Open Source Cryptography

Cryptomator for Windows, macOS, and Linux: Secure client-side encryption for your cloud storage, ensuring privacy and control over your data.

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

[DEPRECATED] Stanford Javascript Crypto Library

free C++ class library of cryptographic schemes

An implementation of the TLS/SSL protocols

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

An experiment.

Microsoft SEAL is an easy-to-use and powerful homomorphic encryption library.

Practical Cryptography for Developers: Hashes, MAC, Key Derivation, DHKE, Symmetric and Asymmetric Ciphers, Public Key Cryptosystems, RSA, Elliptic Curves, ECC, secp256k1, ECDH, ECIES, Digital Signatures, ECDSA, EdDSA

Project Wycheproof tests crypto libraries against known attacks.

The wolfSSL library is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud. wolfSSL supports up to TLS 1.3 and DTLS 1.3! Update to wolfSSL 5.9.1 for the latest CVE fixes.

A dead simple tool to sign files and verify digital signatures.

Private messaging system that hides metadata

Software U2F authenticator for macOS

A curated list of cryptography papers, articles, tutorials and howtos.

HACL*, a formally verified cryptographic library written in F*

CIRCL: Cloudflare Interoperable Reusable Cryptographic Library

Library consisting of explanation and implementation of all the existing attacks on various Encryption Systems, Digital Signatures, Key Exchange, Authentication methods along with example challenges from CTFs

A Framework for Encrypted Machine Learning in TensorFlow

High-level cryptography interface powered by libsodium

An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction

Rust implementation of {t,n}-threshold ECDSA (elliptic curve digital signature algorithm).

A Rust implementation of the Noise Protocol Framework

A proof-of-concept cracker for cryptocurrency brainwallets and other low entropy key algorithms.

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

A Python wrapper around the OpenSSL library

Pure PHP polyfill for ext/sodium

attacking RSA via lattice reductions (LLL)

Tanker client-side encryption SDK for JavaScript

Fast and dependency-free cryptographic hashing library for node.js and browsers (supports MD5, SHA1, SHA256, SHA512, RIPEMD, HMAC)

PacketWhisper: Stealthily exfiltrate data and defeat attribution using DNS queries and text-based steganography. Avoid the problems associated with typical DNS exfiltration methods. Transfer data between systems without the communicating devices directly connecting to each other or to a common endpoint. No need to control a DNS Name Server.

Charm: A Framework for Rapidly Prototyping Cryptosystems

How to backdoor Diffie-Hellman

The PHP extension for libsodium.

a portable and fast pairing-based cryptography library

Capillary is a library to simplify the sending of end-to-end encrypted push messages from Java-based application servers to Android clients.

Meta-repository for Miscreant: misuse-resistant symmetric encryption library with AES-SIV (RFC 5297) and AES-PMAC-SIV support

A modern and easy-to-use cryptographic library for .NET based on libsodium

Library for the Shamir secret sharing scheme

Implementation of protocols for threshold signatures

Implementation of the BLS12-381 pairing-friendly elliptic curve group

Signed/Encrypted ARchive: always-encrypted tar-like archive tool with optional signature support

Compiler-free Python crypto library backed by the OS, supporting CPython and PyPy

Keyshuffling Attack for Persistent Early Code Execution in the Nintendo 3DS Secure Bootchain

A shared preference implementation for confidential data in Android. Per default uses AES-GCM, BCrypt and HKDF as cryptographic primitives. Uses the concept of device fingerprinting combined with optional user provided passwords and strong password hashes.

The GNU crypto library. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).

Pure Rust YubiKey host-side driver for PIV-based RSA/ECC key storage + signing/encryption support

Java binding to the Networking and Cryptography (NaCl) library with the awesomeness of libsodium

GnuPG for Windows. NOTE: Maintainers are not tracking this mirror. Do not make pull requests here, nor comment any commits, submit them usual way to bug tracker (https://www.gnupg.org/documentation/bts.html) or to the mailing list (https://www.gnupg.org/documentation/mailing-lists.html).