Official static Debian/Ubuntu APT repository for installing and automatically updating open-source LegalTech, Qualified Electronic Signature (QES / DSTU 4145-2002), and Cryptographic Geometric Watermarking packages on Debian, Ubuntu, Linux Mint, and Pop!_OS. Designed with strict adherence to 100% offline-first execution, zero telemetry, and attorney-client privilege preservation.
Ukrainian Qualified Electronic Signature (QES / КЕП) & LegalTech Cryptographic Suite.
/DSS dictionary), ETSI EN 319 122-1 (CAdES-X-Long), ETSI EN 319 162-1 (ASiC-E), and IETF RFC 3161 TSP / OCSP via accredited Ukrainian QTSPs (CA Diia / KNEDP CZO).UA / EN with QR verification), court-ready OCR & PDF/A optimization (ocrmypdf + qpdf), GOST file encryption/decryption, hardware USB token support (DepositSign, IIT Almaz-1K, Crystal-1K, Author SecureToken-337), browser Native Messaging Host (euscpnmh), and local Web Sign Agent (HTTP:8081 / HTTPS:8083).qes-tool, qes-sign, qes-verify, qes-cert, qes-ocr, qes-pdf-court, qes-encrypt, qes-decrypt, qes-agent, qes-config, plus 18 GNOME Files (Nautilus) right-click actions across 5 HIG categories.Sri Yantra Cryptographic Geometric Watermarking, 256-Bit Bijective Sealing & Canary Leak-Tracing Suite.
SHA-256(GOST 34.311-95 || "::" || Kupyna-256 || "::" || SHA-256) with a full 256-bit bijective integer-nanometer lattice across 26 symmetric coordinates (δ(w) = (18w − 9207) × 10−9) and 24 symmetric Marma pairs of the 9-triangle Sri Yantra (ΔE ≈ 6.13 × 10−11 rad < ϵfloat64).--mode both | watermark | seal), Canary Leak-Tracing (--recipient-id & trace --suspects via 27th symmetric coordinate D5.ay), Golden Bindu cryptographic seal, zero-tolerance tamper detection across all 36 triangle coordinates, official Vector PDF Verification Protocol generator, deterministic DSTU 4145-2002 (RFC 6979 over GF(2257)) bridge, GTK4 / Libadwaita key-selection dialog (~/.secure_keys/ & USB tokens), and 15-minute RAM session cache.marma-watermark (sign, verify, trace, protocol, keygen, selftest), marma-dialog, marma-config, and GNOME Files (Nautilus) right-click scripts ("🔱 Sri Yantra · Marma-Crypto" in EN/UA).Run the following commands in your terminal to add the GPG key, register the APT repository, and install both suites:
# 1. Download and install the repository's public GPG key
curl -fsSL https://yaroslavbaienko.github.io/legaltech/public.gpg | sudo gpg --dearmor -o /etc/apt/keyrings/legaltech.gpg
# 2. Add the LegalTech APT repository to system sources
echo "deb [signed-by=/etc/apt/keyrings/legaltech.gpg] https://yaroslavbaienko.github.io/legaltech stable main" | sudo tee /etc/apt/sources.list.d/legaltech.list
# 3. Update package indices and install both tools (or either package individually)
sudo apt update
sudo apt install qes-tools marma-crypto-watermarkOnce the repository is configured, all future releases are verified via GPG and installed automatically through standard Debian/Ubuntu system updates:
sudo apt update && sudo apt upgradeWhile the core qes-tools and marma-crypto-watermark suites are open-source (Apache 2.0), we provide turnkey enterprise engineering, custom institutional seals, and court-admissible forensic opinions for banks, law firms, M&A data rooms, and RWA/Web3 platforms:
Turnkey integration of Marma-Crypto + Qualified Electronic Signatures (DSTU 4145-2002 / eIDAS PAdES-B-LTA + RFC 3161 TSP) into automated banking, legal, M&A, and RWA/Web3 document pipelines via headless Linux CLI, Docker, or on-premise microservice.
Dedicated organizational geometric-cryptographic seal bound to your corporate HSM / PKCS#11 / QES certificate, custom white-label verification portal, and brand-aligned vector templates for high-value contracts, share certificates, and board resolutions.
Independent cryptographic and geometric forensic examination of disputed electronic evidence (.pdf, .docx, .svg, .p7s), sub-micron tamper localization across all 36 triangle coordinates, and formal legal/technical expert reports for courts and international arbitration.