[Keytrans] Implementation of draft-ietf-keytrans-protocol-03 in Rust

Guy Fischman <gfischman@gmail.com> Mon, 23 February 2026 11:11 UTC

Return-Path: <gfischman@gmail.com>
X-Original-To: keytrans@mail2.ietf.org
Delivered-To: keytrans@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 90AEEBC18851 for <keytrans@mail2.ietf.org>; Mon, 23 Feb 2026 03:11:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uqz2u8IMyHb5 for <keytrans@mail2.ietf.org>; Mon, 23 Feb 2026 03:11:46 -0800 (PST)
Received: from mail-wr1-x433.google.com (mail-wr1-x433.google.com [IPv6:2a00:1450:4864:20::433]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id C0722BC182A4 for <keytrans@ietf.org>; Mon, 23 Feb 2026 03:10:44 -0800 (PST)
Received: by mail-wr1-x433.google.com with SMTP id ffacd0b85a97d-4358fb60802so3071647f8f.1 for <keytrans@ietf.org>; Mon, 23 Feb 2026 03:10:44 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1771845037; cv=none; d=google.com; s=arc-20240605; b=hhzJuSrPpeYNrtSCRVTv+wjnGHffTaEZ3lYgYKXJmTNpAcd8wMqKoDqo/WELzi9nLd dHIVwgkbEMzbRJj2V/0b+J3L3S6bcgrwnlaOz2OneRqGWm+xFC31sKvC3KKFOWVfnl+G la2BDNd2ZT7yx1aK2NBktkBdR6EL+jW0Vz94L9DwG06aekC0Iel5nb9De0JgS0V5G5l4 1d5Awf3o+ZMEJl8AtOqoGloU2jiqaTz9OoXs3/UZwjMon95EeJsC2QIv3V26X4uGPdFQ zVHwKi8KI90H5PLLnEX2YraXOexSYB5m4BNEpz86zmgX5FMnYUG1Nl/yxtfqWYeTAnVe Yn7g==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=TTlR7pjdzBAKcIax2WkfzpW+Dtq2ZCG6ZpmHCJtigw4=; fh=xYLGzqMtx6zch4/k+nwU7+f/2cBTFdlkgzzfxWSNAOU=; b=Dogtax4JsGrrfaUBiFEztJEFKvNqV1z0egmTP9kDy7bbnZq5qvQPuxAFU3kqc3KbMR xBcZqTFuPJyN0LGxEFVSMVTaUsdy1vI8XWh1NzN2qbddvkb2P1eUd62lrEJKkwcHyL+c pz/i5IVq6cIew74E+VlIauKC/z2tghh36n8+bDfZS/SfULdOdW6JfZHfVe33d67cquCB wq7ZMA5PCDKhkfCG1EkeT5g1UUDHWLtTKw+J7aLH2ue8BaELz2h3K+y4dQFnXCZqC4OP V5W9t8C4OhzBZTLp5eSwqtWBEksu/BrnKz7xpVvBtI6ABBWoqeu0izecX1eVMm4Ha9xY 6zNQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1771845037; x=1772449837; darn=ietf.org; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=TTlR7pjdzBAKcIax2WkfzpW+Dtq2ZCG6ZpmHCJtigw4=; b=CJIqcUdTjlUW8KeyIWPLgbGyAPCIa4Q+ifVjHmfN6bpIBvL1trPTkPetmS+uCsy7FO LKFyTqBcnDm9WnWlmQ1D2anrPJQj/xGIJSjwktk9IOZT40nfB60SqWsgKOqE0C7Hl5Mc SWt5+NS2ME1UETyilF8QX3fy1kgJ0vcUXI2RHg3QapFeWqDd+K2tVKN3KQfk4kOQyCoG 7r0uCa+vUEgDvzA6hEqKG2E+PEKuc9c6luEOIQ1xuZYGXreiihp1SIJotsH6igZCytFA z+prtwpvedwIy3GV6rposTej46D5T0n8lvbf5vOqpD1XArz7JpPISe0BQtnZoy4VPvCr kpnA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771845037; x=1772449837; h=to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=TTlR7pjdzBAKcIax2WkfzpW+Dtq2ZCG6ZpmHCJtigw4=; b=sNjSOIhKerzrnGL++amMqtyHaGCn1GvY5upebCRTf+eTTfOO1LD7IML05LiW/ZB/Vt TM4BdRad2ai+QDaCb+ZOj3Vg378eYsTcLo0KDUY8acEgs/F7ECVc07xKekgYLnspADsW NYfHtqrP9ejf7h9lMYR8Q+j37UBWPSopVwaQr67X4k5VyR2nWYRGbwgvc1pi+E29vtTE BOqPfvbI98VIBM+oHu+YuZr3jEYkvZ3h6UmWJ4xpkd/7SRS4xIwkvEAZMPpYaCF0oP0Q dX65Ktdd7acL3aDww679BBIfifKXgB0OU93h6qAxOyR9Es621hPR8mxEp+ygSGNDTtmZ vcYQ==
X-Gm-Message-State: AOJu0YwMsIMeH0XKGf0ZN3TWR7rIyzTjk5TGfaPPCykhlRV/QUz5womX KfZwb69Vl82goCAcFK5wekb5NJJsY651CSCUsFR99ymgcvh/8CDsJpb0ZQnBCNP5p2ZUQJOAC65 NTBAVri/aYfFhLPig7ZZVeAJe3DkQDy6REx8=
X-Gm-Gg: ATEYQzyy1QRC51Slo+sYTL+J+Kr51g2Ino+EYNGRvB/HBJku9qw7PmuLTm9f7UO+kJU 2ISjRW3JEoy6KH3JiEutLW9dq2DSrwMgleUt0keyI6ihq8vsX61nMgeW5RX5RUvRe0uHCR+JzUo qXl9+i3Cib6EgdaJ31E70G2GFAMqpwfJvXPUtZ9EWr8raKHWvPPzMEWZFVyQOnIuwXCUumBp5mr +T6x9Gke/gCd7z7Du2OmI0fTANlzGSEui12HmGLMVZIWob7JZOB3BUplvcrdHHXT0oLAgB0zXrN RXbdJFnBoSQQSAWpJA==
X-Received: by 2002:a05:6000:18a3:b0:437:722d:5c66 with SMTP id ffacd0b85a97d-4396270cc69mr28395339f8f.16.1771845037395; Mon, 23 Feb 2026 03:10:37 -0800 (PST)
MIME-Version: 1.0
From: Guy Fischman <gfischman@gmail.com>
Date: Mon, 23 Feb 2026 12:10:26 +0100
X-Gm-Features: AaiRm52PyfQgrk7ErKSnYP9JCWrdb8j9RTmSJ_ml-9ZE-qGwOTStlFtCG5gvNjA
Message-ID: <CAKbydOVqxrKzM_q80AtSk7Sb13kAmnLvMz8Lz54OMQ748pj7yA@mail.gmail.com>
To: keytrans@ietf.org
Content-Type: multipart/alternative; boundary="0000000000000d11be064b7bd26a"
Message-ID-Hash: CJZR6FC5WHB7FQIG36O3F2BPN7AHHDQN
X-Message-ID-Hash: CJZR6FC5WHB7FQIG36O3F2BPN7AHHDQN
X-MailFrom: gfischman@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Keytrans] Implementation of draft-ietf-keytrans-protocol-03 in Rust
List-Id: Key Transparency <keytrans.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/keytrans/oVMbVLiP9fxD6Qs0eIPvvvElB_I>
List-Archive: <https://mailarchive.ietf.org/arch/browse/keytrans>
List-Help: <mailto:keytrans-request@ietf.org?subject=help>
List-Owner: <mailto:keytrans-owner@ietf.org>
List-Post: <mailto:keytrans@ietf.org>
List-Subscribe: <mailto:keytrans-join@ietf.org>
List-Unsubscribe: <mailto:keytrans-leave@ietf.org>

I've published RuKT, an implementation of the current draft KT protocol in
Rust - https://github.com/guyfischman/RuKT. It will be deployed shortly in
the context of a zero-trust git forge - https://sovereigngit.com. Feedback
welcome on both.

-Guy