2026-01-04

Weekly open source: echeck, and Swift around the edges

Week of December 29 – January 4. Quiet holiday stretch, but the year opens with a cluster of smaller things landing.

echeck — 42 commits polishing the SGX certificate checker: a utility and library that extracts Intel SGX quotes embedded in X.509 certificates (OID 1.3.6.1.4.1.311.105.1), parses them, and does full chain-of-trust verification. Ships as both a C library with CLI and a Go library.

Swift ports for the KLB stack. Two new Swift repos opened this week: swiftrest (Swift REST client using async/await actors, OAuth2 + Ed25519 API-key signing, chunked uploads) and swiftbottle (Swift implementation of the Bottle secure message container — multi-recipient AES-256-GCM, multi-signer Ed25519 / ECDSA / RSA, CBOR + JSON, interoperable with gobottle and pybottle).

qemuctl — a new Go library for managing QEMU processes, seeded on the 29th.

Smaller pokes on klbfw, atonline-flutter, and gobottle.