Open-source cryptography software
1245 open-source libraries, tools and applications tagged cryptography, ranked by how closely cryptography is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| jrnl-org/jrnl jrnl is a command-line journal application for creating, searching, and viewing journal entries stored as human-readable plain text files. … | 85 | 7346 | active |
| SQLCipher SQLCipher is an open-source fork of SQLite that adds full-database 256-bit AES encryption, tamper detection, and strong key derivation. It … | 91 | 7286 | stable |
| markqvist/Reticulum Reticulum is a cryptography-based networking stack written in Python that builds encrypted, resilient local and wide-area networks over LoR… | 95 | 7281 | active |
| gopass gopass is a command-line password manager for teams, serving as a drop-in replacement for the standard UNIX pass tool. It encrypts secrets … | 99 | 7257 | stable |
| cloudflare/boringtun BoringTun is a Rust implementation of the WireGuard VPN protocol, provided both as a reusable library and as a userspace CLI executable (bo… | 60 | 7215 | active |
| hwdsl2/docker-ipsec-vpn-server A Docker image that runs a self-hosted IPsec VPN server supporting IPsec/L2TP, Cisco IPsec, and IKEv2, built on Libreswan and xl2tpd. It au… | 76 | 7150 | active |
| RsaCtfTool/RsaCtfTool A Python CLI tool that attacks weak RSA public keys to recover private keys and decrypt ciphertext, combining many factorization and lattic… | 75 | 7143 | active |
| Cosmos The Cosmos SDK is a modular open-source Go framework for building secure, high-performance application-specific blockchains with built-in i… | 96 | 7075 | stable |
| Mbed TLS Mbed TLS is a portable C library implementing TLS, DTLS, and X.509 certificate handling, plus a reference implementation of the PSA Cryptog… | 92 | 6963 | stable |
| MacPass MacPass is a native macOS KeePass password manager client that opens and manages KDBX password databases. It is written in Objective-C and … | 85 | 6884 | active |
| jstedfast/MailKit MailKit is a cross-platform .NET mail client library built on top of MimeKit, providing IMAP, POP3, and SMTP support along with a high-perf… | 77 | 6863 | stable |
| travist/jsencrypt JSEncrypt is a tiny, zero-dependency JavaScript library for OpenSSL-compatible RSA encryption, decryption, signing, and key generation. It … | 63 | 6806 | active |
| Standard Notes Standard Notes is an end-to-end encrypted note-taking application for web, desktop, and mobile with cross-device sync and optional self-hos… | 95 | 6638 | active |
| BLAKE3 The official Rust and C implementations of the BLAKE3 cryptographic hash function, which is faster than MD5, SHA-2, and BLAKE2 while remain… | 96 | 6468 | stable |
| yadm-dev/yadm yadm is a Git-based command-line tool for managing dotfiles, keeping configuration files in place in $HOME while tracking them in a single … | 63 | 6438 | stable |
| 5ec1cff/TrickyStore Tricky Store is a Magisk module for Android 10+ that modifies the certificate chain generated during Android key attestation to spoof devic… | 41 | 6391 | active |
| sigstore/cosign Cosign is a CLI tool from the Sigstore project for signing and verifying OCI containers and other software artifacts, with support for keyl… | 95 | 6339 | stable |
| PhilippC/keepass2android Keepass2android is an open-source password manager app for Android, compatible with the KeePass 2.x database format. It stores credentials … | 96 | 6247 | active |
| GmSSL GmSSL is an open-source cryptographic toolkit developed at Peking University implementing Chinese national commercial cryptography standard… | 74 | 6166 | stable |
| lesspass/lesspass LessPass is a stateless, open-source password manager that deterministically generates site-specific passwords from a single master passwor… | 77 | 6065 | active |
| Telegram X Telegram X is the official alternative Telegram client for Android, built on TDLib and the MTProto secure protocol. This repository contain… | 94 | 6058 | active |
| bitcoinjs/bitcoinjs-lib bitcoinjs-lib is a JavaScript/TypeScript Bitcoin library for Node.js and browsers, supporting transaction building, PSBTs, and address/scri… | 59 | 6001 | stable |
| openpgpjs/openpgpjs OpenPGP.js is a pure JavaScript implementation of the OpenPGP protocol (RFC 9580), maintained by Proton Mail. It lets applications encrypt,… | 87 | 5966 | stable |
| dotenvx/dotenvx Dotenvx is a secure, cross-platform CLI and SDK for managing .env files, adding encryption so secrets can be safely committed to git and de… | 90 | 5833 | active |
| jedisct1/dsvpn DSVPN is a dead-simple, single-binary VPN tool written in C that tunnels traffic over TCP with modern, formally verified cryptography. It r… | 71 | 5817 | stable |
| win-acme/win-acme win-acme is an ACMEv2 client for Windows that automates obtaining and installing SSL/TLS certificates from Let's Encrypt, ZeroSSL, and othe… | 58 | 5806 | active |
| Telegram for macOS The official open-source Telegram messaging client for macOS, written in Swift. It provides the full Telegram experience—chats, calls, chan… | 48 | 5768 | active |
| jpadilla/pyjwt PyJWT is a Python library implementing JSON Web Tokens (JWT) per RFC 7519, supporting encoding and decoding of signed tokens. It is the de … | 98 | 5719 | stable |
| gilbertchen/duplicacy Duplicacy is a cross-platform cloud backup tool built around lock-free deduplication, allowing multiple computers to back up to the same st… | 70 | 5696 | stable |
| Proton Mail Suite The official monorepo for Proton's web clients, including Proton Mail, Calendar, Drive, VPN, Pass, Wallet, and more. It is built with React… | 82 | 5644 | active |
| QuipNetwork/quip-validator A Rust implementation of the Quip Protocol validator node, forked from Substrate's solochain template. It runs a blockchain node that can j… | 58 | 5636 | active |
| ZipArchive/ZipArchive SSZipArchive is an Objective-C/Swift utility library for creating and extracting zip archives on Apple platforms (iOS, macOS, tvOS, watchOS… | 41 | 5603 | stable |
| phpseclib/phpseclib A MIT-licensed pure-PHP library providing implementations of SSH-2, SFTP, X.509/CSR/CRL/PFX/CMS, and a wide range of cryptographic primitiv… | 95 | 5592 | stable |
| Authlib Authlib is a Python library for building OAuth 1.0/2.0 and OpenID Connect clients, authorization servers, and protected resource servers, w… | 97 | 5430 | stable |
| UnigramDev/Unigram Unigram is an open-source Telegram client for Windows built in C# using UWP. It supports full Telegram features including secret chats, voi… | 92 | 5423 | active |
| cjdelisle/cjdns Cjdns is an encrypted IPv6 networking implementation that uses public-key cryptography for address allocation and a distributed hash table … | 75 | 5416 | active |
| spaceandtimefdn/sxt-proof-of-sql A Rust library implementing Proof of SQL, a zero-knowledge proof protocol that allows SQL queries to be executed and cryptographically veri… | 84 | 5384 | active |
| P-H-C/phc-winner-argon2 The reference C implementation of Argon2, the winner of the Password Hashing Competition, providing memory-hard password hashing with Argon… | 23 | 5375 | stable |
| Telegram Drive A cross-platform desktop application that turns a Telegram account into a personal cloud storage drive, built with Tauri, Rust, React, and … | 78 | 5370 | active |
| spieglt/FlyingCarpet Flying Carpet is a cross-platform file transfer application that works like AirDrop between Android, iOS, Linux, macOS, and Windows devices… | 96 | 5331 | active |
| XRPLF/rippled rippled (xrpld) is the core C++ server daemon implementing the XRP Ledger protocol, a decentralized cryptographic ledger secured by a Byzan… | 95 | 5230 | stable |
| bitcoinj/bitcoinj bitcoinj is a Java library for working with the Bitcoin protocol, supporting wallet management, sending and receiving transactions via SPV … | 86 | 5229 | active |
| GhostPack/Rubeus Rubeus is a C# command-line toolset for raw Kerberos interaction and abuse on Windows, adapted from Kekeo and MakeMeEnterpriseAdmin. It sup… | 57 | 5195 | active |
| wangyu-/UDPspeeder UDPspeeder is a C++ tunnel tool that improves network quality over high-latency, lossy links using Forward Error Correction (Reed-Solomon c… | 62 | 5174 | active |
| Bisq Bisq is an open-source desktop application and peer-to-peer network for exchanging bitcoin for national currencies and other cryptocurrenci… | 99 | 5146 | stable |
| Grin Grin is a minimal, open-source implementation of the Mimblewimble blockchain protocol, providing a privacy-preserving digital currency with… | 90 | 5098 | active |
| kokke/tiny-AES-c A small, portable implementation of AES encryption (128/192/256-bit) in C99, supporting ECB, CBC, and CTR modes. It is designed for minimal… | 23 | 5017 | stable |
| matter-labs/zksync zkSync is Matter Labs' open-source ZK Rollup technology for scaling and adding privacy to Ethereum, including the ZK Stack framework for la… | 56 | 4923 | active |
| spaceandtimefdn/blitzar Blitzar is a C++ library (with Rust bindings) that accelerates zero-knowledge proof algorithms on CPU and GPU using CUDA. It was built by S… | 84 | 4863 | active |
| aws/s2n-tls s2n-tls is a C99 implementation of the TLS/SSL protocols designed to be simple, small, fast, and security-focused, maintained by AWS. It pr… | 98 | 4769 | stable |
| TheWover/donut Donut is a shellcode generator that converts VBScript, JScript, EXE, DLL files, and .NET assemblies into x86, x64, or AMD64+x86 position-in… | 33 | 4716 | stable |
| M66B/FairEmail FairEmail is a fully featured, open source, privacy oriented email client for Android. It supports unlimited accounts via standard protocol… | 95 | 4714 | active |
| Authenticator A browser extension that generates two-factor authentication (2FA) codes, acting as a software TOTP authenticator. It is available for Chro… | 66 | 4705 | active |
| build-trust/ockam Ockam is a Rust library and CLI toolkit for building secure-by-design distributed applications with end-to-end encryption, cryptographic id… | 57 | 4637 | active |
| rfjakob/gocryptfs gocryptfs is an encrypted overlay filesystem written in Go, built on the go-fuse library, that stores each file as a corresponding encrypte… | 77 | 4617 | stable |
| stratumauth/app Stratum (formerly Authenticator Pro) is a free, open-source two-factor authentication app for Android with a Wear OS companion. It supports… | 90 | 4598 | active |
| xtaci/kcp-go kcp-go is a Go library implementing the KCP reliable-UDP protocol, providing smooth, ordered, error-checked, and encrypted stream delivery … | 63 | 4554 | stable |
| ProvableHQ/snarkOS snarkOS is a decentralized operating system for zero-knowledge applications, forming the backbone of the Aleo network. It implements node s… | 100 | 4529 | active |
| OpenVPN/easy-rsa easy-rsa is a shell-based CLI utility for building and managing a PKI certificate authority. It creates root and intermediate CAs, signs ce… | 88 | 4479 | active |
| apache/shiro Apache Shiro is a comprehensive Java security framework providing authentication, authorization, cryptography, and enterprise session manag… | 92 | 4460 | active |
| WireGuard/wireguard-go A userspace implementation of the WireGuard VPN protocol written in Go. It creates WireGuard tunnel interfaces on Linux, macOS, Windows, Fr… | 66 | 4429 | stable |
| Rainbow Wallet Rainbow is a self-custody Ethereum wallet app for iOS, Android, and desktop browsers, built with React Native and TypeScript. It lets users… | 95 | 4396 | active |
| isar/hive Hive is a lightweight, fast key-value NoSQL database written in pure Dart, designed for Flutter and Dart applications. It supports encrypti… | 23 | 4391 | active |
| sshnet/SSH.NET SSH.NET is a Secure Shell (SSH-2) client library for .NET, optimized for parallelism. It provides SSH command execution, SFTP and SCP file … | 81 | 4382 | stable |
| LibrePDF/OpenPDF OpenPDF is an open-source Java library (LGPL/MPL licensed, forked from iText 4) for creating, editing, rendering, and encrypting PDF docume… | 92 | 4378 | active |
| nalgeon/sqlean A curated collection of SQLite loadable extensions packaged into domain modules like crypto, math, regexp, stats, text, time, uuid, and fil… | 89 | 4368 | active |
| iancoleman/bip39 A web-based tool for converting BIP39 mnemonic seed phrases into addresses and private keys across many cryptocurrencies. It can be used on… | 23 | 4351 | stable |
| smallstep/cli Step CLI is a Go-based command-line tool for building, operating, and automating PKI systems, working with X.509 certificates, JWTs, OAuth … | 97 | 4333 | active |
| ZeroNet ZeroNet is a decentralized web platform that serves websites peer-to-peer using Bitcoin cryptography for site signing and the BitTorrent ne… | 23 | 18776 | maintenance |
| i2pd i2pd (I2P Daemon) is a full-featured C++ implementation of an I2P client, providing a universal anonymous network layer with end-to-end enc… | 87 | 4236 | active |
| owncloud/android The official ownCloud Android client app, built in Kotlin, for accessing, syncing, and sharing files on ownCloud servers (both Infinite Sca… | 96 | 4171 | active |
| square/Valet Valet is a Swift library that simplifies securely storing data in the iOS, tvOS, watchOS, and macOS Keychain. It wraps the Keychain's compl… | 84 | 4170 | stable |
| tronprotocol/java-tron java-tron is the official Java implementation of the TRON Protocol, a DPoS blockchain with an EVM-compatible virtual machine (TVM). It runs… | 93 | 4165 | active |
| bitcoin-wallet/bitcoin-wallet Bitcoin Wallet is a standalone Bitcoin payment app for Android devices that runs its own Bitcoin node via bitcoinj, requiring no centralize… | 33 | 4164 | active |
| vvo/iron-session iron-session is a secure, stateless, cookie-based session library for JavaScript, storing session data in signed and encrypted cookies deco… | 96 | 4143 | active |
| Cloak Cloak is a pluggable transport that masquerades proxied traffic as ordinary HTTPS web browsing to evade deep packet inspection and censorsh… | 68 | 4101 | active |
| sobolevn/git-secret git-secret is a bash-based command-line tool that encrypts private files with GPG public keys and stores them safely inside a git repositor… | 66 | 4048 | active |
| Microsoft SEAL Microsoft SEAL is an open-source homomorphic encryption library written in modern C++, with a .NET wrapper, supporting BFV/BGV and CKKS sch… | 99 | 4046 | active |
| openssh/openssh-portable Portable OpenSSH is a complete implementation of the SSH protocol version 2 for secure remote login, command execution, and file transfer. … | 77 | 4043 | stable |
| offen/docker-volume-backup A lightweight Docker companion container that performs recurring or one-off backups of Docker volumes to local directories or S3, WebDAV, A… | 93 | 4015 | active |
| abcz316/SKRoot-linuxKernelRoot SKRoot is a kernel-level hidden root solution for Android that patches stock kernel images without source code, granting root privileges wh… | 93 | 3953 | active |
| icsharpcode/SharpZipLib SharpZipLib is a pure C# compression library for .NET supporting Zip (stored/deflate, PKZIP and AES encryption, Zip64), GZip, zlib, raw def… | 23 | 3933 | stable |
| KuroLabs/stegcloak StegCloak is a pure JavaScript steganography module that hides secrets inside plain text using invisible zero-width unicode characters, enc… | 23 | 3919 | stable |
| MeshCore MeshCore is a lightweight C++ library and firmware implementing a hybrid multi-hop mesh routing protocol for LoRa packet radios, enabling e… | 84 | 3910 | active |
| openbsd/src A read-only Git mirror of OpenBSD's official CVS source repository containing the complete operating system source tree, including the kern… | 77 | 3902 | active |
| zip.js zip.js is a BSD-3-Clause JavaScript library for creating and reading zip archives in browsers, Node.js, Deno, and Bun. It supports Zip64, A… | 94 | 3899 | active |
| neomutt/neomutt NeoMutt is a highly configurable, terminal-based command line email reader (MUA) forked from Mutt, written in C. It consolidates many commu… | 87 | 3838 | active |
| dcodeIO/bcrypt.js A zero-dependency, pure JavaScript implementation of the bcrypt password hashing algorithm with TypeScript support. It is API-compatible wi… | 80 | 3797 | stable |
| shuaiplus/nodewarden NodeWarden is a Bitwarden-compatible password manager server that runs entirely on Cloudflare Workers, using D1 for data and R2/KV for atta… | 77 | 3789 | active |
| sismo-core/sismo-badges Sismo Badges is the set of Solidity smart contracts powering the Sismo Badge Minting Protocol on Ethereum. It provides an attestations regi… | 23 | 15872 | maintenance |
| mollyim/mollyim-android Molly is a hardened, security-focused fork of the Signal messaging app for Android, adding features like passphrase-encrypted databases at … | 94 | 3717 | active |
| lowRISC/opentitan OpenTitan is an open-source silicon Root of Trust (RoT) project providing commercial-grade, security-certified hardware IP blocks written i… | 81 | 3707 | stable |
| jwt/ruby-jwt A Ruby gem implementing the RFC 7519 OAuth JSON Web Token (JWT) standard, supporting encoding and decoding of signed tokens with HMAC, RSAS… | 98 | 3687 | stable |
| rage rage is a Rust implementation of the age file encryption format, providing a simple, secure CLI tool and library with small explicit keys, … | 91 | 3672 | active |
| SRT (Secure Reliable Transport) SRT (Secure Reliable Transport) is an open-source transport protocol and C++ library for ultra-low-latency live video and audio streaming o… | 93 | 3613 | stable |
| peasoft/NoMoreWalls A Python project that automatically fetches and merges publicly available proxy nodes from the internet and republishes them as Base64 and … | 77 | 3555 | active |
| web-push-libs/web-push A Node.js library for sending Web Push notifications via the Web Push Protocol, including payload encryption and VAPID key support, with le… | 66 | 3550 | stable |
| NEO Blockchain The C# reference implementation of the Neo blockchain protocol, a distributed network for the 'Smart Economy' supporting smart contracts an… | 93 | 3536 | active |
| sentient-agi/OML-1.0-Fingerprinting A Python library for embedding secret cryptographic fingerprints into LLMs via fine-tuning, so model owners can prove ownership and detect … | 13 | 3493 | active |
| oblador/react-native-keychain A React Native library providing access to the iOS Keychain and Android Keystore for securely storing credentials such as passwords, tokens… | 66 | 3477 | stable |