[{"_1":2,"_175":-5,"_176":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_148":149},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_139":-5,"_140":11,"_141":17,"_142":11,"_143":-5,"_144":11,"_145":-5,"_146":147},"canonicalUrl","https://hub.docker.com/r/rocheston/novazel/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","rocheston","reponame","novazel","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2026-05-20T01:58:13.502158Z","description","Identity-first overlay network — NZIDs, Atlas resolver, FUSE flows, Zelen encryption, NovaWeb","is_private","last_updated","2026-05-20T01:58:16.25445Z","last_modified","2026-05-20T02:03:28.803567Z","media_types",[52],"application/vnd.oci.image.index.v1+json","name","pull_count",197,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# NovaZel Protocol\n\n**Identity-first overlay network** — every connection is cryptographically verified. No IP-address trust. No faked certificates. Just unforgeable cryptographic identities.\n\n```\ndocker run rocheston/novazel help\ndocker compose up # full stack: Atlas + Node + NovaWeb\n```\n\n---\n\n## What is NovaZel?\n\nNovaZel is a protocol that runs **on top of the internet you already have**. Instead of trusting raw IP addresses (which can be spoofed, hijacked, or change unexpectedly), every device, server, and AI agent gets a **NZID** — a cryptographic identity derived from a public key:\n\n```\nnzid:FBYOLXUDAVQBD3XIXHRSCA4EB4ZR2M4UG7J642ZEXMW774YKPTKA\n```\n\nWhen Alice connects to Bob, both sides prove their identity using Ed25519 signatures before a single byte of data is exchanged. There are no IP-based certificates that can be faked — the identity IS the key.\n\n### Core Concepts\n\n| Concept | What It Is |\n|---|---|\n| **NZID** | `nzid:` + BASE32(SHA-256(public_key)) — your unforgeable identity |\n| **Atlas** | HTTP name resolver — maps `bob.novazel` to a signed identity bundle |\n| **FUSE Flow** | Verified session between two NZIDs (like a phone call, but cryptographic) |\n| **nova-node** | The always-on daemon that receives messages and flows |\n| **NovaWeb** | Web server that serves `novazel://` URLs over FUSE flows |\n| **zurl** | `curl` for NovaZel — send messages and fetch `novazel://` URLs |\n| **Zelen** | Quantum-safe file encryption (ML-KEM-1024 + AES-256-GCM) |\n\n### How It Works\n\n```\nAlice Atlas Bob\n | | |\n | resolve(\"bob.novazel\") ---------> |\n | <-------- nzid:GCSGLY + quic:addr |\n | |\n | ---- HELLO (src_nzid, pub_key) ->|\n | <--- WELCOME (dst_nzid, pub_key) -|\n | ---- OPEN_FLOW (flow_id) -------> |\n | ---- DATA (\"hello\") -----------> |\n | <--- DATA (\"ack: hello\") --------|\n | |\n [OK] Verified FUSE flow established\n```\n\n---\n\n## Quick Start\n\n### Single service\n\n```bash\n# 1. Start the Atlas name resolver\ndocker run -d --name atlas -p 8080:8080 rocheston/novazel \\\n atlas --listen 0.0.0.0:8080\n\n# 2. Create identities (stored in a named volume)\ndocker run --rm -v nova-ids:/root/.nova rocheston/novazel \\\n nova id create alice --dev-insecure\ndocker run --rm -v nova-ids:/root/.nova rocheston/novazel \\\n nova id create bob --dev-insecure\n\n# 3. Start Bob's node (registers bob.novazel with Atlas)\ndocker run -d --name bob-node \\\n -p 4433:4433/udp -p 7777:7777 \\\n -v nova-ids:/root/.nova \\\n --link atlas rocheston/novazel \\\n node --identity bob \\\n --listen-quic 0.0.0.0:4433 \\\n --atlas http://atlas:8080 \\\n --register bob.novazel \\\n --local-api 0.0.0.0:7777\n\n# 4. Send a message from Alice to Bob\ndocker run --rm -v nova-ids:/root/.nova --link atlas rocheston/novazel \\\n nova send bob.novazel \"hello from docker\" \\\n --from alice --atlas http://atlas:8080\n\n# 5. Use zurl (like curl, for novazel://)\ndocker run --rm -v nova-ids:/root/.nova --link atlas rocheston/novazel \\\n zurl novazel://bob.novazel \"hello\" --from alice --atlas http://atlas:8080\n```\n\n### Full stack with Docker Compose\n\n```bash\n# Download the compose file\ncurl -O https://raw.githubusercontent.com/rocheston/novazel/main/docker-compose.yml\n\n# Start everything\ndocker compose up -d\n\n# Watch logs\ndocker compose logs -f\n\n# Check Atlas is resolving names\ncurl http://localhost:8080/resolve/bob.novazel\n\n# Check node status\ncurl http://localhost:7777/local/v1/status\n\n# Stop\ndocker compose down\n```\n\n---\n\n## Services & Ports\n\n| Service | Container | Port | Protocol | Description |\n|---|---|---|---|---|\n| `atlas` | `nova-atlas` | `8080` | TCP/HTTP | Name resolver — resolve `.novazel` names |\n| `node` | `nova-node` | `4433` | UDP/QUIC | NovaZel node — FUSE flow handler |\n| `node` | `nova-node` | `7777` | TCP/HTTP | Local REST API — status, flows, health |\n| `web` | `nova-web` | `7443` | UDP/QUIC | NovaWeb — identity-verified web serving |\n\n---\n\n## Command Reference\n\nAll commands run as: `docker run rocheston/novazel `\n\n### Identity Management\n\n```bash\n# Create a new identity\nnova id create --dev-insecure\n\n# Show an identity\nnova id show \n\n# List all identities\nnova id list\n\n# Verify an identity\nnova id verify \n```\n\n### Atlas — Name Resolution\n\n```bash\n# Register a name with Atlas\nnova atlas register \\\n --identity \\\n --atlas http://atlas:8080 \\\n --locator quic:0.0.0.0:4433\n\n# Resolve a name\nnova atlas resolve bob.novazel --atlas http://atlas:8080\n```\n\n### Send Messages\n\n```bash\n# Send a message to a named identity\nnova send bob.novazel \"your message here\" \\\n --from alice \\\n --atlas http://atlas:8080\n\n# Send and wait for reply\nnova send bob.novazel \"ping\" --from alice --atlas http://atlas:8080\n```\n\n### NovaWeb\n\n```bash\n# Start a NovaWeb server\nnovaweb \\\n --identity web1 \\\n --name mysite.novazel \\\n --atlas http://atlas:8080 \\\n --listen-novazel 0.0.0.0:7443 \\\n --serve /data/sites\n\n# Fetch a page over NovaZel\nnova web get novazel://mysite.novazel/index.html \\\n --from alice --atlas http://atlas:8080\n```\n\n### zurl — curl for NovaZel\n\n```bash\n# Send a message (no path = message mode)\nzurl novazel://bob.novazel \"hello world\" --from alice\n\n# Fetch a web page (with path = web fetch mode)\nzurl novazel://site.novazel/index.html --from alice\n\n# Verbose output (like curl -v)\nzurl -v novazel://bob.novazel \"test\" --from alice\n\n# Save output to file\nzurl novazel://site.novazel/index.html --from alice -o page.html\n\n# Silent mode (body only)\nzurl -s novazel://bob.novazel \"query\" --from alice\n\n# Custom Atlas endpoint\nzurl novazel://bob.novazel \"hello\" --from alice --atlas http://atlas:8080\n```\n\n### Node Operations\n\n```bash\n# Check node status\nnova node status --url http://localhost:7777\n\n# List active flows\nnova node status --url http://localhost:7777\n```\n\n### Zelen Encryption\n\n```bash\n# Seal a file (encrypt)\nnova zelen seal --file secret.txt --output secret.zelen --identity alice\n\n# Unseal a file (decrypt)\nnova zelen unseal --file secret.zelen --output secret.txt --identity alice\n\n# Inspect a zelen file\nnova inspect secret.zelen\n```\n\n### Demo — End-to-End Test\n\n```bash\n# Run the full automated demo (starts all services, tests everything)\ndocker run --rm rocheston/novazel demo\n\n# Keep services running after demo\ndocker run --rm rocheston/novazel demo --no-cleanup\n```\n\n---\n\n## Environment Variables\n\n| Variable | Default | Description |\n|---|---|---|\n| `NOVA_HOME` | `/root/.nova` | Identity storage directory |\n| `ATLAS_ADDR` | `0.0.0.0:8080` | Atlas listen address |\n| `NODE_QUIC_ADDR` | `0.0.0.0:4433` | Node QUIC listen address |\n| `NODE_API_ADDR` | `0.0.0.0:7777` | Node local API address |\n| `WEB_ADDR` | `0.0.0.0:7443` | NovaWeb QUIC listen address |\n\n---\n\n## Volumes\n\n| Path | Purpose |\n|---|---|\n| `/root/.nova` | Identity key files (`alice.json`, `bob.json`, …) |\n| `/data/sites` | NovaWeb static site files to serve |\n\n```bash\n# Persist identities across container restarts\ndocker run -v nova-identities:/root/.nova rocheston/novazel ...\n\n# Mount your website directory\ndocker run -v /my/website:/data/sites rocheston/novazel web \\\n --identity web1 --name mysite.novazel --atlas http://atlas:8080 \\\n --listen-novazel 0.0.0.0:7443 --serve /data/sites\n```\n\n---\n\n## Included Binaries\n\n| Binary | Role |\n|---|---|\n| `nova` | Main CLI — all commands in one binary |\n| `nova-atlas` | Atlas name-resolver service |\n| `nova-node` | Node daemon (QUIC + local API) |\n| `novaweb` | NovaWeb site server |\n| `nova-relay` | Relay daemon |\n| `nova-gateway` | Gateway daemon |\n| `nova-console` | Interactive TUI console |\n| `nova-playground` | Browser-based playground server |\n| `nova-inspect` | Inspect capsule / zelen files |\n| `nova-bench` | Performance benchmarking tool |\n| `nova-security-test` | Security test suite |\n| `nova-sim` | Network simulator |\n| `zurl` | curl for `novazel://` URLs |\n| `novademo` | Automated end-to-end demo |\n\n---\n\n## Architecture\n\n```\n+----------------------------------------------------------+\n| NovaZel Network |\n| |\n| Alice --[1. resolve bob.novazel?]--> Atlas |\n| <--[2. nzid + quic addr]---- |\n| |\n| Alice --[3. HELLO + OPEN_FLOW]-----> Bob's Node |\n| <--[4. WELCOME + DATA]------- |\n| |\n| Alice --[5. GET /index.html]-------> NovaWeb |\n| <--[6. HTML body]----------- |\n| |\n| +-------------------------------------------------+ |\n| | QUIC Transport * Zelen Encryption * FUSE | |\n| +-------------------------------------------------+ |\n+----------------------------------------------------------+\n```\n\n---\n\n## Source\n\nBuilt by **Rocheston** — cybersecurity research and education.\n\n- Docker Hub: [hub.docker.com/r/rocheston/novazel](https://hub.docker.com/r/rocheston/novazel)\n- Platform: `linux/amd64`\n- Base image: `debian:bookworm-slim`\n\nBuilt with 💛 by Haja Mo\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",56404011,"orgData","recentTags",[87,132],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98,"_46":121,"_122":90,"_123":29,"_124":52,"_53":125,"_126":127,"_128":106,"_129":121,"_130":62,"_131":17},"content_type","creator",4491791,"digest","sha256:1c4e1eaa109ac978687f0b388485684d729f16bf84968df8b5e3fd01fe2a6df4","full_size",56389088,"id",1170467313,"images",[99,115],{"_100":101,"_91":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":94,"_59":62,"_114":-5},"architecture","amd64","sha256:0ea983d495725a92fc2e54eb0679a399324a700ba645132d1b02eb9d0cf474bb","features","","last_pulled","2026-09-25T08:53:17.873103638Z","last_pushed","2026-05-20T01:58:12.002084861Z","os","linux","os_features","os_version","size","variant",{"_100":116,"_91":117,"_103":104,"_105":118,"_107":119,"_109":116,"_111":104,"_112":-5,"_113":120,"_59":62,"_114":-5},"unknown","sha256:558b7cb785bf3aa0a9897a8012af0bf55a9a841676ee4b8413ff3a23ee24fb19","2026-09-04T13:40:58.081806475Z","2026-05-20T01:58:12.684176936Z",1351,"2026-05-20T01:58:13.179469Z","last_updater","last_updater_username","media_type","latest","repository",31192123,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_88":40,"_89":90,"_91":92,"_93":94,"_95":133,"_97":134,"_46":137,"_122":90,"_123":29,"_124":52,"_53":138,"_126":127,"_128":106,"_129":137,"_130":62,"_131":17},1170467333,[135,136],{"_100":101,"_91":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":94,"_59":62,"_114":-5},{"_100":116,"_91":117,"_103":104,"_105":118,"_107":119,"_109":116,"_111":104,"_112":-5,"_113":120,"_59":62,"_114":-5},"2026-05-20T01:58:15.057919Z","0.1.0","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":150,"_157":158,"_146":173,"_174":11},{"_36":151,"_38":152,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":153,"_53":31,"_28":29,"_54":55,"_56":-5,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":154,"_75":11,"_76":156,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":155},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_159":160,"_161":-5,"_162":-5,"_163":164},"count",2,"next","previous","results",[165,169],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":133,"_97":166,"_46":137,"_122":90,"_123":29,"_124":52,"_53":138,"_126":127,"_128":106,"_129":137,"_130":62,"_131":17},[167,168],{"_100":101,"_91":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":94,"_59":62,"_114":-5},{"_100":116,"_91":117,"_103":104,"_105":118,"_107":119,"_109":116,"_111":104,"_112":-5,"_113":120,"_59":62,"_114":-5},{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_97":170,"_46":121,"_122":90,"_123":29,"_124":52,"_53":125,"_126":127,"_128":106,"_129":121,"_130":62,"_131":17},[171,172],{"_100":101,"_91":102,"_103":104,"_105":106,"_107":108,"_109":110,"_111":104,"_112":-5,"_113":94,"_59":62,"_114":-5},{"_100":116,"_91":117,"_103":104,"_105":118,"_107":119,"_109":116,"_111":104,"_112":-5,"_113":120,"_59":62,"_114":-5},[],"canDeleteTags","actionData","errors"]

rocheston/novazel

Tags for rocheston/novazel