Rust Framework Proposes Five-Tier Cryptographic Identity System for Multi-Device Security

A new software specification called Spec 02 outlines a multi-device identity architecture implemented in a Rust crate called siar-identity-multidevice. The design challenges the longstanding practice of assigning a single cryptographic keypair to a single user, arguing this model fails in real-world scenarios where people use multiple devices. Instead, it separates identity into five distinct tiers, ranging from an offline root keypair to ephemeral transport identities, ensuring no single layer conflates account ownership with device or session state. A root private key is kept offline or in hardware-backed secure enclaves and is only used for high-consequence administrative actions such as issuing device certificates. The architecture also aims to support instant revocation, zero-knowledge device pairing, and resilient messaging across fragmented or hostile networks.