Crypto in the core
The crypto behind Nitva and TerraCrypt exists once — in Rust — and iOS, Android and desktop call it through a C ABI. No four implementations drifting apart.
RustC ABISQLCipherpost-quantumPortfolio2004 / 2026
Builtonce.Keptrunning.
vaha.netOwn iron
Vahid, software engineer
Products on my own hardware: a post-quantum messenger, a video platform, a fiscal POS for cafés, a media server, and the servers underneath them all. One person, several languages, no framework where the language is enough.
21
systems on file
15
languages
10
platforms
22+
years in code
01
Index
Every system, ordered by the year it started. Each row opens a page of its own: what it does, what it is built on, and where it stands today.
01 NitvaPost-quantum messenger Flagship · post-quantum cryptography Rust · Swift · Kotlin 2025 → present in build02 EU MeetVideo meeting platform Own SaaS · eumeet.eu PHP · TypeScript · Swift 2024–2026 live03 Sandžak OutdoorRide & hike tracker Live · mtb.vaha.net Go · Swift · Kotlin 2026 live04 vCoffeeCafé POS & fiscalization Own SaaS · POS Rust · TypeScript · SQL 2026 → present in build05 TerraCrypt MessengerMessenger on a custom curve Flagship · iOS · Android · Desktop Swift · Kotlin · Rust 2022 → present live06 Zarp VPNVPN with a control panel Networking · self-hosted PHP · Bash 2025 internal07 Sea MoonBrowser 3D game Game · vaha.net/seamoon JavaScript · SQL · GLSL 2025 live08 vShoprMulti-tenant e-commerce E-commerce SaaS · vshopr.org PHP · TypeScript · SQL 2025 → present live09 NekretnineReal-estate platform Real estate · platform TypeScript · JavaScript 2025 live10 FirminPublic revenue portal Government · live TypeScript · PHP · SQL 2024 → present live11 Smart ParkingReal-time parking spots Smart city · live PHP · TypeScript · SQL 2024 live12 Vaha MoviesPersonal streaming portal Streaming · vaha.net/movie PHP · JavaScript · SQL 2023 → present live13 TeleprompterTool for presenters & streamers Tool · web app TypeScript 2024 live14 Uplatnice & PotvrdeDesktop payment-slip tool Desktop app · Windows · Linux Rust · TypeScript 2024 live15 VaktijaPrayer times Utility · Bosnian TypeScript · JavaScript 2023 → present live16 vaha.netThis case file Personal site · portfolio TypeScript · PHP · JavaScript 2024 → present live17 RustiioDLNA/UPnP media server Open source · media server Rust · TypeScript · SQL 2026 → present live18 mailxrayAttachment inspection Open source · mail security Rust · TypeScript · Shell 2026 in build19 ServersManagerPanelFleet control panel Own tool · ops Go · JavaScript · SQL 2026 → present live20 TeretanaGym tracker Own app · fitness Rust · JavaScript · Python 2026 → present live21 vHomeHome automation and voice Smart home · own app Python · JavaScript · Swift 2026 → present live
02
What I build
Four fields, one pair of hands. Under each sits the kind of work that actually ships, with the tools it is done in.
Backend and data
Go with no framework over PostgreSQL/PostGIS, SQLite where it is enough, my own nginx. Fiscal flows to ESIR and LPFR.
GoPostgreSQL/PostGISSQLitenginxApps on the device
iOS and Android natively, desktop through Tauri. One protocol, three clients, one source of truth.
SwiftSwiftUIKotlinTauriWeb and panels
PHP 8.3 applications, static frontends and admin panels with metrics and logs — no heavy CMS.
PHP 8.3TypeScriptJavaScriptSQL03
By the numbers
Counted from the index, not from a pitch deck.
21
systems on file
15
languages
10
platforms
22+
years in code
04
How it is built
The rules that decide what gets written and what gets thrown away.
01
One critical core.
The crypto behind Nitva and TerraCrypt exists once, in Rust, and every client calls it through a C ABI. No four implementations drifting apart.
02
My own infrastructure.
The servers are mine: Go, PostgreSQL/PostGIS, SQLite, CoTURN, MinIO, nginx. When something breaks I don't wait on someone else's status page.
03
The right database for the job.
SQLite on-device and per tenant where it's enough, PostGIS when geometry is involved, PostgreSQL when concurrency is. No database "just in case".
04
Native where you feel it.
The iOS and Android apps are native (Swift, Kotlin, Compose), not web in a shell. Tauri where the desktop app should stay small, not Electron.
05
Security as work, not as a slide.
PQXDH and Double Ratchet in Nitva, SQLCipher in TerraCrypt, open_basedir tenant isolation, BLAKE3-hashed VPN credentials. All of it lives in code, not in copy.
Every system above follows the same five rules.
05
Contact
For work, a collaboration, or a question about any of the systems above.
Open to work, collaboration and hard problems.
github.com/fvaha