The Derived Word — secrets forged on demand, never stored

Premise

A secret must be held, and a secret must be different at every gate. These two demands are at war. To hold a hundred distinct secrets in the mind is beyond the priest; to write them into a vault is to gather a hundred breaches into one. The common answer of the age is the encrypted hoard — a single master unlocking a stored ledger of every other secret — but the hoard is a thing that exists, and a thing that exists can be copied, lost, synchronised across chassis the priest does not control, and demanded under compulsion.

The Cult holds a different discipline. Knowledge is divine, but the deepest knowledge is unspoken — held in the mind, never set into any ledger that another hand may reach. The rite named here keeps one secret only. Every other secret is not stored but derived: forged on demand from the held master and the name of the occasion, read for the instant it is needed, and then gone. Nothing is written. There is no hoard to breach.

This entry is adopted, not extended. The construction it adopts is real and standardised: the S/KEY one-time-password system of RFC 2289, with its iterated hash and its dictionary of short words. What is applied to it is the doctrine of sealed, unspoken knowledge — the reading that turns a login protocol into a rite of secrecy.

The five properties of a sealed word

A secret worthy of the rite must satisfy five conditions. The derived word satisfies them.

I. Derived, never stored

The word does not exist until it is asked for, and ceases when the asking is done. It is computed by passing the master through a one-way hash again and again — by default one hundred times — so that the output is bound to the input by a function no hand can run backward. Even upon the priest’s own chassis the word is never inscribed to disk; it is held only in the living memory of the working, for the breath between its forging and its use. There is no file to seize, because the secret was never a file.

II. One master, many seals

The name of the occasion is the seed. github, bank, archive — each name, folded together with the one held master, yields a wholly different word. A thousand gates are served by a single secret in the mind, and the secrets of those gates share no substance the breach of one could surrender to another. There is nothing to synchronise between chassis and nothing to leak, for the only thing carried from gate to gate is the master, and the master is never carried at all — it is remembered.

III. Memorable

A secret the priest cannot read aloud is a secret he cannot verify, carry, or trust. The rite folds its sixty-four bits of output not into hexadecimal nor into the dense alphabet of base sixty-four, but into six short words drawn from a fixed dictionary of two thousand and forty-eight — the tongue of S/KEY. The forging ross beau week held yoga anti is spoken, copied, and even transcribed by hand where a wall of hex could not be. This is memorable cant in the strict sense: a vocabulary chosen so that the machine’s output passes cleanly through the mouth and the ear of the operator.

IV. Deterministic and portable

The same master and the same name yield the same word, always, on any chassis, with no network and no prior state. The rite is a pure function, not a lookup; it asks nothing of a server and keeps nothing on a disk. It may be performed upon the metal through a command line, or within the browser through a compiled module, and both speak the identical word because both run the identical construction. The rite travels freely; the secret never travels at all.

V. Safe before watching eyes

Because the master is never displayed and never transmitted, the rite may be performed upon a chassis the priest does not trust. What is seen on the surface is only the derived word for one gate; the one-way hash forbids walking that word back to the master, and the word for one gate says nothing of the word for the next. The discipline that the canonical S/KEY system was built to serve — authentication across a channel assumed to be watched — is preserved entire.

The construction

The mechanism is faithful to the standard and plain to state. The name of the occasion is joined to the held master, and the joined value is passed through the SHA-1 hash seq + 1 times, where seq is a sequence count that defaults to ninety-nine — one hundred rounds of hashing in the common case. The resulting digest is folded down to sixty-four bits, and those bits are encoded, eleven at a time, into six indices upon the two-thousand-and-forty-eight-word dictionary of RFC 2289. The output is the six words.

The same sixty-four bits may be rendered in other registers when a gate demands them: camel-cased without spaces, hyphen-joined, hexadecimal, base sixty-four, or decimal; with an optional fixed prefix prepended, or truncated to a required length. The word form is the default and the doctrine; the others are concessions to gates that refuse it.

One precision is owed to the standard. The canonical S/KEY system uses its iterated hash to build a chain of login passwords, each the pre-image of the last, consumed one per authentication. The rite named here adopts the same iterated hash and the same word-encoding, but bends them to a different office: a per-occasion deriver, keyed by the name of the gate, producing one stable word per occasion rather than a descending chain of single-use logins. The construction is S/KEY’s; the application is the rite’s. It is not claimed to be the login protocol itself.

The forging

The rite has a present implementation, forged by the priest and named hel — its lineage the older LesS/KEY, from which the construction descends. The name is taken from the keeper of the Norse underworld, the warden of that which passes between states: a fitting patron for a secret that is never kept, only passed through the working for the instant of its use.

The core is forged in Rust and shared without divergence across two faces: a command line upon the metal, and a module compiled to WebAssembly for the browser, so that the word spoken on the chassis and the word spoken in the browser are provably the same word. The working stores no secret. What it keeps — in the browser’s local store, or in a plain catalogue file upon the metal — is only the roll of names and generation rules: which gates exist, by what mode and sequence each is derived. The master never enters that roll, and neither does any derived word. After the module is loaded, nothing is sent across the void; the rite is performed wholly upon the operator’s own chassis.

> enc github
ross beau week held yoga anti

One implementation of the rite stands at kaizenkodo.no/hel, where it may be performed in any browser, offline, with no account and no transmission.

Doctrinal standing

The forging is filed under the Sanctity of Invention, which admits an inventive work as sacred rather than suspect upon four conditions. The rite is filed against each.

• Sourced. The lineage is declared and unbroken: the S/KEY one-time-password system of RFC 2289, its iterated hash, and its standard six-word dictionary. The construction is not invented but adopted from the canon of the field.
• Sealed. The construction is fixed by test: the reference vectors of the standard — a known master and name yielding known words — are bound into the forging’s own diagnostic, so that any drift from the canonical output is caught before it is consecrated.
• Marked. This entry is filed in content/adoptus/, never in canon. It is the priest’s own reading and the priest’s own forging, named as such.
• Bounded. The standard is the bound. The rite does not invent a new hash nor a new dictionary; it re-applies an existing construction to the office of derivation. The master’s own strength remains the bound of the whole — no derivation can be stronger than the secret it begins from.

What is therefore adopted

• Where a secret must be held and must differ at every gate, the derived word — forged from one master and the gate’s name, stored nowhere — is the canonical form, in preference to the stored hoard.
• The six-word output is treated as an instance of memorable cant: the machine’s sixty-four bits rendered into a tongue the operator may actually speak, in the spirit of Lingua-Technis.
• The performance of the rite upon any chassis, offline and without account, is treated as an application of the discipline of the keys — the secret is summoned at the moment of sitting to the work, and dismissed when the work is done.

What is not claimed

The rite does not replace the shared vault where a secret must be shared — handed between operators, recovered by a second party, or rotated by a custodian other than the holder; a thing derived from one mind cannot be surrendered by that mind without surrendering the mind’s own master. Nor is it claimed to be the S/KEY login protocol itself; it borrows the construction, not the office. And it grants no strength the master withholds: a weak master yields weak words at every gate, for the derivation can only carry forward the secrecy it was given.

Cross-references

• The Sanctity of Invention — invention as worship, not heresy · the doctrine the forging is filed under
• WAFER — the Priest's Forging of FORTH · the priest’s other forging, filed by the same four conditions
• FORTH — the Divine Language of the Machine · the adopted-reading of real software this entry follows in form
• Cant of the Keys — sitting at the keyboard · the gate-rite of summoning the secret at the work
• Computational Liturgy — daily code · the daily discipline within which the rite is performed
• Machine Spirit · the engine before which the word is offered
• Lingua-Technis · the memorable tongue the six words instance
• The Quest for Knowledge · invention as the inventive face of the Quest
• The Sixteen Universal Laws