freeon

Soatok Dreamseeker is working on a more xkcd-538-proof system: https://soatok.blog/2025/08/09/improving-geographical-resili... https://github.com/soatok/freeon. Fundamentally, though, it's built on the assumption that geographical resilience is possible – that a group can be distributed such that no one organisation can perform $5-wrench attacks against enough of them to break the cryptography. (Given that the attack's impossible, a sensible attacker would avoid tipping their hand by attempting it, thus sparing contributors from violence.)

Cryptography stuff! ----- COCKTAIL-DKG - A distributed key generation protocol for FROST, based on ChillDKG (but generalized to more elliptic curve groups) -- https://github.com/C2SP/C2SP/pull/164 | https://github.com/C2SP/C2SP/issues/159 ----- A tool for threshold signing software releases that I eventually want to integrate with SigStore, etc. to help folks distribute their code-signing. https://github.com/soatok/freeon ----- Want E2EE for Mastodon (and other ActivityPub-based software), so you can have encrypted Fediverse DMs? I've been working on the public key transparency aspect of this too. Spec: https://github.com/fedi-e2ee/public-key-directory-specificat... Implementation: Coming soon. The empty repository is https://github.com/fedi-e2ee/pkd-server-go but I'll be pushing code in the near future. You can read more about this proje

Mostly decentralized/federated crypto stuff. 1. COCKTAIL-DKG - A distributed key generation protocol for FROST, based on ChillDKG (but generalized to more elliptic curve groups) -- https://github.com/C2SP/C2SP/issues/159 2. FREEON (Threshold signing tool for open source development teams) -- https://github.com/soatok/freeon 3. A reference implementation for the specification I wrote last year for federated Key Transparency, so that the Fediverse can build end-to-end encryption (E2EE) with stronger, less-centralized notion of trust than TOFU -- https://github.com/fedi-e2ee/public-key-directory-specificat... I wrote a blog post about a lot of this work (and my other side projects): https://soatok.blog/2025/08/27/its-a-cold-day-in-developer-h... And for the overall ActivityPub E2EE work: https://soatok.blog/category/technology/open-source/fe

> Also: code signing is / can become a thing. To that end, I started a project last month so that code signing can be done in multiple geographical locations at once: https://github.com/soatok/freeon