Open-source cryptography software
1245 open-source libraries, tools and applications tagged cryptography, ranked by how closely cryptography is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| square/go-jose A Go library implementing the JOSE standards (JWE, JWS, JWT) for JSON-based signing and encryption. This Square repository is deprecated an… | 10 | 1956 | abandoned |
| lyft/confidant Confidant is a secret management service from Lyft that stores secrets encrypted at rest in AWS DynamoDB, with a web UI and client tooling.… | 10 | 1853 | abandoned |
| mozilla/persona Mozilla Persona is a secure, distributed identification system based on the BrowserID protocol, providing login services including a fallba… | 10 | 1838 | abandoned |
| ycccccccy/wx_key A tool that extracted the local database and image encryption keys from WeChat 4.0+ desktop clients, enabling users to decrypt and back up … | 46 | 1831 | abandoned |
| namshi/jose A lightweight PHP library implementing the JWS (JSON Web Signature) specification for signing and verifying JSON tokens, commonly used for … | 32 | 1804 | abandoned |
| Proton Mail The official Proton Mail Android email client, an open-source app providing encrypted email access on Android. This repository has been arc… | 10 | 1727 | abandoned |
| getqujing/qtunnel qTunnel is a lightweight Go-based network tunneling tool that acts as an encryption wrapper between clients and servers, serving as a simpl… | 32 | 1644 | abandoned |
| syncany/syncany Syncany is an open-source cloud storage and file-sharing application that backs up and syncs folders to arbitrary remote storage backends (… | 10 | 1642 | abandoned |
| carmaa/inception Inception is a Python-based physical memory manipulation tool that exploits PCI-based DMA (over FireWire, Thunderbolt, ExpressCard, PC Card… | 31 | 1606 | abandoned |
| jrendel/SwiftKeychainWrapper A Swift wrapper around the iOS/tvOS Keychain that lets developers store and retrieve secure items with a User Defaults-like API. It provide… | 10 | 1589 | abandoned |
| kryptco/kr A deprecated Go CLI tool that runs an SSH agent (krd) routing private key operations to a paired Krypton mobile app, so SSH authentication … | 10 | 1572 | abandoned |
| SpiderOak/Encryptr Encryptr is a zero-knowledge, cloud-based password manager and e-wallet built on the Crypton framework by SpiderOak. It stores passwords, c… | 23 | 1559 | abandoned |
| ZeroDB ZeroDB is an end-to-end encrypted database built on ZODB, allowing data to be stored and queried on untrusted servers without exposing encr… | 10 | 1546 | abandoned |
| scottyab/secure-preferences An Android library that wraps SharedPreferences to encrypt stored values with AES-128/CBC and hash keys with SHA-256. It is deprecated in f… | 10 | 1516 | abandoned |
| mikechambers/as3corelib as3corelib is an ActionScript 3 utility library originally from Adobe, providing MD5 and SHA-1 hashing, image encoders, JSON serialization,… | 32 | 1504 | abandoned |
| mesalock-linux/mesalink MesaLink is a memory-safe TLS library written in Rust that provides an OpenSSL-compatible C API, implemented on top of rustls, webpki, and … | 23 | 1482 | abandoned |
| IBM/fhe-toolkit-linux IBM's Fully Homomorphic Encryption Toolkit for Linux, a Docker-based toolkit demonstrating computation on encrypted data without decryption… | 10 | 1474 | abandoned |
| cloudflare/redoctober Red October is a Go-based TLS server implementing two-man rule style encryption and decryption, where no single individual can decrypt data… | 10 | 1415 | abandoned |
| hyperledger-archives/sawtooth-core Hyperledger Sawtooth is an enterprise distributed ledger (blockchain) platform for building, deploying, and running ledgers, originally wri… | 10 | 1415 | abandoned |
| 0x Protocol The 0x protocol monorepo containing Ethereum smart contracts and developer tooling (TypeScript and Python packages) for trustless exchange … | 65 | 1408 | abandoned |
| jewel/clearskies ClearSkies is an open-source file synchronization program inspired by BitTorrent Sync, allowing direct peer-to-peer sharing between compute… | 32 | 1407 | abandoned |
| Tygs/0bin 0bin is a self-hostable pastebin that encrypts paste content client-side in the browser with AES256, so the server never sees plaintext or … | 36 | 1402 | abandoned |
| element-hq/riot-android Riot-Android is a glossy Matrix collaboration client for Android, written in Java. It is deprecated and has been replaced by Element Androi… | 10 | 1392 | abandoned |
| bigeagle/gohop GoHop is a VPN implemented in Go with built-in encryption and traffic obfuscation, designed to evade deep packet inspection and censorship … | 23 | 1365 | abandoned |
| vbuterin/pybitcointools A simple, common-sense Python library for Bitcoin-themed elliptic curve cryptography (secp256k1), including key handling, signing, and tran… | 32 | 1333 | abandoned |
| linisme/Cipher.so A Gradle plugin for Android that packages key-value secrets (like API keys and passwords) into an encrypted native .so library at compile t… | 32 | 1308 | abandoned |
| matiasinsaurralde/facebook-tunnel A Linux tool that tunnels Internet traffic through Facebook chat by sending packets as base64-encoded messages, using a tuntap interface an… | 32 | 1290 | abandoned |
| Cocos-BCX Cocos-BCX mainnet is the C++ reference implementation of a blockchain node (witness_node) and command-line wallet for the Cocos-BCX gaming … | 23 | 1277 | abandoned |
| lachesis/scallion Scallion is a GPU-accelerated (OpenCL) vanity key generator that creates custom .onion addresses for Tor hidden services and vanity GPG key… | 23 | 1276 | abandoned |
| uknowsec/SharpDecryptPwd SharpDecryptPwd is a Windows command-line tool that decrypts passwords saved locally by popular applications such as Navicat, TeamViewer, F… | 32 | 1271 | abandoned |
| Privacy Pass A browser extension implementing the client side of the Privacy Pass protocol, which issues and redeems unlinkable cryptographic tokens (ba… | 23 | 1250 | abandoned |
| appc/spec The App Container (appc) specification and Go tooling, defining an image format (ACI), runtime environment, and discovery mechanism for app… | 10 | 1249 | abandoned |
| ldandersen/scifihifi-iphone A collection of open-source iPhone/Objective-C code, best known for SFHFKeychainUtils, a simple wrapper for storing credentials in the iOS … | 32 | 1246 | abandoned |
| tomer8007/widevine-l3-decryptor A Chrome extension that demonstrated bypassing Widevine L3 DRM by hijacking Encrypted Media Extensions calls to extract content decryption … | 10 | 1246 | abandoned |
| pq-crystals/kyber The official reference implementation of the Kyber key encapsulation mechanism (ML-KEM), a NIST-standardized post-quantum KEM, written in C… | 71 | 1240 | abandoned |
| sakurity/securelogin SecureLogin is a decentralized passwordless authentication protocol that derives a cryptographic key pair from a user's email and master pa… | 32 | 1206 | abandoned |
| diafygi/acme-nosudo A Python script that obtains free HTTPS certificates from the Let's Encrypt CA via the ACME protocol without requiring root or sudo access.… | 32 | 1169 | abandoned |
| DylanPiercey/auto-sni A NodeJS library that automatically obtains and renews free SSL/TLS certificates from Let's Encrypt using SNI, with near-zero configuration… | 32 | 1169 | abandoned |
| hyperledger-archives/fabric A read-only historic archive of Hyperledger Fabric, an enterprise-grade permissioned blockchain framework written in Go with a modular arch… | 10 | 1151 | abandoned |
| pilcrowonpaper/oslo Oslo is a zero-dependency TypeScript collection of auth-related utilities covering JWTs, OAuth2, password hashing, OTP, WebAuthn, cookies, … | 10 | 1147 | abandoned |
| zendesk/helm-secrets A deprecated Helm plugin that manages encrypted secrets files (YAML/JSON) within Git workflows, using SOPS as its backend for per-value enc… | 10 | 1146 | abandoned |
| cryptosphere/cryptosphere Cryptosphere is a global peer-to-peer cryptosystem for publishing and securely distributing content pseudonymously with no central point of… | 10 | 1142 | abandoned |
| Lyndir/MasterPassword Master Password is a stateless password manager that derives unique site passwords on demand from a single master secret using a cryptograp… | 32 | 1130 | abandoned |
| cryptocat/cryptocat Cryptocat is a desktop application providing encrypted, secure chat built on Electron with JavaScript. It packages for Windows, Linux, and … | 32 | 1114 | abandoned |
| gnosis/MultiSigWallet Gnosis MultiSigWallet is an Ethereum multisignature wallet consisting of smart contracts and a web dapp interface that requires multiple pa… | 10 | 1099 | abandoned |
| google/keyczar Keyczar is an easy-to-use open-source cryptographic toolkit originally developed by Google, designed to simplify encryption, signing, and k… | 10 | 1093 | abandoned |
| bytebuff/JSpider JSpider is a collection of JavaScript decryption files for website-encrypted request parameters, shared weekly alongside Python snippets th… | 32 | 1091 | abandoned |
| samuelmeuli/mini-diary Mini Diary is a simple, secure journaling desktop app built with Electron and React, featuring password-encrypted local storage, full-text … | 10 | 1090 | abandoned |
| ZenGo-X/multi-party-ecdsa A Rust library implementing {t,n}-threshold ECDSA digital signatures using multi-party computation protocols, supporting key generation and… | 23 | 1084 | abandoned |
| guardianproject/ChatSecureAndroid ChatSecure for Android was a free and open-source secure messaging app built on XMPP/Jabber with OTR encryption, SQLCipher local storage, a… | 10 | 1069 | abandoned |
| xcicode/MifareOneTool MifareOneTool is a Windows GUI application for working with Mifare Classic NFC cards, including reading and cracking operations. It is writ… | 23 | 1059 | abandoned |
| Joplin Joplin is a free, open‑source note‑taking and to‑do application that stores notes in Markdown. It offers cross‑platform support, end‑to‑end… | 99 | 56805 | active |
| Joplin Joplin is an open-source, privacy-focused note-taking and to-do application that stores notes in Markdown and supports notebooks, tags, and… | 99 | 56805 | stable |
| Alist AList is a self‑hosted file list and WebDAV server that aggregates many storage backends behind a single web UI. It is built with Go (Gin) … | 97 | 50264 | active |
| V2Ray V2Ray (Project V) is a network proxy platform written in Go for building proxies to bypass network restrictions and censorship. It supports… | 64 | 46932 | active |
| SiYuan SiYuan is an open‑source, privacy‑first knowledge workspace that stores notes as block‑level markdown and supports bidirectional linking. I… | 94 | 46723 | active |
| FuelLabs/fuels-rs fuels-rs is the official Rust SDK for the Fuel blockchain, enabling developers to compile, deploy, and interact with Sway smart contracts. … | 89 | 42979 | active |
| Xray Xray-core is a high-performance, modular proxy platform written in Go. It supports multiple protocols (VLESS, VMess, Shadowsocks, Trojan, e… | 89 | 42060 | active |
| AndroidUtilCode AndroidUtilCode is a comprehensive Java library that provides a wide range of utility functions for Android development. It bundles common … | 23 | 33618 | active |
| Algo VPN Algo VPN is a set of Ansible scripts that automates deploying a personal WireGuard and IPsec (IKEv2) VPN server on common cloud providers. … | 73 | 30406 | active |
| Hutool Hutool is a comprehensive Java utility library that provides ready‑to‑use helpers for HTTP, JSON, database access, file I/O, logging, date … | 94 | 30254 | active |
| Hutool Hutool is a comprehensive Java utility library that wraps common JDK operations into convenient static helper classes. It covers strings, c… | 94 | 30254 | stable |
| Apache ShardingSphere Apache ShardingSphere is an enterprise distributed database ecosystem that turns heterogeneous databases (MySQL, PostgreSQL, etc.) into a d… | 77 | 20808 | stable |
| .NET Runtime The official .NET runtime, base class libraries, and shared host source repository maintained by Microsoft and the .NET Foundation. It prov… | 100 | 18367 | stable |
| ginuerzh/gost GOST (GO Simple Tunnel) is a Go-based tunneling and proxy tool supporting HTTP/HTTPS/HTTP2/SOCKS4/SOCKS5/Shadowsocks protocols plus QUIC, K… | 64 | 18244 | active |
| abseil/abseil-cpp Abseil is an open-source collection of C++17-compliant libraries drawn from Google's internal codebase, designed to augment the C++ standar… | 92 | 18158 | stable |
| ZeroTier ZeroTier is a software-defined networking tool that creates secure virtual Ethernet networks spanning devices, VMs, containers, and clouds … | 78 | 17152 | stable |
| goproxy GoProxy is a high-performance, cross-platform proxy server written in Go supporting HTTP(S), SOCKS5, SS, WebSocket, TCP, UDP, and DNS proxy… | 88 | 17142 | active |
| jpillora/chisel Chisel is a fast TCP/UDP tunnel transported over HTTP and secured via SSH, shipped as a single Go executable containing both client and ser… | 93 | 16662 | active |
| Seafile Seafile is an open-source, self-hosted cloud storage system providing high-performance file syncing, sharing, and encrypted libraries, orga… | 67 | 15337 | active |
| txthinking/brook Brook is a cross-platform programmable network tool written in Go that provides encrypted proxy/VPN functionality with system-level network… | 85 | 15192 | active |
| canopy-network/canopy The official Go implementation of the Canopy Network protocol, a recursive blockchain framework and seed L1 chain for launching new interop… | 89 | 14720 | active |
| rathole-org/rathole rathole is a lightweight, high-performance reverse proxy for NAT traversal written in Rust, exposing services behind NAT to the internet vi… | 82 | 14260 | stable |
| EasyTier EasyTier is a decentralized mesh VPN written in Rust that connects devices into one virtual network with peer-to-peer links, NAT traversal,… | 87 | 14099 | active |
| SoftEther VPN SoftEther VPN is an open-source, cross-platform, multi-protocol VPN server and client software written in C. It supports SSL-VPN, OpenVPN, … | 66 | 13597 | active |
| cesanta/mongoose Mongoose is a two-file C networking library and embedded web server providing HTTP, WebSocket, MQTT, TLS 1.3, and an optional built-in TCP/… | 91 | 13080 | stable |
| drakkan/sftpgo SFTPGo is a full-featured, highly configurable file transfer server supporting SFTP, SCP, FTP/S, HTTP/S, and WebDAV, with pluggable storage… | 93 | 12647 | active |
| iroh Iroh is a Rust networking library that establishes direct peer-to-peer QUIC connections between endpoints dialed by public key, with NAT ho… | 96 | 12582 | active |
| OpenZFS OpenZFS is an advanced copy-on-write file system and volume manager originally developed for Solaris, now maintained by the OpenZFS communi… | 97 | 12492 | stable |
| RT-Thread/rt-thread RT-Thread is an open-source, community-based real-time operating system (RTOS) for IoT and embedded devices, written primarily in C. It com… | 90 | 12286 | stable |
| Tencent/wcdb WCDB is a cross-platform mobile database framework developed by WeChat, built on SQLite and SQLCipher. It provides ORM and a native query l… | 71 | 11638 | active |
| Astrid Astrid is a portable, capability-secure operating system for composable software, where every component runs as a sealed WebAssembly capsul… | 81 | 10279 | active |
| GetBindu/Bindu Bindu is an open-source Python framework that provides the identity, communication, and payments layer for AI agents, implementing the A2A … | 77 | 10062 | active |
| paramiko/paramiko Paramiko is a pure-Python implementation of the SSHv2 protocol providing both client and server functionality, built on the cryptography li… | 74 | 9861 | stable |
| pocoproject/poco POCO (Portable Components) is a collection of cross-platform C++ class libraries for building network- and internet-centric applications, c… | 94 | 9483 | stable |
| pdfcpu/pdfcpu pdfcpu is a PDF processing library and command-line tool written in Go, supporting validation, optimization, encryption, signing, merging, … | 90 | 8852 | active |
| owncloud/core ownCloud Core is the server-side component of ownCloud Classic, a self-hosted file storage, sync, and sharing platform written in PHP. It p… | 99 | 8837 | stable |
| Boost C++ Libraries Boost is a collection of free, peer-reviewed, portable C++ source libraries organized as a modularized super-project. It provides widely us… | 92 | 8586 | stable |
| MystenLabs/sui Sui is a next-generation Layer 1 smart contract blockchain platform written in Rust, featuring high throughput, low latency, and an asset-o… | 96 | 7784 | active |
| glushchenko/fsnotes FSNotes is a fast, native open-source note-taking app for macOS and iOS built around plain Markdown and plaintext files stored in user-cont… | 98 | 7529 | active |
| Calico Calico is an open-source cloud-native networking and network security platform for Kubernetes, providing pod networking (CNI), network poli… | 99 | 7398 | stable |
| Himalaya Himalaya is a command-line email client written in Rust for listing, reading, composing, sending, searching, and moving messages. It suppor… | 85 | 7318 | active |
| perkeep/perkeep Perkeep (formerly Camlistore) is a personal storage system for storing, syncing, sharing, modeling, and backing up your data for life. It c… | 71 | 7246 | active |
| Automaton Automaton is a TypeScript runtime for continuously running, self-improving AI agents that pay for their own compute via an Ethereum wallet … | 67 | 7156 | active |
| ntop/n2n n2n is a lightweight peer-to-peer VPN written in C that creates encrypted virtual networks capable of bypassing intermediate firewalls. It … | 62 | 7017 | active |
| nicotsx/zerobyte Zerobyte is a self-hosted backup automation platform built on top of Restic, providing a modern web interface to schedule, manage, monitor,… | 77 | 6984 | active |
| HMBSbige/ShadowsocksR-Windows A Windows GUI client for the ShadowsocksR proxy protocol, built with WPF on .NET 6. It is a maintained fork of the original ShadowsocksR cl… | 10 | 6924 | active |
| PlainApp PlainApp is an open-source Android app that runs a local web server on your phone, letting you manage files, media, contacts, SMS, notes, a… | 92 | 6777 | active |
| ticarpi/jwt_tool A Python command-line toolkit for validating, forging, scanning, and tampering with JSON Web Tokens (JWTs). It automates checks for known J… | 28 | 6770 | active |
| internet-court/internet-court-skill An open Agent Skill / Claude Code plugin that acts as a trust layer for agent-to-agent commerce, combining natural-language mandates, ERC-7… | 55 | 6749 | active |