Payments
ISO 20022, end to end: pain.001, pacs.008, camt.053, and acmt.001. Adopt one library at a time.
Explore the ISO 20022 librariesKà gẹ́gẹ́ bí…
Tailor the page order and highlights for your role.
# 1. Validate ISO 20022 pacs.008.001.10 (pip install pacs008)
pacs008 -t pacs.008.001.10 -m template.xml -s schema.xsd -d payments.csv --dry-run
✓ Schema validation passed
✓ Data validation passed (1 payment records)
# 2. Verify NIST FIPS 203 ML-KEM-768 KEM (cargo add kyberlib)
cargo test -p kyberlib --test test_kem
✓ test keypair_encap_decap ... ok
✓ test result: ok. 9 passed; 0 failed; finished in 0.01s
# 3. Verify live CycloneDX SBOM provenance (SLSA / Sigstore)
curl -sSLO https://sebastienrousseau.com/sbom.cdx.json && gh attestation verify sbom.cdx.json --owner sebastienrousseau
✓ Loaded 1 attestation from GitHub API (slsa.dev/provenance/v1)
✓ Verification succeeded!What I build
Open-source foundations for wholesale finance.
Security
Post-quantum primitives: ML-KEM (CRYSTALS-Kyber, NIST FIPS 203) and hashing, ready to pilot today.
See the post-quantum primitivesTooling
Audited Rust libraries and a code security scanner, signed and shipped with a software bill of materials.
View the toolingẸ̀rí
Nínú àwọn nọ́mbà.
51.2M All-time downloads
3.7M Downloads, last 30 days
707 GitHub stars
179 Packages published
Most downloads come from transitive dependencies in CI/CD pipelines and production services across PyPI, crates.io, and npm · Updated .
Iṣẹ́
Àwọn ibi tí mo ti ṣiṣẹ́.
Ó fẹ́rẹ̀ẹ́ tó ọdún ogún ti ìdarí inú-ilé nípa ìsanwó àti ọjà díjítà ní HSBC, PayPal, Barclays, Shazam, AKQA, àti Virgin Group.
EPAA · September 2025
Why the payments industry must act now.
Regulators are treating harvest-now-decrypt-later as a credible present risk. This paper, produced for the Emerging Payments Association Asia, sets out the structural threat and the case for coordinated action across wholesale payment rails.
Ka ìwádìí tuntun
From the desk.
Òfin Dátà Ti Ìṣọ̀Kan Yúróòpù · Ìyípadà Olùpèsè Àwọsánmà · DORA
Wọ́n díyelé ètò ìjáde DORA yín, wọn kò gbé e kalẹ̀. Ní January, iye náà yóò parẹ́.
TL;DR Láti 12 January 2027, owó ìyípadà olùpèsè àwọsánmà yóò parẹ́, pẹ̀lú owó ìjáde dátà. Pẹ̀lú wọn, àwáwí owó tí ó mú kí àwọn ètò ìjáde DORA dúró ní ipò àbá yóò parí.
Cyber Resilience Act · CRA · DORA
DORA gbà yín lọ́wọ́ NIS2. Kò ní gbà yín lọ́wọ́ CRA.
TL;DR Ní 11 Oṣù Kẹsàn-án, CRA yóò bẹ̀rẹ̀ aago ìròyìn wákàtí 24. Ojúṣe náà so mọ́ ọjà, nítorí náà ìdásílẹ̀ DORA kúrò nínú NIS2 kò dé ibẹ̀ rárá.
EU AI Act · Article 50 · AI Governance
Ọjọ́ Gbèdéke High-Risk Yín Ti Ṣí Sí Oṣù Kejìlá 2027. Ti Chatbot Yín Kò Ṣí.
TL;DR AI omnibus ti gbé ọjọ́ gbèdéke high-risk lọ sí Oṣù Kejìlá 2027. Kò fọwọ́ kan Article 50. Àwọn transparency obligations ń ṣiṣẹ́ láti òní, wọ́n sì bọ́ sórí chatbot.