From a9ea0b5023903ee28f3f89cf1c8a8282b77cb2e9 Mon Sep 17 00:00:00 2001
From: fryorcraken <commits@fryorcraken.xyz>
Date: Fri, 17 Oct 2025 16:07:00 +1100
Subject: [PATCH] add encryption

---
 standards/application/reliable-channel-api.md | 22 +++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/standards/application/reliable-channel-api.md b/standards/application/reliable-channel-api.md
index afc9e8a..2315ef5 100644
--- a/standards/application/reliable-channel-api.md
+++ b/standards/application/reliable-channel-api.md
@@ -246,6 +246,25 @@ types:
   MessagePayload:
     type: array<byte>
     description: "The unwrapped message content (user payload extracted from SDS message)."
+
+  Encryption:
+    type: object
+    description: "Handles for encryption and decryption of messages. Encryption happens after SDS wrapping and before sending; decryption happens after receiving and before SDS unwrapping."
+    fields:
+      encrypt:
+        type: function
+        parameters:
+          - name: clear_payload
+            type: array<byte>
+        returns: array<byte>
+        description: "Encrypts the clear payload (SDS-wrapped message)."
+      decrypt:
+        type: function
+        parameters:
+          - name: encrypted_payload
+            type: array<byte>
+        returns: array<byte>
+        description: "Decrypts the encrypted payload to reveal the SDS-wrapped message."
 ```
 
 #### Function definitions
@@ -267,6 +286,9 @@ functions:
       - name: content_topic
         type: ContentTopic
         description: "The content topic to use for the channel."
+      - name: encryption
+        type: IEncryption
+        description: "Optional encryption/decryption interface. If not provided, messages are sent without encryption (passthrough)."
       - name: options
         type: ReliableChannelOptions
         description: "Configuration options for the Reliable Channel."