google/keytransparency

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

1569 stars · 157 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Google open-source key transparency service that provides a lookup service for public keys backed by a publicly auditable, tamper-proof log of all record changes. It uses verifiable data structures like Merkle trees and verifiable random functions to let users authenticate public keys while keeping the service accountable.

Use cases

• look up public keys for a user securely
• verify what public keys are associated with my account
• run a public key discovery service for end-to-end encryption
• audit changes to user key records tamper-proofly
• authenticate users before trusting their encryption keys
• check how long an account's keys have been stable
• add verifiable auditing to U2F security key registration

When to choose

• you need a publicly auditable public key directory for E2E encrypted messaging
• you want users to verify which keys are bound to their accounts
• you need transparency-log-backed key discovery similar to CONIKS
• you want verifiable data structures (Merkle trees, VRFs) for key lookups

When to avoid

• you need a production-ready, actively maintained deployment - the project is a work-in-progress with the last release in 2021
• you just need simple key storage without transparency or auditing guarantees
• you are not working in Go or with gRPC/HTTPS-based services

Facets

service · maturity experimental

auth security cryptography search-engine api-framework http-server rpc security privacy developer-tools backend apis go self-hosted cross-platform key-transparency public-key-discovery merkle-tree verifiable-random-function vrf coniks audit-log end-to-end-encryption key-management tamper-proof linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="google/keytransparency")