Overview
ENTO (ENcrypted, Typed, Omnitrack) is a flat ZIP container format and reference implementation for bundling heterogeneous research artifacts — time series, genomics slices, spectrograms, provenance proofs — into a single verifiable file. Each track is sealed under per-track AES-256-GCM authenticated encryption with format+track associated-data binding and PADMÉ length padding. The default wire format is 0.4.0; formats 0.2.0, 0.3.0, and 0.3.1 remain read/write compatibility profiles. Graded observability levels control how much manifest metadata a recipient sees, and an optional hash-chained proof export provides tamper-evident lineage. Verification deliberately separates key-authenticated integrity from keyless corruption detection.
This deposit is the 0.4 manuscript release candidate together with the MIT-licensed reference implementation source. Planned code home: https://github.com/docxology/entofile.
Overview source: Curated paper metadata.
Methods and contributions
Read the source for the full argument, qualifications, and evidence.
Findings and contributions
- Tamper detection succeeded on all 2400 benchmark rows (rate 1.0).
- Mean pack throughput was 78.9296 MiB/s on the medium-track condition at observability level 3 (n = 150, CV 15.3%); the paper makes no superiority claim.
- Ciphertext expansion on fixture tracks was an exact, zero-variance 1.7113.
- Length is not hidden exactly: non-sealed levels disclose byte_length in the manifest, and sealed export still reveals the PADMÉ bucket.
- Concludes that a flat ZIP container can carry typed multimodal tracks, authenticated encryption, graded observability and proof export without becoming a repository or hosted service.
Methods
- Flat ZIP layout: manifest.json, one encrypted member per track, optional proof — Defines the container as a ZIP archive with a typed manifest, per-track .ento members and an optional hash-chain proof file.
- Per-track AES-256-GCM envelopes with HKDF-derived keys — Each track is sealed with authenticated encryption under a fixed nonce||tag||ciphertext header, specified in a Kaitai Struct file.
- Four graded observability levels for export-time manifest redaction — Observability levels 0–3 control which manifest metadata a recipient sees, without re-encrypting the track payloads.
- Associated-data binding and PADMÉ length padding in the default profile — The 0.4.0 default binds associated data and pads ciphertext members to PADMÉ buckets to coarsen the length channel.
- Scripted benchmark: 150 repetitions over observability levels on fixture tracks — Benchmarks on committed EEG, VCF and spectrogram fixtures plus a synthetic throughput track measure throughput, latency, expansion and tamper detection.
Summary sources: Paper metadata and evidence · Extracted source text.
Document downloads
PDFs are hosted here; supporting sources may use pinned archives.
- entofile-0.4.pdf PDF · 3.32 MiB · extracted-text source
Citation
Citation metadata follows the unified bibliography.
Catalog details and resources
Related works
Ranked by recorded methods, topics, contributors and associated software, with contributor roles and domain-only matches labelled. Metadata overlap is not a citation or a scientific equivalence.