Open-source cryptography software
1245 open-source libraries, tools and applications tagged cryptography, ranked by how closely cryptography is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| google/OpenSK OpenSK is an open-source Rust implementation of a FIDO2/FIDO U2F security key, developed by Google as a research platform. It can run as fi… | 67 | 3451 | active |
| paralleldrive/cuid2 Cuid2 is a JavaScript library and CLI for generating secure, collision-resistant unique identifiers optimized for horizontal scaling and pe… | 72 | 3402 | active |
| paragonie/paseto A PHP reference implementation of PASETO (Platform-Agnostic Security Tokens), a secure alternative to JWT/JWS/JWE. It supports PASETO proto… | 36 | 3398 | stable |
| AChep/keyguard-app Keyguard is a multiplatform password manager client for the Bitwarden platform and KeePass (KDBX) files, built with Kotlin and Jetpack Comp… | 90 | 3366 | active |
| RNCryptor RNCryptor is a Swift (and Objective-C) library wrapping CommonCrypto AES encryption, implementing a cross-language encrypted data format (v… | 25 | 3355 | stable |
| Lagrange-Labs/deep-prove DeepProve is a Rust framework for generating zero-knowledge proofs of neural network inference, including end-to-end proving of full LLM fo… | 57 | 3352 | active |
| golang/crypto golang/crypto is the official supplementary cryptography library for the Go programming language, providing packages beyond the standard li… | 77 | 3351 | stable |
| randombit/botan Botan is a C++ cryptography library offering TLS 1.2/1.3, X.509 PKI, modern AEAD ciphers, post-quantum algorithms, and hardware token suppo… | 77 | 3335 | stable |
| BlueWallet BlueWallet is an open-source, self-custody Bitcoin and Lightning Network wallet for iOS and Android, built with React Native and TypeScript… | 99 | 3322 | active |
| malmeloo/FindMy.py FindMy.py is a Python library for querying Apple's Find My network to fetch and decrypt the location of AirTags, Apple devices, and custom … | 91 | 3321 | active |
| stellar/stellar-core Stellar Core is the reference C++20 implementation of the peer-to-peer agent that runs the Stellar blockchain network. It maintains a repli… | 96 | 3303 | active |
| jsha/minica minica is a small Go CLI tool that acts as a minimal certificate authority for generating root and leaf TLS certificates with keys. It is d… | 37 | 3285 | active |
| Storj Storj is a decentralized, S3-compatible cloud object storage network that encrypts files, splits them into pieces, and distributes them acr… | 95 | 3283 | active |
| Legrandin/pycryptodome PyCryptodome is a self-contained Python package of low-level cryptographic primitives, forked from PyCrypto with an almost drop-in compatib… | 100 | 3276 | active |
| rustic rustic is a fast, encrypted, deduplicated backup tool written in Rust that reads and writes the restic repository format, making it a drop-… | 89 | 3276 | active |
| homenc/HElib HElib is an open-source C++ library implementing homomorphic encryption, supporting the BGV scheme with bootstrapping and the CKKS approxim… | 23 | 3252 | stable |
| Tink Tink is a multi-language, cross-platform open source cryptographic library from Google that provides secure, easy-to-use APIs for encryptio… | 10 | 13538 | maintenance |
| matter-labs/zksync-era ZKsync Era is a ZK rollup layer 2 protocol for scaling Ethereum using zero-knowledge proofs, implemented primarily in Rust. It is EVM-compa… | 89 | 3235 | active |
| Devolutions/IronRDP IronRDP is a modular Rust implementation of the Microsoft Remote Desktop Protocol (RDP), providing PDU codecs, connection/session state mac… | 94 | 3219 | active |
| HiddenRamblings/TagMo TagMo is an Android application for managing NTAG215, Power Tag, N2 Elite, and Bluetooth NFC tags used with Nintendo amiibo figures on 3DS,… | 84 | 3218 | active |
| krille-chan/fluffychat FluffyChat is an open-source, nonprofit Matrix instant messaging client written in Flutter with a cute, easy-to-use Material You design. It… | 97 | 3212 | active |
| Taho Taho is a community-owned Web3 cryptocurrency wallet implemented as a browser extension, positioned as an open-source alternative to MetaMa… | 82 | 3205 | active |
| pglombardo/PasswordPusher Password Pusher is an open-source Ruby web application for securely sharing passwords, text, files, and URLs via encrypted, self-deleting l… | 93 | 3201 | active |
| jhaals/yopass Yopass is a self-hostable web application for securely sharing secrets, passwords, and files via one-time, auto-expiring links. Secrets are… | 100 | 3180 | active |
| IntersectMBO/cardano-node The core Cardano full-node executable that integrates the ledger, consensus (Ouroboros), and networking layers to participate in the Cardan… | 99 | 3174 | active |
| easychen/CookieCloud CookieCloud is a browser extension plus self-hosted server that syncs browser cookies and localStorage across devices with end-to-end encry… | 87 | 3171 | active |
| aliasvault/aliasvault AliasVault is a privacy-first, end-to-end encrypted password manager with a built-in email alias server, letting users create unique identi… | 86 | 3164 | active |
| nesaorg/nesa Nesa is a privacy-preserving AI inference platform that runs models like Llama, Mistral, and Stable Diffusion with end-to-end encryption us… | 22 | 3163 | active |
| pallets/itsdangerous ItsDangerous is a Python library for cryptographically signing data so it can be safely passed to untrusted environments (like cookies or U… | 31 | 3134 | stable |
| Barre/ZeroFS ZeroFS is a log-structured filesystem written in Rust that turns S3-compatible object storage (Amazon S3, GCS, Azure Blob, or any S3-compat… | 80 | 3125 | active |
| OpenSC/OpenSC OpenSC is a set of open-source libraries and command-line tools for working with smart cards, focused on cards that perform cryptographic o… | 76 | 3097 | active |
| Teldrive Teldrive is a self-hosted Go service that turns a Telegram account into a personal cloud drive, organizing files stored on Telegram behind … | 84 | 3090 | active |
| jasypt-spring-boot A Spring Boot integration of the Jasypt library that enables transparent encryption and decryption of property sources in Spring Boot appli… | 62 | 3086 | active |
| liboqs liboqs is an open source C library providing implementations of quantum-resistant (post-quantum) key encapsulation mechanisms and digital s… | 85 | 3071 | active |
| Stacks The reference Rust implementation of the Stacks blockchain, a layer-2 network secured by Bitcoin via Proof of Transfer (PoX) mining. It run… | 94 | 3061 | active |
| evgenyneu/keychain-swift A Swift library providing simple helper functions for securely storing and retrieving text, boolean, and Data values in the Apple Keychain.… | 32 | 3013 | stable |
| filecoin-project/lotus Lotus is the reference implementation of the Filecoin decentralized storage network, written in Go. It ships as a suite of command-line app… | 99 | 2991 | active |
| wolfSSL/wolfssl wolfSSL is a lightweight, portable SSL/TLS library written in ANSI C, supporting TLS 1.3 and DTLS 1.3, powered by the wolfCrypt cryptograph… | 94 | 2961 | stable |
| pquerna/otp A Go library implementing Time-based (TOTP, RFC 6238) and HMAC-based (HOTP, RFC 4228) one-time password algorithms for adding two-factor au… | 35 | 2960 | stable |
| elseif/MikroTikPatch A Python-based tool that patches MikroTik RouterOS public keys and generates licenses, enabling shell access, container mode, and highest-l… | 87 | 2955 | active |
| Padloc Padloc is an open-source, end-to-end encrypted password manager for individuals and teams, built as a monorepo with a Node.js backend serve… | 25 | 2923 | active |
| FiloSottile/yubikey-agent yubikey-agent is a seamless ssh-agent that stores SSH keys on YubiKey hardware via the PIV smartcard interface. It runs in the background, … | 32 | 2913 | stable |
| Forceu/Gokapi Gokapi is a lightweight, self-hosted file-sharing server written in Go, serving as a Firefox Send alternative where only registered users c… | 85 | 2903 | active |
| Lolliedieb/lolMiner-releases lolMiner is a closed-source GPU cryptocurrency miner for AMD, Nvidia, and Intel graphics cards supporting many proof-of-work algorithms suc… | 50 | 2890 | active |
| Minisign Minisign is a dead simple command-line tool for signing files and verifying digital signatures using the Ed25519 public-key signature syste… | 67 | 2858 | stable |
| Polkadot SDK Polkadot SDK is the consolidated Rust monorepo merging Substrate, Polkadot, and Cumulus, providing a framework for building blockchains and… | 92 | 2815 | active |
| authpass/authpass AuthPass is a free, open-source password manager built with Flutter that is compatible with KeePass 2.x (KDBX 3 and KDBX 4) databases. It r… | 66 | 2802 | active |
| dmotz/trystero Trystero is a JavaScript/TypeScript library that adds serverless WebRTC peer discovery and communication to web apps, using BitTorrent, Nos… | 98 | 2781 | active |
| awnumar/memguard MemGuard is a pure Go library that securely stores sensitive information in memory, encrypting it with XSalsa20Poly1305 and bypassing the g… | 67 | 2760 | active |
| EthereumJS A modular TypeScript monorepo of Ethereum execution-layer libraries including an EVM interpreter, transaction and block handling, Merkle Pa… | 92 | 2759 | active |
| f0rb1dd3n/Reptile Reptile is a Linux kernel module (LKM) rootkit written in C that provides privilege escalation, file/process/network connection hiding, per… | 63 | 2742 | active |
| mas-bandwidth/yojimbo yojimbo is a C++ network library for client/server multiplayer games, designed around the needs of competitive games like first-person shoo… | 96 | 2739 | stable |
| I2P I2P (Invisible Internet Project) is the reference Java implementation of a decentralized, anonymizing peer-to-peer overlay network that rou… | 91 | 2730 | stable |
| secretflow/secretflow SecretFlow is a unified Python framework for privacy-preserving data analysis and machine learning. It layers cryptographic devices (MPC, H… | 62 | 2713 | active |
| Bouncy Castle Bouncy Castle is a comprehensive open-source cryptographic library for Java (and C#/.NET) implementing a wide range of algorithms, a JCA/JC… | 76 | 2697 | stable |
| rust-bitcoin/rust-bitcoin A Rust library for parsing, serializing, and working with Bitcoin data structures such as transactions, blocks, scripts, network messages, … | 77 | 2683 | active |
| morethanwords/tweb Telegram Web K is the open-source TypeScript web client powering web.telegram.org/k/, based on the original Webogram and actively patched a… | 75 | 2652 | active |
| CrossPaste/crosspaste-desktop CrossPaste is a cross-platform desktop application that syncs clipboard content across devices in real time over the local network. It supp… | 94 | 2635 | active |
| JingMatrix/TEESimulator TEESimulator is an Android module that defeats hardware-backed key attestation by running AOSP's reference KeyMint trusted application insi… | 81 | 2627 | active |
| Wasabi Wallet Wasabi Wallet is an open-source, non-custodial, privacy-focused Bitcoin desktop wallet built in C# on .NET. It routes all traffic through T… | 94 | 2621 | active |
| shaka-project/shaka-packager Shaka Packager is a media packaging tool and SDK for preparing video content for online streaming via DASH and HLS. It supports VOD and liv… | 91 | 2610 | active |
| mas-bandwidth/netcode A C library implementing a secure, connection-oriented client/server protocol on top of UDP for real-time multiplayer games. It handles enc… | 96 | 2596 | active |
| enfein/mieru Mieru is a censorship-resistant socks5/HTTP/HTTPS proxy written in Go, consisting of a client (mieru) and server (mita). It uses XChaCha20-… | 99 | 2587 | active |
| amadvance/snapraid SnapRAID is a backup program for disk arrays that stores parity information to recover from up to six simultaneous disk failures. It target… | 98 | 2587 | active |
| nelenkov/android-backup-extractor A Java command-line utility that extracts and repacks Android backup archives created with adb backup, based on AOSP's BackupManagerService… | 82 | 2585 | active |
| refraction-networking/utls uTLS is a fork of Go's crypto/tls library that provides low-level access to the TLS ClientHello message, enabling fingerprint mimicry and r… | 79 | 2582 | active |
| NVISOsecurity/AlwaysTrustUserCerts A Magisk/KernelSU module that automatically copies user-installed certificates into the Android system root CA store. It enables TLS traffi… | 43 | 2565 | active |
| SPIFFE SPIFFE is a framework and set of standards for issuing cryptographic identities to workloads, and SPIRE (the SPIFFE Runtime Environment) is… | 96 | 2559 | stable |
| markqvist/NomadNet Nomad Network is a Python terminal application for encrypted, off-grid mesh communication built on the Reticulum and LXMF protocols. It pro… | 81 | 2538 | active |
| Peergos Peergos is a peer-to-peer, end-to-end encrypted global filesystem with fine-grained cryptographic access control, built on IPFS/libp2p with… | 76 | 2530 | active |
| jedisct1/piknik Piknik is a command-line tool that securely copies and pastes clipboard content between arbitrary hosts over the network, using end-to-end … | 54 | 2524 | stable |
| ryantm/agenix Agenix is a Nix library and CLI tool for managing age-encrypted secrets in NixOS and Home Manager using existing SSH public/private key pai… | 99 | 2516 | active |
| Namada Namada is a Rust implementation of a Proof-of-Stake layer-1 blockchain focused on multichain asset-agnostic privacy, built on CometBFT cons… | 96 | 2516 | active |
| borgbase/vorta Vorta is an open-source desktop GUI client for BorgBackup that brings encrypted, deduplicated, compressed backups to macOS and Linux deskto… | 97 | 2509 | active |
| alexanderepstein/Bash-Snippets A collection of small, dependency-free bash scripts for heavy terminal users, covering utilities like cheatsheet lookup, file encryption, G… | 23 | 9952 | maintenance |
| dino/dino Dino is a modern open-source XMPP (Jabber) chat client for Linux desktops, built with GTK4 and Vala. It supports end-to-end encryption via … | 70 | 2498 | active |
| Nheko-Reborn/nheko Nheko is a native desktop client for the Matrix protocol built with Qt and C++20, aiming to feel like a mainstream chat app rather than an … | 65 | 2496 | active |
| SheepChef/Abracadabra Abracadabra is an open-source text encryption tool that transforms encrypted data into realistic Classical Chinese (wenyan) prose, using AE… | 83 | 2495 | active |
| bitcoin-core/secp256k1 libsecp256k1 is a high-performance, high-assurance C library for elliptic curve cryptography on the secp256k1 curve, including ECDSA and Sc… | 84 | 2488 | stable |
| HACKERALERT/Picocrypt Picocrypt is a very small, simple, and secure file encryption tool written in Go, using modern cryptography like XChaCha20, Argon2, and SHA… | 10 | 2482 | active |
| unode/firefox_decrypt Firefox Decrypt is a Python command-line tool that extracts saved passwords from Mozilla product profiles (Firefox, Waterfox, Thunderbird, … | 76 | 2481 | active |
| OneKey OneKey is an open-source, multi-chain cryptocurrency wallet application supporting Bitcoin, Ethereum, Solana, Tron, and many other networks… | 99 | 2468 | active |
| DNSCrypt/SimpleDnsCrypt Simple DNSCrypt is a Windows GUI management tool for configuring dnscrypt-proxy. It simplifies setting up encrypted DNS on Windows systems. | 52 | 2467 | active |
| inference-labs-inc/subnet-2 Subnet 2 on the Bittensor network implements a Proof-of-Inference system that uses zero-knowledge machine learning (zk-ML) to cryptographic… | 86 | 2462 | active |
| square/certstrap certstrap is a Go-based CLI tool for bootstrapping your own certificate authorities and managing a simple public key infrastructure. It ini… | 48 | 2455 | active |
| lestrrat-go/jwx A comprehensive Go library implementing the full JOSE family of standards (JWA, JWE, JWK, JWS, JWT) for signing, verifying, encrypting, and… | 98 | 2440 | active |
| cloudflare/gokey gokey is a vaultless password manager written in Go that deterministically derives passwords and cryptographic keys on the fly from a maste… | 73 | 2436 | stable |
| mkj/dropbear Dropbear is a small SSH server and client written in C, designed for low memory and disk footprints. It is widely used on embedded Linux sy… | 88 | 2407 | stable |
| keepassxreboot/keepassxc-browser KeePassXC-Browser is a WebExtension that integrates the KeePassXC password manager with Firefox, Chrome/Chromium, and Edge via native messa… | 99 | 2358 | active |
| UMSKT/UMSKT UMSKT (Universal MS Key Toolkit) is an open-source C++ CLI toolkit for researching and experimenting with Microsoft's pre-Vista (pre-2012) … | 75 | 2357 | active |
| Keybase Keybase is an open-source end-to-end encrypted messaging, file-sharing, and identity-verification platform with clients for macOS, Windows,… | 89 | 9258 | maintenance |
| jeremyckahn/chitchatter Chitchatter is a free, open-source communication tool offering secure peer-to-peer chat, video, audio, and file sharing directly between br… | 77 | 2342 | active |
| crev-dev/cargo-crev cargo-crev is a cryptographically verifiable, distributed code review system for the Rust cargo package manager. It lets developers review … | 79 | 2340 | active |
| DevToys-app/DevToysMac DevToysMac is a native macOS desktop app offering a collection of offline developer utilities such as JSON/YAML conversion, JSON formatting… | 10 | 9180 | maintenance |
| Laverna/laverna Laverna is a JavaScript note-taking web application with a Markdown editor and client-side encryption, positioned as an open-source alterna… | 23 | 9168 | maintenance |
| xrpcommunity/XRP-community-wallet A non-custodial, open-source web wallet for XRP Ledger and EVM networks, built by the community. Keys and seed phrases are encrypted and st… | 69 | 2305 | active |
| matrix-org/matrix-rust-sdk A collection of Rust crates implementing the Matrix Client-Server SDK, handling low-level details like encryption, syncing, and room state.… | 96 | 2303 | active |
| yeojz/otplib otplib is a TypeScript-first library for generating and verifying one-time passwords (HOTP and TOTP) for two-factor authentication, compati… | 96 | 2292 | active |
| sh-dv/hat.sh Hat.sh is a browser-based web application for secure local file encryption and decryption using XChaCha20-Poly1305 with chunked streaming v… | 23 | 2286 | active |
| google/boringssl BoringSSL is Google's fork of OpenSSL, serving as the TLS/SSL library in Chrome, Chromium, and Android. It is open source but explicitly no… | 98 | 2282 | active |