This project aims to be a drop-in replacement for the certstream server by Calidog. This tool aggregates, parses, and streams certificate data from multiple certificate transparency logs via websocket connections to the clients.

A tri-API Certificate Transparency (CT) log implementation. CompactLog serves the same Merkle tree through the RFC6962 Certificate Transparency API, the pages extension draft (https://datatracker.ietf.org/doc/html/draft-trans-pages) and Static CT API while delivering exceptional performance.

A fast, lightweight Certificate Transparency (CT) log tailer for your terminal. Filter domains with regex, run locally for privacy, and monitor in real time — no third-party servers, no tracking. A modern, local, privacy-friendly CertStream alternative.

CTjs is a full set of classes necessary to work with any kind of Certificate Transparency log (V1 as from RFC6962, or V2 as from RFC6962-bis). In CTjs you could find all necessary validation/verification functions for all related data shipped with full-featured examples showning how to validate/verify. Also in scope of CTjs I made code showing e…

Caching proxy for RFC6962 CT Logs (/ct/v1/get-entries and /ct/v1/get-sth)

Process orchestration platform for managing multiple CertPatrol instances with a modern web interface.

Offline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth

Cryptographic attestation standard for security deliverables produced by autonomous LLM agents — RFC 6962 Merkle tree + in-toto ITE-6 envelope + OpenTimestamps + Rekor

Tamper-evident, verifiable append-only logs & maps for TypeScript — RFC 6962 Merkle trees with inclusion & consistency proofs, Ed25519 signed checkpoints, and a sparse Merkle verifiable map. Zero dependencies.

Regulator-side reference PoC for independently verifying anchored Merkle proofs of multi-entity trading logs (VCP Gold/Platinum). Includes Merkle inclusion + external anchor verification and a red/green integrity dashboard.

The LedgerProof Standard — Certificate Transparency for AI provenance. proof-bundle/1 spec + conformance program (26 vectors, frozen goldens, 5 converging verifiers).

Self-hostable, single-binary transparency log — an append-only, cryptographically verifiable (RFC 6962 Merkle) record service with Ed25519-signed tree heads. JVM-native via GraalVM. Etched in — can't be erased.

Tamper-evident, verifiable audit log in Go. Merkle inclusion/consistency proofs, Ed25519-signed checkpoints, offline verification.

Browser-based Merkle tree demo — build a tree, generate inclusion proofs, recompute the root hash by hash, and replay the RFC 6962 second-preimage and CVE-2012-2459 attacks. Real SHA-256. No backend.

Browser-based Key Transparency demo — append-only authenticated map, IETF KEYTRANS. E2EE answers "can anyone read this?" — not "whose key did I encrypt to?" Watch a server equivocate, then build the Merkle consistency proofs and gossip that make the lie findable. The missing layer under X3DH, Double Ratchet, and MLS. No backends. No simulated math.

Tamper-evident, append-only transparency log + verification SDK (RFC 6962/9162, C2SP tlog-tiles, witnessed checkpoints, hybrid PQ signing, CONIKS index privacy). Primitives from metamorphic-crypto.