Finals

Finals indicate the final version of a braid, and a successor braid. There may only be a single final for each braid, and they require special user interaction to create. If there are multiple finals for a braid, something has gone wrong. One of them is very likely a forgery, but there is no way to tell which one automatically.

#![allow(unused)]
fn main() {
struct Final {
  data: Ciphertext,
  version: VersionSignature,
  successor: BraidPublicKey,
  commitment: FinalCommitment,
  authority: RotationPublicKey,
  signature: RotationSignature,
}
}

A final may specify the public key of its braid as its own successor.

Serialization

Finals are serialized using atlv, as an array of those three fields, using the tag 2. As an example, a 128 byte cipher text for a final with all generation 0 cryptography:

References

Finals are fetched by the Braid Public Key Reference, which can be derived from the commitment and authority, as specified by the signature scheme.