I managed to get botan (the cryptography toolkit) cross compiled for Win x86-64 (from Linux x86-64). It took all day, but I got it, including even running the test suite under wine to verify it's all correct.
Patch submitted to libbotan to make it easier for others in the future.
Now I'm trying to figure out why the cmake files in keepassxc aren't able to find my newly created botan-2.pc file that defines how to link to the library, what library and header paths should be included
Dr. Hax
Dr.Hax@hax0rbana.org
npub16v82...eqha
Cypherpunk. Infosec veteran of about 15 years (vulnerability research, exploit development and cryptography). Cypherpunks write code. :-)
Signet maintainer. Self-custody your passwords... in hardware! https://hax0rbana.org/signet
Want to see wider adoption so Bitcoin can be used as digital cash and not just an investment vehicle.
XMR: 44RDkTFmTeSetwAprJXnfpRBNEJWKvA5dBH5ZVXA4DofgoZ9AgjyZdSa2fo7pMD3Qe3pdKga8X22y3Lyn1xYde5kPQPzVUu
"I just heard that a cryptography professor at Indiana University had his house raided and was fired. Don’t know much more." https://www.heraldtimesonline.com/story/news/local/2025/03/28/fbi-department-of-homeland-security-agents-search-house-in-bloomington-indiana/82710451007/
Via the cryptographer Matthew Green:
IOC.exchange
Matthew Green (@matthew_d_green@ioc.exchange)
I just heard that a cryptography professor at Indiana University had his house raided and was fired. Don’t know much more. https://www.heraldtime...
Today I got botan2 cross compiling for x86-64 Windows (from Linux x86-64).
Why? Because I want to cross compile keepassxc and this is getting in my way.
Why do I want to cross compile keepassxc? Because I want to use that code in the signet client to import keepass v4 databases
And I want my (Linux based) CI to be able to continue to crank out windows builds. That's why.
After Botan, I'm going after argon2, and then others.
Oh and I had to build my own compiler because mxe repos are way old. So I'll probably be hitting up their mailing list to find out if someone has the ./debian directory that produced that .deb file so I can give them an updated build. If nothing else, I'd like to at least built it and put it in my own apt repo.
Yeah, I'm way down the rabbit hole on this one. And if I manage to dig myself out, I'm going to do it all over again for i686!
I am having so much fun with disposable VMs (DVM) in #Qubes, it should be illegal!
I'm doing #dev work again today and when I think I have the minimal commands to reproduce an issue, I'll spin up a DVM, paste the commands and make sure I hit the problem I expected. If not, I'll poke around to fix it (install a dependency, update the PATH, etc.) and then repeat.
Takes about 8 second to spin up a fresh VM. Very rapid #development!
OK, normally when I hear about someone who doesn't know crytpography or Rust writing Rust code and rolling their own cryptographic protocol, I'd almost certainly not going to use their code... but... Wang Lu seems to be the real deal, just picking up these skills along the way. Their highly experimental hardware password manager, which is not open source hardware nor software, sounds like it's a pretty decent design. If it actually does what is described, I am impressed.
It'll be interesting to follow along and see if it turns out to be an even more hardcore password manager than the #Signet. Of course, there's no proof that any of this code exists and works, so it could all be vaporware. We won't know unless it's released (in either source of binary form).


Cardputer as a Hardware Password Manager
For the past month, I've been prototyping my own hardware password manager using the Cardputer , a compact device that's surprisingly perfec...
Productive day today!
#gardening - I mixed about a cubic yard of soil & rice hulls, put the rain barrel back in service, and took a first pass at fixingthe gutter
#signet - documented using the qt creator IDE, fixed all compiler warnings, and improved the Windows CI/CD build pipeline
Not much going on today.
No #meshtastic #solar node updates because I'm waiting on the lower gain antennas
No #Signet cross compiling updates because I'm busy doing house projects to get ready for gardening.
No #gardening updates because the tasks are uninteresting, like level the rain barrel stand and fix the gutter.
No production server updates because a.) I was waiting on RAM, and b.) it's boring.
No test server updates because I've been procrastinating fixing it ever since it literally blew up on me last time I tried to turn it on.
But in truth, all this completely unsexy grunt work is what enables the interesting work. So I soldier on. Getting stuff done. Like a boss.
Oops. Accidentally invited a journalist to a #signal group about war planning. 🤣

The Atlantic
The Trump Administration Accidentally Texted Me Its War Plans
U.S. national-security leaders included me in a group chat about upcoming military strikes in Yemen. I didn’t think it could be real. Then the bo...
Cross compiling is usually difficult to get set up, but that's doubly true when the target is macOS, square that if it's QT and square it again is it's a different CPU architecture.
I'm trying to grind through it, but I think it might be grinding through me instead.
I'm attempting to start with the same CPU architecture (x86_64) to minimize the number of concurrent changes. One of us will be more stubborn, and I think I'll eventually outlast the build tool, as good of a fight as they may put up.
#development #mac #linux #foss
A buddy is playing wotb AI video and so I had him make some videos of @ZEUS
I big shout out to the person in AntPool who mined 888888. That was a tricky one to find. 😂
Anyone else excited for 888888? 🤓 Yeah, I'm a dork
I'm an AI coding skeptic, but I'm willing to be proven wrong. If you think AI can write code, prove it.
Challenge: write a CLI program that will list all accounts in a Signet password manager.
An existing CLI tool already exists and can unlock the device, the AI just has to implement a task to list accounts.
You can use any tool you want, open source, closed, paid, free... I don't want any excuses for why AI isn't up to the task. 😂


GitLab
signet / Signet Cli · GitLab
Successor to https://github.com/sotpapathe/signet-cli
Current status:

