I am Tino Rusch, software architect from Magdeburg, Germany. I build systems software, embedded audio hardware, and tools for making music with code. Besides being a developer I'm a loving dad and husband.
My language of choice is Rust — nearly all my current projects are written in it. When interfacing hardware directly I reach for C or C++, and occasionally mix the two with Rust via FFI.
This page is a place to represent myself on the internet and host my public gpg and ssh keys. Much cooler than a social media account, isn't it?
A programming language for making music. Write beats, melodies, and full tracks in code — then edit, save, and hear it change in milliseconds. Backed by SuperCollider, 580+ built-in sounds, step sequencing and Euclidean rhythms. github →
Custom firmware for the Gamma — a pocket-sized handheld synthesizer built on the Daisy Seed (STM32H750). A hybrid of C++ for the audio engine and Rust for the menu, display, presets, and MIDI 2.0 stack. github →
A next-generation PipeWire graph and control application built in Rust with egui. One keyboard-driven tool for visual audio routing, live control, saved graph configurations, and stage-safe modes. github →
A Eurorack module that converts MIDI 2.0 UMP messages from USB into analog control voltage and gate signals. 8 CV outputs at 16-bit resolution, 4 gate outputs, driven by an RP2040. github →
A ZK-proven Ethereum chain where every state transition is verified by a RISC Zero zero-knowledge proof. Built on reth, with block artifacts published to IPFS. github →
A command line wallet for the KILT blockchain — identity, attestation, DID creation and management from the terminal. github →
A gRPC service that exposes CRUD APIs for managing a catalog of arbitrary resources in a multi-user environment. A solid starting point for any application that needs structured, access-controlled data storage. github →
Core protocol work on the KILT Substrate parachain at BotLabs — chain maintenance, pallet development, and full-stack infrastructure on top of the node. KILT is a Polkadot parachain for decentralized identity: DIDs, verifiable credentials, and on-chain attestations. github →
An encrypted and versioned command line key-value store. Think pass with
versioning built in — every write is a commit, every value is encrypted at rest.
github →
Bootable x86 snake written entirely in Rust. No OS, no libc — bare metal on a 64-bit CPU. Built on the "Writing an OS in Rust" foundation and extended with a multi-game architecture so 2048 works too. github →
A tool and Go library for managing public key infrastructures. Create CAs, issue and revoke certificates, inspect chains — supports ECDSA and RSA. github →
Run Docker Compose files as rootless Podman pods. Written when the rootless container tooling gap was real and you just wanted to run a stack without being root. github →
An external authentication plugin for Caddy. Delegate auth decisions to any HTTP service — useful for wiring up custom identity providers or per-request policy checks. github →
A handwritten parser for Kubernetes label selectors. No codegen, no yacc — just a clean recursive descent parser for the full label selector grammar as a reusable Go library. github →
A CLI for experimenting with post-quantum cryptography algorithms via liboqs. Key generation, signing, and verification with CRYSTALS-Dilithium, Falcon, and friends — before they were NIST standards. github →
The long-missing Stellar blockchain command line client — a swiss army knife for managing accounts, sending transactions, and querying the Stellar network from the terminal. github →
A function-as-a-service platform in Go, built before Knative or OpenFaaS were widespread. Spin up functions and invoke them over HTTP with minimal ceremony. github →
A stream mining framework. Define a pipeline of processors in a JSON file — Horst downloads them and compiles a use-case specific Go binary. Includes a working "Trending on Twitter" example. github →
Store and share passwords, tokens, and short secrets on a private blockchain. Built for teams that need a shared secret store with a tamper-evident audit trail. github →
A generic JSON Web Token signing service. Lightweight predecessor to jwtd — sign and verify tokens over a simple HTTP API. github →
A single-sign-on JWT server with role-based access control. Pair it with jwtd-proxy to put authentication in front of any HTTP service without touching its code. github →
A virtual entrypoint for containerized services. Wraps any process to handle configuration injection, signal forwarding, and graceful shutdown in a uniform way across a microservice fleet. github →
A universal packet manager for heterogeneous fleets of machines with server-side version control. Declare what software should run on what devices regardless of architecture — the agent handles the rest. github →
Decentralized energy storage and management platform, built at WebVariants. Designed and implemented a container-based firmware for smart energy meters — coordinating distributed storage units across households to balance load and reduce grid dependency.
An application framework for building async interfaces for IoT and embedded systems, developed at WebVariants. C++ core with a Go port (susigo). The goal: let even novice programmers build robust async applications that span both front-end and back-end on distributed devices. github →
Bachelor's thesis. A decentralized, secure, and private peer-to-peer overlay network that allows arbitrary TCP connections between participants — even without a direct link between them. Traffic is routed through intermediate peers, end-to-end encrypted, with no central coordination point.