Cryptographic Security

InTunnel implements enterprise-grade cryptographic security to protect your tunnels and ensure audit log integrity.

Overview

Our security system consists of three core components working together to provide comprehensive protection:

Fig. 1 – The three pillars of InTunnel's cryptographic security

Ed25519 Digital Signatures

Fast, secure authentication using modern elliptic curve cryptography.

• 128-bit security level
• Microsecond signature verification
• 32-byte public keys, 64-byte signatures

Learn more →

Merkle Tree Audit Logs

Efficient integrity verification for audit events using cryptographic hash trees.

• O(log n) proof verification
• Snapshot-based integrity checks
• Tamper-evident by design

Learn more →

Hash Chain Integrity

Every audit event is cryptographically linked to its predecessor.

• Sequential event verification
• Immediate tampering detection
• Unbreakable chain of custody

Learn more →

Security API

InTunnel exposes public endpoints for security verification:

Endpoint	Description
GET /api/security/status	Get security system status
GET /api/security/public-key	Get Ed25519 public key for verification

Admin Endpoints

Administrators can access additional verification tools:

Endpoint	Description
GET /api/security/audit	Query audit logs
POST /api/security/verify-chain	Verify hash chain integrity
POST /api/security/merkle-snapshot	Create Merkle tree snapshot

Quick Verification

Check if security is enabled:

curl https://intunnel.cloud/api/security/status

Response:

{
  "security_enabled": true,
  "features": {
    "ed25519_signatures": true,
    "merkle_audit_logs": true,
    "hash_chain_integrity": true
  },
  "key_id": "0fe1d58d053ee6dc...",
  "key_algorithm": "Ed25519"
}

Get the public key:

curl https://intunnel.cloud/api/security/public-key

TIP

The public key can be used to independently verify any token issued by InTunnel.

Audit Events

The following events are logged with cryptographic signatures:

Event Type	Description
USER_LOGIN	Successful user authentication
LOGIN_FAILED	Failed login attempt
ACCOUNT_LOCKED	Account locked after multiple failures
USER_REGISTERED	New user registration
USER_LOGOUT	User session ended
TUNNEL_CREATED	New tunnel created
TUNNEL_DELETED	Tunnel removed
CHAIN_VERIFIED	Hash chain verification performed
MERKLE_SNAPSHOT	Merkle tree snapshot created

Security Dashboard

Administrators can access the security dashboard at:

https://intunnel.cloud/admin/security

Features:

• Real-time key status
• Chain integrity verification
• Audit log statistics
• Recent security events
• One-click Merkle snapshots