Wiktor Kwapisiewicz

https://metacode.biz/@wiktor

I work on cryptographic software and integration with hardware security modules (TPMs, PKCS#11...) primarily in 🦀 Rust:

◆ [tss-esapi](https://github.com/parallaxsecond/rust-tss-esapi )
◆ [cryptoki](https://github.com/parallaxsecond/rust-cryptoki )
◆ [ssh-agent-lib](https://github.com/wiktor-k/ssh-agent-lib )
◆ [several other crates](https://crates.io/users/wiktor-k )

I have been involved in several OpenPGP projects and co-authored the book 📚 [“OpenPGP for application developers”](https://openpgp.dev/book/ ).

A significant portion of my projects have been financed via the 🇪🇺 [Next Generation Internet program](https://ngi.eu/ ) thanks to substantial help from the [NLnet Foundation](https://nlnet.nl/ ).

I ❤️ open-source and try to contribute wherever I can. Check out my links! When no-one is watching I'm developing ActivityPub software...

ArchLinux Staff: https://archlinux.org/people/support-staff/#wiktor
GitHub: https://github.com/wiktor-k
SteamOS GitLab: https://gitlab.steamos.cloud/wiktor
Me elsewhere: https://keyoxide.org/aspe:metacode.biz:CK7LM6VO32K2AGIDXC7LYFRBSA
📍: 🌌 ☀️ 🌍 🇪🇺 🇵🇱

Public Key

npub1859fy7akhp50ffz23kwmep24jnvdphwfx25jgmkgdavn8mekhkusflycwv

NIP-05 Address

wiktor_at_metacode.biz@momostr.pink

Profile Code

nprofile1qqsr6z5j0wmts685539gm8dus42efkxsmhyn92fydmyx7kfnaumtmwgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds4dts3v

Publishing to

relay.primal.net

nos.lol

relay.damus.io

Author Public Key

npub1859fy7akhp50ffz23kwmep24jnvdphwfx25jgmkgdavn8mekhkusflycwv

Show more details

Published at

2026-03-21T18:48:25Z

Kind type

0 Metadata

Event JSON

{ "id": "79adf313d946b8f9fd7f7df55df2cad36a798c5926e1df9027d37cb9a72d4794", "pubkey": "3d0a927bb6b868f4a44a8d9dbc855594d8d0ddc932a9246ec86f5933ef36bdb9", "created_at": 1774118905, "kind": 0, "tags": [ [ "t", "nobot" ], [ "t", "openpgp" ], [ "t", "pgp" ], [ "t", "ssh" ], [ "t", "tpm" ], [ "proxy", "https://metacode.biz/@wiktor", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://metacode.biz/@wiktor", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Wiktor Kwapisiewicz\",\"about\":\"I work on cryptographic software and integration with hardware security modules (TPMs, PKCS#11...) primarily in 🦀 Rust:\\n\\n ◆ [tss-esapi](https://github.com/parallaxsecond/rust-tss-esapi )\\n ◆ [cryptoki](https://github.com/parallaxsecond/rust-cryptoki )\\n ◆ [ssh-agent-lib](https://github.com/wiktor-k/ssh-agent-lib )\\n ◆ [several other crates](https://crates.io/users/wiktor-k )\\n\\nI have been involved in several OpenPGP projects and co-authored the book 📚 [“OpenPGP for application developers”](https://openpgp.dev/book/ ).\\n\\nA significant portion of my projects have been financed via the 🇪🇺 [Next Generation Internet program](https://ngi.eu/ ) thanks to substantial help from the [NLnet Foundation](https://nlnet.nl/ ).\\n\\nI ❤️ open-source and try to contribute wherever I can. Check out my links! When no-one is watching I'm developing ActivityPub software...\\n\\nArchLinux Staff: https://archlinux.org/people/support-staff/#wiktor\\nGitHub: https://github.com/wiktor-k\\nSteamOS GitLab: https://gitlab.steamos.cloud/wiktor\\nMe elsewhere: https://keyoxide.org/aspe:metacode.biz:CK7LM6VO32K2AGIDXC7LYFRBSA\\n📍: 🌌 ☀️ 🌍 🇪🇺 🇵🇱\\n\",\"website\":\"https://metacode.biz/@wiktor\",\"picture\":\"https://www.gravatar.com/avatar/575f6fc45c43837b73b306435c2ac8d6.jpg\",\"banner\":\"https://metacode.biz/@wiktor/background.jpg\",\"nip05\":\"wiktor_at_metacode.biz@momostr.pink\"}", "sig": "667334d872c9803891e956ac802bdbc1445e941a603054674d7bda437895b43c1bc420d4fd7623a8f92cc42e0a3648663f5f24d8139eef1a0408f9194bd5417b" }

Last Notes

2025-12-16 14:09:09 UTC

- reply

The code isn’t actually the hardest part but rather procuring a HSM with support for PQC. Believe it or not but Arch Linux doesn’t have the same financial backing as RedHat.
We did consider it though, you can see the exact list and reasoning at https://rfc.archlinux.page/0059-automated-digital-signing-of-os-artifacts/#alternatives-considered
If there are any hardware vendors that'd happily sponsor these I’m all ears.
The FOSDEM talk is definitely on our radar, thanks and have a nice day! 👋

2025-03-28 10:53:03 UTC

- reply

Just for completeness there was a web+mastodon URI scheme in the use years ago but it got removed: https://github.com/mastodon/mastodon/issues/6255
The tl;dr is that URI schemes have bad fallbacks on the web. If the user doesn’t have an app installed then either the browser doesn’t do anything (it’s bad), shows error page (worse) or a chooser (which, in case of no app installed, also doesn’t help).acct
URI scheme is internally used by WebFinger if someone searches for accounts using the @account@example.com text.
Sorry for not offering anything actionable 😓