Aaron Stovall
Development and research
Most of GHOSTSHELL's development and research, 2024 to 2027.
About
Aaron Stovall leads development and research. George Lopez leads research and testing. The work runs from 2024 to 2027.
01 People
Development and research
Most of GHOSTSHELL's development and research, 2024 to 2027.
Research and testing
Most of GHOSTSHELL's research and testing, 2024 to 2027.
GHOSTSHELL is associated with Mythos Systems: mythossystems.net.
02 Timeline
Built on Tabby. GHOSTSHELL is a fork of Tabby 1.0.238, the MIT-licensed terminal from Eugeny and the Tabby contributors.
First Windows release. GHOSTSHELL 0.1.0 shipped for 64-bit Windows in two formats, an installer and a portable ZIP archive.
SSH and Cisco IOS fixes. Version 0.1.1 removed the unencrypted none cipher from the Legacy SSH policy and corrected highlighting for err-disable in Cisco IOS logs.
Release signing. GHOSTSHELL introduced a release key that pairs ML-DSA-44 with Ed25519. View the key fingerprint and verification instructions.
GHOSTSHELL 0.2.0. The SSH client offers hybrid post-quantum key exchange by default on direct connections and through jump hosts. Download the Windows x64 installer.
03 Credits
GHOSTSHELL is MIT-licensed and a fork of Tabby 1.0.238 by Eugeny and the Tabby contributors (MIT), whose copyright and permission notice GHOSTSHELL's license retains. Tabby plugins keep working through a compatibility shim.
04 This site
The demos on this site run code vendored from the GHOSTSHELL source: the neon edge, the 61 theme packs, the GhostFX presets, renderer and ambient scenes, the host bar's ping statistics, and GhostLine's completion engine. The ML-KEM demo encapsulates with @noble/post-quantum 0.7.1, the library GhostVault uses, and decrypts with FIPS 203's K-PKE.Decrypt written out, checked against the library bit for bit over 1,000 runs.
ghostshell.app has no analytics, sets no cookies and loads nothing from third parties. The feature board keeps no accounts: it stores posts and votes under a keyed hash of a random voter ID your browser keeps, never an address.