function: cryptography
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| SQLCipher SQLCipher is an open-source fork of SQLite that adds full-database 256-bit AES encryption, tamper detection, and strong key derivation. It … | 94 | 7254 | stable |
| cloudflare/boringtun BoringTun is a Rust implementation of the WireGuard VPN protocol, provided both as a reusable library and as a userspace CLI executable (bo… | 63 | 7185 | active |
| Kunzisoft/KeePassDX KeePassDX is a lightweight, open-source password manager and encrypted vault for Android, compatible with the KeePass format (.kdb/.kdbx). … | 96 | 7182 | active |
| openbao/openbao OpenBao is an open-source, identity-based secrets management system for storing, distributing, and rotating sensitive data such as secrets,… | 93 | 7177 | active |
| tulir/whatsmeow whatsmeow is a Go library implementing the WhatsApp web multidevice API. It enables Go programs to connect to WhatsApp as a linked device, … | 76 | 7147 | active |
| hwdsl2/docker-ipsec-vpn-server A Docker image that runs a self-hosted IPsec VPN server supporting IPsec/L2TP, Cisco IPsec, and IKEv2, built on Libreswan and xl2tpd. It au… | 77 | 7123 | active |
| gopasspw/gopass gopass is a command-line password manager for teams, serving as a drop-in replacement for the standard UNIX pass tool. It encrypts secrets … | 82 | 7107 | stable |
| RsaCtfTool/RsaCtfTool A Python CLI tool that attacks weak RSA public keys to recover private keys and decrypt ciphertext, combining many factorization and lattic… | 76 | 7097 | active |
| Cosmos The Cosmos SDK is a modular open-source Go framework for building secure, high-performance application-specific blockchains with built-in i… | 99 | 7050 | stable |
| markqvist/Reticulum Reticulum is a cryptography-based networking stack written in Python that builds encrypted, resilient local and wide-area networks over LoR… | 99 | 7046 | active |
| Mbed-TLS/mbedtls Mbed TLS is a portable C library implementing TLS, DTLS, and X.509 certificate handling, plus a reference implementation of the PSA Cryptog… | 92 | 6918 | stable |
| MacPass/MacPass MacPass is a native macOS KeePass password manager client that opens and manages KDBX password databases. It is written in Objective-C and … | 32 | 6855 | active |
| jstedfast/MailKit MailKit is a cross-platform .NET mail client library built on top of MimeKit, providing IMAP, POP3, and SMTP support along with a high-perf… | 76 | 6844 | stable |
| travist/jsencrypt JSEncrypt is a tiny, zero-dependency JavaScript library for OpenSSL-compatible RSA encryption, decryption, signing, and key generation. It … | 66 | 6804 | active |
| standardnotes/app Standard Notes is an end-to-end encrypted note-taking application for web, desktop, and mobile with cross-device sync and optional self-hos… | 99 | 6602 | active |
| yadm-dev/yadm yadm is a Git-based command-line tool for managing dotfiles, keeping configuration files in place in $HOME while tracking them in a single … | 67 | 6403 | stable |
| BLAKE3-team/BLAKE3 The official Rust and C implementations of the BLAKE3 cryptographic hash function, which is faster than MD5, SHA-2, and BLAKE2 while remain… | 98 | 6398 | stable |
| 5ec1cff/TrickyStore Tricky Store is a Magisk module for Android 10+ that modifies the certificate chain generated during Android key attestation to spoof devic… | 46 | 6315 | active |
| sigstore/cosign Cosign is a CLI tool from the Sigstore project for signing and verifying OCI containers and other software artifacts, with support for keyl… | 98 | 6247 | stable |
| PhilippC/keepass2android Keepass2android is an open-source password manager app for Android, compatible with the KeePass 2.x database format. It stores credentials … | 97 | 6205 | active |
| guanzhi/GmSSL GmSSL is an open-source cryptographic toolkit developed at Peking University implementing Chinese national commercial cryptography standard… | 80 | 6147 | stable |
| lesspass/lesspass LessPass is a stateless, open-source password manager that deterministically generates site-specific passwords from a single master passwor… | 76 | 6053 | active |
| bitcoinjs/bitcoinjs-lib bitcoinjs-lib is a JavaScript/TypeScript Bitcoin library for Node.js and browsers, supporting transaction building, PSBTs, and address/scri… | 62 | 5997 | stable |
| openpgpjs/openpgpjs OpenPGP.js is a pure JavaScript implementation of the OpenPGP protocol (RFC 9580), maintained by Proton Mail. It lets applications encrypt,… | 90 | 5969 | stable |
| TGX-Android/Telegram-X Telegram X is the official alternative Telegram client for Android, built on TDLib and the MTProto secure protocol. This repository contain… | 83 | 5924 | active |
| jedisct1/dsvpn DSVPN is a dead-simple, single-binary VPN tool written in C that tunnels traffic over TCP with modern, formally verified cryptography. It r… | 68 | 5816 | stable |
| win-acme/win-acme win-acme is an ACMEv2 client for Windows that automates obtaining and installing SSL/TLS certificates from Let's Encrypt, ZeroSSL, and othe… | 62 | 5787 | active |
| Telegram for macOS The official open-source Telegram messaging client for macOS, written in Swift. It provides the full Telegram experience—chats, calls, chan… | 52 | 5745 | active |
| dotenvx/dotenvx Dotenvx is a secure, cross-platform CLI and SDK for managing .env files, adding encryption so secrets can be safely committed to git and de… | 89 | 5707 | active |
| jpadilla/pyjwt PyJWT is a Python library implementing JSON Web Tokens (JWT) per RFC 7519, supporting encoding and decoding of signed tokens. It is the de … | 90 | 5694 | stable |
| gilbertchen/duplicacy Duplicacy is a cross-platform cloud backup tool built around lock-free deduplication, allowing multiple computers to back up to the same st… | 69 | 5670 | stable |
| QuipNetwork/quip-validator A Rust implementation of the Quip Protocol validator node, forked from Substrate's solochain template. It runs a blockchain node that can j… | 58 | 5641 | active |
| ZipArchive/ZipArchive SSZipArchive is an Objective-C/Swift utility library for creating and extracting zip archives on Apple platforms (iOS, macOS, tvOS, watchOS… | 45 | 5606 | stable |
| phpseclib/phpseclib A MIT-licensed pure-PHP library providing implementations of SSH-2, SFTP, X.509/CSR/CRL/PFX/CMS, and a wide range of cryptographic primitiv… | 99 | 5585 | stable |
| ProtonMail/WebClients The official monorepo for Proton's web clients, including Proton Mail, Calendar, Drive, VPN, Pass, Wallet, and more. It is built with React… | 84 | 5562 | active |
| authlib/authlib Authlib is a Python library for building OAuth 1.0/2.0 and OpenID Connect clients, authorization servers, and protected resource servers, w… | 93 | 5406 | stable |
| cjdelisle/cjdns Cjdns is an encrypted IPv6 networking implementation that uses public-key cryptography for address allocation and a distributed hash table … | 73 | 5406 | active |
| spaceandtimefdn/sxt-proof-of-sql A Rust library implementing Proof of SQL, a zero-knowledge proof protocol that allows SQL queries to be executed and cryptographically veri… | 84 | 5389 | active |
| UnigramDev/Unigram Unigram is an open-source Telegram client for Windows built in C# using UWP. It supports full Telegram features including secret chats, voi… | 95 | 5363 | active |
| P-H-C/phc-winner-argon2 The reference C implementation of Argon2, the winner of the Password Hashing Competition, providing memory-hard password hashing with Argon… | 23 | 5358 | stable |
| spieglt/FlyingCarpet Flying Carpet is a cross-platform file transfer application that works like AirDrop between Android, iOS, Linux, macOS, and Windows devices… | 98 | 5313 | active |
| bitcoinj/bitcoinj bitcoinj is a Java library for working with the Bitcoin protocol, supporting wallet management, sending and receiving transactions via SPV … | 89 | 5228 | active |
| XRPLF/rippled rippled (xrpld) is the core C++ server daemon implementing the XRP Ledger protocol, a decentralized cryptographic ledger secured by a Byzan… | 94 | 5190 | stable |
| wangyu-/UDPspeeder UDPspeeder is a C++ tunnel tool that improves network quality over high-latency, lossy links using Forward Error Correction (Reed-Solomon c… | 66 | 5168 | active |
| GhostPack/Rubeus Rubeus is a C# command-line toolset for raw Kerberos interaction and abuse on Windows, adapted from Kekeo and MakeMeEnterpriseAdmin. It sup… | 60 | 5145 | active |
| bisq-network/bisq Bisq is an open-source desktop application and peer-to-peer network for exchanging bitcoin for national currencies and other cryptocurrenci… | 99 | 5128 | stable |
| mimblewimble/grin Grin is a minimal, open-source implementation of the Mimblewimble blockchain protocol, providing a privacy-preserving digital currency with… | 93 | 5093 | active |
| kokke/tiny-AES-c A small, portable implementation of AES encryption (128/192/256-bit) in C99, supporting ECB, CBC, and CTR modes. It is designed for minimal… | 23 | 5000 | stable |
| matter-labs/zksync zkSync is Matter Labs' open-source ZK Rollup technology for scaling and adding privacy to Ethereum, including the ZK Stack framework for la… | 59 | 4923 | active |
| spaceandtimefdn/blitzar Blitzar is a C++ library (with Rust bindings) that accelerates zero-knowledge proof algorithms on CPU and GPU using CUDA. It was built by S… | 89 | 4865 | active |
| caamer20/Telegram-Drive A cross-platform desktop application that turns a Telegram account into a personal cloud storage drive, built with Tauri, Rust, React, and … | 78 | 4845 | active |
| aws/s2n-tls s2n-tls is a C99 implementation of the TLS/SSL protocols designed to be simple, small, fast, and security-focused, maintained by AWS. It pr… | 99 | 4755 | stable |
| TheWover/donut Donut is a shellcode generator that converts VBScript, JScript, EXE, DLL files, and .NET assemblies into x86, x64, or AMD64+x86 position-in… | 36 | 4689 | stable |
| Authenticator-Extension/Authenticator A browser extension that generates two-factor authentication (2FA) codes, acting as a software TOTP authenticator. It is available for Chro… | 52 | 4642 | active |
| build-trust/ockam Ockam is a Rust library and CLI toolkit for building secure-by-design distributed applications with end-to-end encryption, cryptographic id… | 61 | 4633 | active |
| M66B/FairEmail FairEmail is a fully featured, open source, privacy oriented email client for Android. It supports unlimited accounts via standard protocol… | 95 | 4582 | active |
| rfjakob/gocryptfs gocryptfs is an encrypted overlay filesystem written in Go, built on the go-fuse library, that stores each file as a corresponding encrypte… | 77 | 4582 | stable |
| stratumauth/app Stratum (formerly Authenticator Pro) is a free, open-source two-factor authentication app for Android with a Wear OS companion. It supports… | 94 | 4555 | active |
| xtaci/kcp-go kcp-go is a Go library implementing the KCP reliable-UDP protocol, providing smooth, ordered, error-checked, and encrypted stream delivery … | 70 | 4550 | stable |
| ProvableHQ/snarkOS snarkOS is a decentralized operating system for zero-knowledge applications, forming the backbone of the Aleo network. It implements node s… | 99 | 4525 | active |
| OpenVPN/easy-rsa easy-rsa is a shell-based CLI utility for building and managing a PKI certificate authority. It creates root and intermediate CAs, signs ce… | 80 | 4475 | active |
| apache/shiro Apache Shiro is a comprehensive Java security framework providing authentication, authorization, cryptography, and enterprise session manag… | 95 | 4451 | active |
| isar/hive Hive is a lightweight, fast key-value NoSQL database written in pure Dart, designed for Flutter and Dart applications. It supports encrypti… | 23 | 4392 | active |
| rainbow-me/rainbow Rainbow is a self-custody Ethereum wallet app for iOS, Android, and desktop browsers, built with React Native and TypeScript. It lets users… | 94 | 4384 | active |
| sshnet/SSH.NET SSH.NET is a Secure Shell (SSH-2) client library for .NET, optimized for parallelism. It provides SSH command execution, SFTP and SCP file … | 87 | 4370 | stable |
| nalgeon/sqlean A curated collection of SQLite loadable extensions packaged into domain modules like crypto, math, regexp, stats, text, time, uuid, and fil… | 95 | 4366 | active |
| WireGuard/wireguard-go A userspace implementation of the WireGuard VPN protocol written in Go. It creates WireGuard tunnel interfaces on Linux, macOS, Windows, Fr… | 70 | 4366 | stable |
| LibrePDF/OpenPDF OpenPDF is an open-source Java library (LGPL/MPL licensed, forked from iText 4) for creating, editing, rendering, and encrypting PDF docume… | 93 | 4359 | active |
| smallstep/cli Step CLI is a Go-based command-line tool for building, operating, and automating PKI systems, working with X.509 certificates, JWTs, OAuth … | 95 | 4317 | active |
| iancoleman/bip39 A web-based tool for converting BIP39 mnemonic seed phrases into addresses and private keys across many cryptocurrencies. It can be used on… | 23 | 4300 | stable |
| HelloZeroNet/ZeroNet ZeroNet is a decentralized web platform that serves websites peer-to-peer using Bitcoin cryptography for site signing and the BitTorrent ne… | 23 | 18772 | maintenance |
| PurpleI2P/i2pd i2pd (I2P Daemon) is a full-featured C++ implementation of an I2P client, providing a universal anonymous network layer with end-to-end enc… | 93 | 4176 | active |
| square/Valet Valet is a Swift library that simplifies securely storing data in the iOS, tvOS, watchOS, and macOS Keychain. It wraps the Keychain's compl… | 75 | 4175 | stable |
| bitcoin-wallet/bitcoin-wallet Bitcoin Wallet is a standalone Bitcoin payment app for Android devices that runs its own Bitcoin node via bitcoinj, requiring no centralize… | 36 | 4160 | active |
| owncloud/android The official ownCloud Android client app, built in Kotlin, for accessing, syncing, and sharing files on ownCloud servers (both Infinite Sca… | 97 | 4158 | active |
| tronprotocol/java-tron java-tron is the official Java implementation of the TRON Protocol, a DPoS blockchain with an EVM-compatible virtual machine (TVM). It runs… | 94 | 4147 | active |
| vvo/iron-session iron-session is a secure, stateless, cookie-based session library for JavaScript, storing session data in signed and encrypted cookies deco… | 58 | 4138 | active |
| cbeuw/Cloak Cloak is a pluggable transport that masquerades proxied traffic as ordinary HTTPS web browsing to evade deep packet inspection and censorsh… | 63 | 4068 | active |
| sobolevn/git-secret git-secret is a bash-based command-line tool that encrypts private files with GPG public keys and stores them safely inside a git repositor… | 67 | 4038 | active |
| microsoft/SEAL Microsoft SEAL is an open-source homomorphic encryption library written in modern C++, with a .NET wrapper, supporting BFV/BGV and CKKS sch… | 97 | 4016 | active |
| offen/docker-volume-backup A lightweight Docker companion container that performs recurring or one-off backups of Docker volumes to local directories or S3, WebDAV, A… | 92 | 3985 | active |
| openssh/openssh-portable Portable OpenSSH is a complete implementation of the SSH protocol version 2 for secure remote login, command execution, and file transfer. … | 76 | 3970 | stable |
| icsharpcode/SharpZipLib SharpZipLib is a pure C# compression library for .NET supporting Zip (stored/deflate, PKZIP and AES encryption, Zip64), GZip, zlib, raw def… | 23 | 3930 | stable |
| abcz316/SKRoot-linuxKernelRoot SKRoot is a kernel-level hidden root solution for Android that patches stock kernel images without source code, granting root privileges wh… | 85 | 3897 | active |
| gildas-lormeau/zip.js zip.js is a BSD-3-Clause JavaScript library for creating and reading zip archives in browsers, Node.js, Deno, and Bun. It supports Zip64, A… | 95 | 3879 | active |
| KuroLabs/stegcloak StegCloak is a pure JavaScript steganography module that hides secrets inside plain text using invisible zero-width unicode characters, enc… | 23 | 3871 | stable |
| openbsd/src A read-only Git mirror of OpenBSD's official CVS source repository containing the complete operating system source tree, including the kern… | 77 | 3864 | active |
| neomutt/neomutt NeoMutt is a highly configurable, terminal-based command line email reader (MUA) forked from Mutt, written in C. It consolidates many commu… | 91 | 3817 | active |
| dcodeIO/bcrypt.js A zero-dependency, pure JavaScript implementation of the bcrypt password hashing algorithm with TypeScript support. It is API-compatible wi… | 81 | 3799 | stable |
| sismo-core/sismo-badges Sismo Badges is the set of Solidity smart contracts powering the Sismo Badge Minting Protocol on Ethereum. It provides an attestations regi… | 23 | 15880 | maintenance |
| jwt/ruby-jwt A Ruby gem implementing the RFC 7519 OAuth JSON Web Token (JWT) standard, supporting encoding and decoding of signed tokens with HMAC, RSAS… | 92 | 3687 | stable |
| mollyim/mollyim-android Molly is a hardened, security-focused fork of the Signal messaging app for Android, adding features like passphrase-encrypted databases at … | 97 | 3669 | active |
| str4d/rage rage is a Rust implementation of the age file encryption format, providing a simple, secure CLI tool and library with small explicit keys, … | 97 | 3633 | active |
| lowRISC/opentitan OpenTitan is an open-source silicon Root of Trust (RoT) project providing commercial-grade, security-certified hardware IP blocks written i… | 83 | 3607 | stable |
| Haivision/srt SRT (Secure Reliable Transport) is an open-source transport protocol and C++ library for ultra-low-latency live video and audio streaming o… | 95 | 3585 | stable |
| meshcore-dev/MeshCore MeshCore is a lightweight C++ library and firmware implementing a hybrid multi-hop mesh routing protocol for LoRa packet radios, enabling e… | 83 | 3544 | active |
| web-push-libs/web-push A Node.js library for sending Web Push notifications via the Web Push Protocol, including payload encryption and VAPID key support, with le… | 67 | 3542 | stable |
| neo-project/neo The C# reference implementation of the Neo blockchain protocol, a distributed network for the 'Smart Economy' supporting smart contracts an… | 97 | 3535 | active |
| sentient-agi/OML-1.0-Fingerprinting A Python library for embedding secret cryptographic fingerprints into LLMs via fine-tuning, so model owners can prove ownership and detect … | 13 | 3497 | active |
| oblador/react-native-keychain A React Native library providing access to the iOS Keychain and Android Keystore for securely storing credentials such as passwords, tokens… | 70 | 3473 | stable |