Open-source cryptography software
1245 open-source libraries, tools and applications tagged cryptography, ranked by how closely cryptography is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| nymtech/nym Nym is a decentralized privacy platform built in Rust, centered on a mixnet that shuffles Sphinx packets to protect network-level metadata,… | 96 | 1950 | active |
| alibaba/xquic XQUIC is Alibaba's cross-platform C library implementing the IETF QUIC and HTTP/3 protocols for both client and server use. It supports QUI… | 92 | 1923 | active |
| Eugeny/russh Russh is a low-level, Tokio-based SSH2 client and server library for Rust, forked from Thrussh. It supports a wide range of ciphers, key ex… | 98 | 1898 | active |
| web-push-libs/web-push-php A PHP library implementing the Web Push protocol (RFC 8030) for sending push notifications to browsers via service workers. It handles subs… | 88 | 1892 | active |
| camlworks/dream Dream is a tidy, feature-complete web framework for OCaml and ReasonML with a flat, one-module API. It supports WebSockets, GraphQL, HTTP/2… | 87 | 1888 | active |
| zhlynn/zsign zsign is a fast, cross-platform open-source alternative to Apple's codesign tool for re-signing iOS .ipa packages, Mach-O binaries, and .ap… | 92 | 1882 | active |
| ofdrw/ofdrw OFDRW is an open-source Java library for reading, writing, and manipulating OFD (Open Fixed-layout Document) files, a Chinese national stan… | 90 | 1875 | active |
| open-mercato/open-mercato Open Mercato is an open-source TypeScript foundation framework for building CRM, ERP, and commerce applications on Next.js, with multi-tena… | 85 | 1869 | active |
| complexorganizations/wireguard-manager A shell-based tool that automates the installation, configuration, and management of WireGuard VPN servers. It provides a user-friendly way… | 45 | 1860 | active |
| LibPDF-js/core LibPDF is a modern TypeScript PDF library for parsing, modifying, generating, and signing PDF documents. It combines lenient parsing (like … | 84 | 1842 | active |
| 188080501/JQTools JQTools is an open-source developer toolbox built with Qt/QML/C++ that bundles common small utilities: text processing, hash and encryption… | 84 | 1838 | active |
| root-gg/plik Plik is a self-hosted temporary file upload and sharing system similar to WeTransfer, written in Go with a Vue 3 web UI and a powerful CLI … | 87 | 1820 | active |
| guardianproject/haven Haven is an open-source Android application that turns a spare phone into a physical security monitor using its on-device sensors (motion, … | 23 | 6824 | maintenance |
| elder-plinius/ST3GG ST3GG is an all-in-one steganography toolkit that hides secret data inside images, audio, documents, and network packets using 100+ encodin… | 60 | 1813 | active |
| xaitax/Chrome-App-Bound-Encryption-Decryption A Windows post-exploitation research tool that bypasses Chromium's App-Bound Encryption using direct syscall-based reflective process hollo… | 58 | 1813 | active |
| emp3r0r emp3r0r is an open-source post-exploitation framework and command-and-control (C2) system written in Go, targeting Linux and Windows hosts.… | 95 | 1790 | active |
| Solana Pay A Rust CLI that acts as a payment layer for HTTP, wrapping tools like curl and AI agents (Claude, Codex, Goose) to automatically handle HTT… | 97 | 1779 | active |
| ronf/asyncssh AsyncSSH is a Python library providing asynchronous client and server implementations of the SSHv2 protocol, including SFTP and SCP, built … | 76 | 1760 | stable |
| hwdsl2/openvpn-install A Bash script that automates setting up an OpenVPN server on a wide range of Linux distributions, including Ubuntu, Debian, CentOS, Fedora,… | 76 | 1745 | active |
| Watfaq/clash-rs ClashRS is a rule-based network proxy written in Rust supporting many custom protocols (Shadowsocks, VMess, VLESS, Trojan, Hysteria2, WireG… | 99 | 1738 | active |
| Whitelist Bypass A Go-based tool that tunnels internet traffic through video calling platforms (VK Call, Yandex Telemost, WB Stream) to bypass government wh… | 81 | 1731 | active |
| B16f00t/whapa Whapa is a Python-based forensic toolset for parsing and analyzing WhatsApp databases from Android and iOS devices. It includes tools for d… | 71 | 1683 | active |
| secluso/core Secluso is an open-source, privacy-preserving home security camera system built for Raspberry Pi, featuring end-to-end encrypted remote acc… | 69 | 1678 | active |
| rebeyond/Behinder Behinder ('冰蝎') is a cross-platform Java client for managing encrypted webshells on compromised web servers running PHP, Java, or .NET. It … | 23 | 6199 | maintenance |
| facebook/mvfst MVFST (move fast) is a C++ client and server implementation of the IETF QUIC transport protocol developed by Facebook. It provides a perfor… | 77 | 1667 | active |
| shadowsocksr-backup/shadowsocksr A Python port of ShadowsocksR, a fast encrypted tunnel proxy that helps users bypass firewalls and censorship. It provides a command-line s… | 32 | 6122 | maintenance |
| NethermindEth/nethermind Nethermind is a high-performance Ethereum execution client built on .NET, in production since 2017. It offers fast snap sync, high-throughp… | 100 | 1623 | stable |
| afkT/DevUtils DevUtils is an Android utility library (Java/Kotlin) offering 300+ tool classes organized by functional modules, plus companion libraries f… | 80 | 1612 | active |
| doxx/darkflare DarkFlare is a Go command-line tool that tunnels TCP traffic over HTTPS through CDNs like Cloudflare, disguising it as ordinary web traffic… | 50 | 1599 | active |
| solana-foundation/solana-go A Go SDK library and RPC client for the Solana blockchain, providing interfaces to Solana's JSON RPC and WebSocket APIs. It supports key ma… | 98 | 1589 | active |
| robocorp/rpaframework RPA Framework is a collection of open-source Python libraries and tools for Robotic Process Automation, usable from both Robot Framework an… | 94 | 1570 | active |
| php-standard-library/php-standard-library PSL is a standard library for PHP inspired by Hack's HSL, providing consistent, well-typed APIs for collections, async, I/O, cryptography, … | 88 | 1570 | active |
| ProtonMail/proton-bridge Proton Mail Bridge is a desktop application that runs local IMAP and SMTP servers, allowing standard email clients to send and receive encr… | 95 | 1554 | active |
| nfrastack/db-backup A multi-engine database backup tool (Docker image and single Go binary) that backs up MySQL/MariaDB, Postgres, MongoDB, Redis, SQLite, MSSQ… | 96 | 1541 | active |
| fosslife/devtools-x DevTools-X is a cross-platform, offline-first desktop application bundling 41+ developer utilities (JSON formatting, Base64, JWT decoding, … | 68 | 1538 | active |
| robbiehanson/CocoaHTTPServer CocoaHTTPServer is a small, lightweight, embeddable HTTP server library for Mac OS X and iOS applications written in Objective-C. It suppor… | 32 | 5603 | maintenance |
| firedancer-io/firedancer Firedancer is Jump Crypto's from-scratch Solana validator client written in C, designed for extreme performance and security with a restric… | 95 | 1531 | active |
| JakubMelka/PDF4QT PDF4QT is an open-source PDF editor, viewer, and rendering library written in C++ with Qt, implementing PDF 2.0 functionality. It ships a C… | 85 | 1499 | active |
| balzack/databag Databag is a fast, lightweight, self-hosted federated messenger with end-to-end encryption, audio/video calls via WebRTC, and topic-based t… | 58 | 1499 | active |
| wneessen/go-mail go-mail is a modern, feature-rich Go library for composing and sending email over SMTP. It provides mail composition, encoding, DKIM and S/… | 89 | 1497 | active |
| submato/xhscrawl A Python-based reverse-engineering toolkit for Xiaohongshu (XHS) web APIs, focusing on generating the encrypted x-s signature parameter via… | 70 | 1485 | active |
| Bee (Swarm client) Bee is a Go client for the Swarm network, a decentralized peer-to-peer storage and communication network built on the Gnosis blockchain. Ru… | 93 | 1482 | active |
| Diniboy1123/usque An open-source Go reimplementation of the Cloudflare WARP client's MASQUE mode using the Connect-IP (RFC 9484) protocol. It offers multiple… | 77 | 1468 | active |
| laochiangx/Common.Utility A large collection of C# utility and helper classes covering common .NET development tasks such as Excel/CSV/PDF handling, HTTP requests, J… | 32 | 5300 | maintenance |
| Water-Melon/Melon Melon is a generic cross-platform C library (C99) bundling algorithms, data structures, functional components (memory pool, thread pool, ev… | 66 | 1458 | active |
| yuzeguitarist/Deck Deck is a native, privacy-first clipboard manager for macOS built with Swift and SwiftUI. It records clipboard history (text, images, files… | 64 | 1450 | active |
| jawj/IKEv2-setup A Bash script that configures a fresh Ubuntu Server LTS install as an IKEv2 VPN server using strongSwan, with Let's Encrypt certificates an… | 53 | 1435 | active |
| ChainSafe/lodestar Lodestar is a TypeScript implementation of the Ethereum Consensus (proof-of-stake) specification, providing a beacon node, validator client… | 99 | 1426 | active |
| SparkleShare SparkleShare is an open-source file sharing and collaboration app that syncs a special folder on your computer with any Git repository, wor… | 64 | 4988 | maintenance |
| icey icey is a modular C++20 real-time media toolkit that unifies WebRTC, FFmpeg encoding/decoding, signalling, and TURN relay into a single Pac… | 99 | 1367 | active |
| WhiteDNS WhiteDNS is a source-available Android application that runs a local DNS tunneling client with both proxy (SOCKS5/HTTP) and VPN (VpnService… | 80 | 1337 | active |
| x364e3ab6/DudeSuite DudeSuite is a lightweight, integrated web penetration testing toolkit distributed as a desktop application for Windows and macOS. It bundl… | 79 | 1335 | active |
| XRPLF/xrpl.js xrpl.js is the official JavaScript/TypeScript SDK for interacting with the XRP Ledger from Node.js and web browsers. It provides wallet/key… | 97 | 1333 | active |
| copperspice/copperspice CopperSpice is a set of cross-platform C++ libraries (Core, Gui, Network, Multimedia, SQL, OpenGL, Vulkan, WebKit, XML, and more) derived f… | 73 | 1329 | active |
| BelledonneCommunications/linphone-android Linphone Android is an open-source SIP-based softphone application for voice and video calls over IP, plus instant messaging and conferenci… | 98 | 1319 | active |
| jingguanzhang/gift-book A fully offline, zero-backend single-page web application for managing cash gift ledgers (礼金/份子钱) at Chinese weddings, funerals, and other … | 49 | 1316 | active |
| camoufox-reverse-mcp An AI-powered 'Skill' package for JavaScript reverse engineering that plugs into AI coding tools like Claude Code, Cursor, and Codex. It pr… | 78 | 1308 | active |
| apache/impala Apache Impala is a massively parallel, distributed SQL query engine written in C++ for analyzing petabyte-scale data stored in open data an… | 88 | 1290 | stable |
| wechatpay-apiv3/wechatpay-go The official Go SDK for WeChat Pay APIv3, providing typed service clients, an HTTP client with request signing and response verification, a… | 33 | 1285 | active |
| verida/verida-js The official TypeScript SDK monorepo for the Verida Network, a decentralized network for self-sovereign identity and encrypted personal dat… | 36 | 1279 | active |
| mucommander/mucommander muCommander is a lightweight, open-source, dual-pane file manager written in Java that runs on any OS with Java support. It offers a virtua… | 85 | 1271 | active |
| SimonSchubert/Kai Kai 9000 is an open-source, cross-platform AI assistant built with Kotlin Multiplatform that runs on Android, iOS, Windows, Mac, Linux, and… | 81 | 1264 | active |
| starknet-io/starknet.js Starknet.js is the official JavaScript/TypeScript library for interacting with the Starknet L2 network, a ZK-rollup scaling solution for Et… | 96 | 1255 | active |
| KaisenAmin/c_std A pure C17 library that reimplements a large slice of the C++ Standard Library (containers, algorithms, smart pointers) plus Python-style u… | 72 | 1252 | active |
| cfal/shoes A high-performance multi-protocol proxy server written in Rust supporting HTTP, SOCKS5, VMess, VLESS, Shadowsocks, Trojan, Snell, Hysteria2… | 100 | 1245 | active |
| jitsi/jitsi Jitsi Desktop is a free open-source audio/video calling and instant messaging client written in Java, supporting SIP, XMPP/Jabber, IRC, and… | 66 | 4347 | maintenance |
| Monad The execution component of a Monad blockchain node, written in C++. It contains a custom EVM implementation, a purpose-built database (Mona… | 97 | 1234 | active |
| cloudflare/cloudflare-blog A collection of code samples accompanying posts on the Cloudflare Blog, covering topics like networking, security, performance, and edge co… | 64 | 1226 | active |
| GaloisInc/cryptol Cryptol is a domain-specific language and interpreter for specifying cryptographic algorithms, developed by Galois. It provides an executab… | 86 | 1224 | active |
| opengnb/opengnb OpenGNB is an open-source decentralized Software Defined Virtual Network (SDVN) that creates a layer-3 P2P VPN with strong NAT traversal, l… | 87 | 1206 | active |
| n0-computer/sendme Sendme is a Rust CLI tool for sending files and directories over the internet, built on the iroh and iroh-blobs protocols. It handles NAT h… | 82 | 1193 | active |
| mmalmi/nostr-vpn nostr-vpn is a Tailscale-style private mesh VPN written in Rust, built around a FIPS-backed data plane with a `nvpn` CLI/daemon, a shared n… | 75 | 1158 | active |
| nashaofu/shell360 Shell360 is a cross-platform SSH and SFTP client built with Tauri, React, and Rust, supporting Windows, macOS, Linux, Android, and iOS. It … | 89 | 1156 | active |
| burghardt/easy-wg-quick A shell script that generates WireGuard VPN configurations for a hub (VPN concentrator) and its peers, including QR codes for mobile client… | 87 | 1118 | active |
| Archmonger/django-dbbackup A Django application providing management commands to back up and restore project databases and media files using native database tools. It… | 91 | 1114 | active |
| hyugogirubato/KeyDive KeyDive is a Python CLI tool that extracts Widevine L3 DRM keys and device credentials from rooted Android devices using Frida instrumentat… | 75 | 1099 | active |
| hahwul/jwt-hack jwt-hack is a fast, single-binary Rust CLI toolkit for testing, analyzing, and attacking JSON Web Tokens (JWT) and JWE tokens. It supports … | 88 | 1089 | active |
| Cloxl/xhshow A pure-algorithm Python library that generates Xiaohongshu (XHS/RedNote) request signature headers such as x-s, x-s-common, x-t, and x-rap-… | 70 | 1085 | active |
| apache/ranger Apache Ranger is a framework to enable, monitor, and manage comprehensive data security across the Hadoop platform and beyond. It provides … | 76 | 1081 | stable |
| ArweaveTeam/arweave The official Erlang implementation of the Arweave protocol, a distributed, cryptographically verified permanent archive built on a cryptocu… | 97 | 1079 | stable |
| thehackingsage/hackdroid HackDroid is a curated collection of 364+ pentesting and security-related Android apps organized into categories like MITM, forensics, snif… | 32 | 1078 | active |
| gopcua/opcua A native Go implementation of the OPC/UA Binary Protocol for industrial automation communication. It provides client and server functionali… | 96 | 1069 | active |
| dyc3/steamguard-cli A Rust command-line utility for setting up and using Steam Mobile Authenticator (2FA). It generates Steam Guard codes and handles trade, ma… | 89 | 1063 | active |
| AWS IoT Device SDK for Embedded C AWS's official C SDK for connecting embedded devices to AWS IoT, composed of modular libraries like coreMQTT, coreHTTP, coreJSON, and coreP… | 54 | 1058 | active |
| hardcore-sushi/DroidFS DroidFS is an Android application for accessing encrypted virtual filesystems based on gocryptfs and CryFS, using its own internal file exp… | 98 | 1057 | active |
| ApeWorX/ape Ape Framework is a Python-based Web3 development framework for compiling, testing, deploying, and interacting with smart contracts from a s… | 97 | 1054 | active |
| espressif/ESP8266_RTOS_SDK Espressif's official FreeRTOS-based software development kit for the ESP8266 chip, written in C and following the esp-idf style API. It pro… | 60 | 3576 | maintenance |
| tempoxyz/tempo Tempo is a Rust-based blockchain purpose-built for stablecoin payments, built on the Reth EVM execution SDK with sub-second finality via Si… | 82 | 1034 | active |
| gcarmix/HexWalk HexWalk is a cross-platform GUI hex editor, viewer, and binary analyzer built on qhexedit2, Capstone, and Qt. It combines hex editing with … | 89 | 1027 | active |
| net-ssh/net-ssh Net::SSH is a pure-Ruby implementation of the SSH2 client protocol, packaged as a Ruby gem. It lets Ruby programs open SSH connections to r… | 77 | 1024 | active |
| error311/FileRise FileRise is a self-hosted, web-based file manager and storage hub written in PHP and JavaScript, featuring per-folder ACLs, WebDAV access, … | 84 | 1021 | active |
| AthenZ/athenz Athenz is an open source platform for X.509 certificate-based service authentication and fine-grained role-based access control (RBAC) in d… | 100 | 1013 | active |
| odedshimon/BruteShark BruteShark is an open-source Network Forensic Analysis Tool (NFAT) that deeply inspects network traffic from PCAP/PCAPng files or live capt… | 23 | 3397 | maintenance |
| DhavalKapil/icmptunnel icmptunnel is a C command-line tool that transparently encapsulates IP traffic inside ICMP echo and reply packets, tunneling it through a p… | 23 | 3251 | maintenance |
| eclipse-paho/paho.mqtt.android Eclipse Paho Android Service is an MQTT client library written in Java for Android applications, supporting MQTT 3.1/3.1.1 with features li… | 32 | 3101 | maintenance |
| linsa-io/linsa.io Linsa is a privacy-focused messaging application that combines chat, tasks, notes, files, and payments into a single product with end-to-en… | 72 | 16854 | experimental |
| TheMRLL/WinXray WinXray is a Windows universal proxy client supporting Xray/V2Ray (vmess/vless), Shadowsocks, SSR, Trojan, Trojan-go, and NaïveProxy, built… | 23 | 2795 | maintenance |
| Lakr233/BBackupp BBackupp is a macOS application that automates backups of iOS devices, supporting encrypted, scheduled, and wireless backups over IP. It st… | 53 | 2640 | maintenance |
| wangyu-/tinyfecVPN A lightweight Linux VPN tool that uses Reed-Solomon forward error correction to reduce packet loss and improve TCP latency on high-latency,… | 23 | 2587 | maintenance |
| Jazz Classic Jazz is a distributed, local-first database that syncs structured data, files, and streams across frontends, containers, serverless… | 84 | 2535 | maintenance |