Tool Open source
Arken-core is the Rust cryptographic core of ArkenForge, a library for passwordless authentication using W3C did:key identities and digital signatures. It generates cryptographically random, one-time challenge nonces with a 60-second TTL, parses did:key identities, and verifies ECDSA secp256k1 signatures. A client signs a server-issued nonce with its private key and retries with an Authorization: Signature header; the core verifies the signature and nonce and returns the client's DID without storing session state. The library compiles to a native shared library for use by higher-level packages through FFI, including the ecosystem's Express and FastAPI middleware and client SDKs. The repository describes it as early-stage and not production-ready: nonces are held in memory, do not work across multiple instances without a shared store, and there is no key-recovery mechanism. It is licensed under Apache 2.0.
1 use taken from transcripts — each links to the moment in the video.
A library for passwordless sign-in on web servers with a Rust cryptography core that plugs into Express and FastAPI. Each user has a private key and a public DID identity; servers issue one-time challenges signed with the user's key.
1 in the library.