https://github.com/kagal-dev/taistamp

Signed TAI64N timestamps over HTTP — Ed25519 over WebCrypto
https://github.com/kagal-dev/taistamp

cloudflare-workers cryptography dkim ed25519 eddsa monorepo signing tai64n timestamps typescript webcrypto

Last synced: 21 days ago
JSON representation

Signed TAI64N timestamps over HTTP — Ed25519 over WebCrypto

• Host: GitHub
• URL: https://github.com/kagal-dev/taistamp
• Owner: kagal-dev
• License: mit
• Created: 2026-05-01T18:43:56.000Z (about 2 months ago)
• Default Branch: main
• Last Pushed: 2026-05-26T23:09:37.000Z (24 days ago)
• Last Synced: 2026-05-27T01:12:30.571Z (24 days ago)
• Topics: cloudflare-workers, cryptography, dkim, ed25519, eddsa, monorepo, signing, tai64n, timestamps, typescript, webcrypto
• Language: TypeScript
• Size: 323 KB
• Stars: 0
• Watchers: 0
• Forks: 0
• Open Issues: 12
• Metadata Files:
  • Readme: README.md
  • Agents: AGENTS.md

Awesome Lists containing this project

README

          
# taistamp — signed TAI64N timestamps over HTTP

Two TypeScript packages: an HTTP handler that issues

Ed25519-signed TAI64N timestamps, and the WebCrypto

signing toolkit it builds on, with JWKS-ready and

DNS-TXT-ready public key publication.

[![Licence: MIT](https://img.shields.io/badge/Licence-MIT-blue.svg)](./LICENCE.txt)

[![Node.js Version](https://img.shields.io/badge/node-%3E%3D20-brightgreen)](package.json)

[![pnpm](https://img.shields.io/badge/pnpm-%3E%3D10.33.2-orange)](package.json)

## Use cases

- Issuing authenticated wall-clock time over HTTP, for

  receipts, audit trails, and anti-replay.

- Workers, serverless, and edge runtimes where an NTP

  stack or unauthenticated TLS handshake clock isn't

  enough.

- Independent verification of timestamps after the fact

  — clients keep the signed payload, fetch the verifying

  key from a JWKS endpoint or DNS TXT record, and

  re-check without re-trusting the server.

## Packages

### [`@kagal/taistamp`](packages/@kagal-taistamp/)

Platform-neutral HTTP handler for `/.well-known/taistamp` —

Ed25519-signed timestamps.

### [`@kagal/ed25519-secret`](packages/@kagal-ed25519-secret/)

Ed25519 keys, signing, verification, JWKS-ready and

DNS-TXT-ready public key publication, and DKIM-style

selector validation for WebCrypto. Zero runtime

dependencies.

## Specification

Implements [`draft-mery-nagy-taistamp`][draft], the

IETF Internet-Draft for signed TAI64N timestamps over

HTTP. Working version: [`karasz/rfc-taistamp`][rfc-repo].

[draft]: https://datatracker.ietf.org/doc/draft-mery-nagy-taistamp/

[rfc-repo]: https://github.com/karasz/rfc-taistamp

## Development

```sh

pnpm install

pnpm precommit   # dev:prepare → lint → type-check → build → test

```

## Licence

[MIT](LICENCE.txt)