Nikolai Konovalov
banner
li0ard.rest
Nikolai Konovalov
@li0ard.rest
Fullstack TS developer • cryptography engineer • OSS maintainer • connoisseur of coffee

Building eMRTD tools and creating OSS for 🇷🇺 GOST, 🇺🇦 DSTU, 🇧🇾 STB standards

Github: @li0ard • li0ard.rest
P.S. I'm tired of transferring ASN.1 schema to TS like 10 times and catching errors because of fucking CHOICE
November 22, 2025 at 10:37 PM
Especially funny situation with Ukrainian algorithms (DSTU)

Kupyna (DSTU 7564:2014) - modified Grøstl;
Kalyna (DSTU 7624:2014) - modified AES;
Strumok (DSTU 8845:2019) - modified SNOW 2.0;
Skelya (DSTU 8961:2019) - modified NTRU;
Vershyna (DSTU 9212:2023) - modified CRYSTALS-Dilithium.
September 9, 2025 at 5:21 PM
В продолжение поста
July 6, 2025 at 10:47 AM
Remarkably, Signal had same problem when developing the XEdDSA and VXEdDSA algorithms, but they solved it by forcibly zeroing the sign bit. (check 2.3 section of specification)

P.S I especially like that "libsession-util" repository intentionally disables issues
Specifications >> The XEdDSA and VXEdDSA Signature Schemes
This document describes how to create and verify EdDSA-compatible signatures using public key and private key formats initially defined for the X25519 and X448 elliptic curve Diffie-Hellman functions.
signal.org
June 25, 2025 at 7:31 AM
Also keep in mind that the current Blinded ID algorithm is reversible, i.e. it is possible to get the user ID knowing only the public key of SOGS.

A practical implementation of this algorithm is - github.com/theinfinityw...
June 23, 2025 at 9:22 PM