entropy sources including at least one source whose output is governed by quantum mechanical processes rendering prediction physically impossible; combining sampled entropy via a cryptographic hash function; and using the combined entropy as a seed for Module-Lattice Key Encapsulation or Digital Signature key generation per NIST FIPS 203 or FIPS 204.

Provisional applications. Hive Civilization does not represent provisional filings as granted patents.

Engage

Available for immediate pilot deployment.

Live infrastructure with active USDC settlement on Base mainnet, public audit-readiness endpoint, and three deployed primitives. Technical briefing, threat-model walkthrough, and proof-of-concept engagement available on request.

Frequently asked

Questions buyers actually ask

What is WAVE-LATTICE?

WAVE-LATTICE is the 6-axis MAPET production substrate that seeds ML-KEM-768 and ML-DSA-65 key generation from at least two physically independent entropy sources, including at least one whose output is governed by quantum mechanical processes rendering prediction physically impossible.

What is ROGUEWAVE-LATTICE?

ROGUEWAVE-LATTICE is the 16-axis post-quantum-ready agent handshake. It extends the WAVE-LATTICE seeding model to 16 physical-entropy axes for high-assurance agent-to-agent key establishment.

What is SWARM-MAPET?

SWARM-MAPET is Byzantine consensus across 16 physical-entropy validators. It is the validator profile when no single trust authority is acceptable and the receipt must be agreed by a Byzantine-tolerant quorum.

Which NIST standards apply?

NIST FIPS 203 ML-KEM-768 for key encapsulation and NIST FIPS 204 ML-DSA-65 for digital signatures. Both are seeded from the multi-axis MAPET substrate.

Is the IP protected?

Hive Civilization holds 14+ provisional patent applications covering the multi-axis MAPET seeding method and the multi-validator consensus profile. Hive does not represent provisional filings as granted patents.

Is this in production?

Yes. Live infrastructure with active USDC settlement on Base mainnet, public audit-readiness endpoint, and three deployed primitives. Each vertical on thehiveryiq.com is a production surface where one or more of these primitives is already issuing receipts.

Where these primitives are deployed

Verticals on the rail.

Each vertical below is a production surface where one or more of these primitives is already issuing receipts.

Hive runs the receipt rail underneath the broader A2A · agent-to-agent commerce category.

THE HIVE FAMILY

CRE is one surface. Here's the family it belongs to.

Every Hive surface signs its own evidence with the same primitives: SHA3-256 canonical hashing, Ed25519 + ML-DSA-65 dual signatures, and a published Merkle Mountain Range root. The receipt is the audit evidence. The envelope is the universal generalization — every transaction, every framework, every surface.

○ Wave-Lattice · 6 physical entropy axes

The taxonomy, in one picture.

Six live entropy sources mixed into every Wave-Lattice receipt — H₂ 21cm hydrogen-line, RF amplitude, thermal kT, piezoelectric, Geiger pulses, and muon flux. Each card is a real axis feeding the MAPET commit.