function: cryptography
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| upspin/upspin Upspin is an experimental framework of protocols and reference implementations providing a secure, global naming system for sharing files a… | 46 | 6399 | maintenance |
| apple/swift-crypto Swift Crypto is an open-source Swift library implementing a substantial portion of Apple CryptoKit's API for use on Linux, Windows, and oth… | 97 | 1718 | active |
| cloudflare/circl CIRCL is Cloudflare's Go library of cryptographic primitives covering post-quantum algorithms (ML-KEM/Kyber, ML-DSA/Dilithium, SIKE/CSIDH),… | 94 | 1710 | active |
| elasticdog/transcrypt A single Bash script that configures transparent encryption of sensitive files in a Git repository using Git's clean/smudge filters and Ope… | 80 | 1708 | stable |
| iden3/circom Circom is a domain-specific language and compiler for defining arithmetic circuits used to generate zero-knowledge proofs (zk-SNARKs). Writ… | 71 | 1688 | active |
| keepassium/KeePassium KeePassium is a KeePass-compatible password manager app for iOS and macOS, written in Swift. It supports all KeePass database formats (kdb,… | 67 | 1674 | active |
| coral-xyz/backpack Backpack is an open-source crypto wallet browser extension built in TypeScript, serving as a home for xNFTs and supporting Solana, Ethereum… | 23 | 1656 | active |
| node-opcua/node-opcua node-opcua is a full OPC UA (IEC 62541) protocol stack for Node.js and the browser, written in TypeScript. It provides client, server, disc… | 99 | 1654 | stable |
| klezVirus/SysWhispers3 SysWhispers3 is a Python command-line tool that generates header and assembly (ASM) file pairs for direct system calls to the Windows kerne… | 32 | 1653 | active |
| whwlsfb/BurpCrypto BurpCrypto is a Burp Suite extension that encrypts Intruder payloads with algorithms like AES, RSA, and DES, or by executing arbitrary Java… | 23 | 1648 | active |
| zama-ai/tfhe-rs TFHE-rs is a pure Rust implementation of the TFHE fully homomorphic encryption scheme, enabling boolean and integer arithmetic over encrypt… | 97 | 1646 | active |
| mssun/passforios Pass for iOS is an iOS password manager client compatible with ZX2C4's Pass command line application. It encrypts password entries with GPG… | 78 | 1645 | active |
| tevador/RandomX RandomX is a proof-of-work algorithm optimized for general-purpose CPUs that uses random code execution and memory-hard techniques to resis… | 92 | 1643 | stable |
| rust-openssl/rust-openssl Rust bindings to the OpenSSL cryptography and TLS library, exposing its APIs (certificates, keys, hashing, SSL/TLS connections) to Rust pro… | 95 | 1641 | stable |
| CluvexStudio/Aether Aether is a Rust-based censorship circumvention client for heavily restricted networks that discovers reachable gateways, builds encrypted … | 79 | 1630 | active |
| LANDrop/LANDrop LANDrop is a cross-platform application for transferring files between devices on the same local network, similar to AirDrop. It uses Qt an… | 23 | 5956 | maintenance |
| cathugger/mkp224o mkp224o is a C command-line tool that generates vanity ed25519 onion service (Tor hidden service v3) addresses by brute-forcing keypairs ma… | 23 | 1616 | active |
| ProtonMail/ios-mail Proton Mail's official iOS client for end-to-end encrypted email, written in Swift/SwiftUI with core business logic in a Rust-based SDK. Th… | 66 | 1613 | active |
| iotexproject/iotex-core The official Go implementation of the IoTeX blockchain protocol, a modular DePIN-focused Layer-1 EVM-compatible network. It provides the fu… | 97 | 1611 | active |
| ankane/lockbox Lockbox is a Ruby gem providing modern encryption for database fields, files, and strings in Ruby and Rails applications. It integrates wit… | 66 | 1609 | stable |
| tendermint/tendermint Tendermint Core is a Byzantine Fault Tolerant (BFT) consensus engine and blockchain application platform written in Go. It securely replica… | 67 | 5867 | maintenance |
| UniClipboard/UniClipboard UniClipboard is a privacy-first, cross-device clipboard synchronization application built with Rust and Tauri that syncs text, images, file… | 85 | 1588 | active |
| linuxboot/heads Heads is an open-source firmware and OS configuration that runs a minimal Linux as a coreboot or LinuxBoot ROM payload, moving the root of … | 67 | 1585 | active |
| DimensionDev/Maskbook Mask Network is a browser extension that bridges Web2 social media platforms (X, Facebook, Instagram, Minds, Mirror) with Web3 services. It… | 96 | 1584 | active |
| dyne/tomb Tomb is a minimalist command-line tool for GNU/Linux that creates and manages encrypted storage folders ('tombs') using dm-crypt and LUKS v… | 58 | 1581 | stable |
| gurnec/btcrecover btcrecover is an open-source Python command-line tool for recovering Bitcoin (and altcoin) wallet passwords and seed phrases when most of t… | 32 | 1580 | active |
| zama-ai/concrete Concrete is an open-source fully homomorphic encryption (FHE) compiler built on TFHE and LLVM that converts Python programs into their FHE … | 56 | 1574 | active |
| libssh2/libssh2 libssh2 is a client-side C library implementing the SSH2 protocol, licensed under the revised BSD license. It provides session establishmen… | 67 | 1572 | stable |
| drduh/pwd.sh pwd.sh is a single Bash script that manages text secrets such as passwords using GnuPG symmetric encryption. Secrets are stored in randomly… | 88 | 1564 | active |
| vergecurrency/verge Verge Core is the official full-node source code for the Verge (XVG) cryptocurrency, providing a wallet client, mining support, and blockch… | 90 | 1561 | active |
| denislupookov/altersend AlterSend is an open-source cross-platform app for sending files directly between devices over the internet via P2P connections, with end-t… | 80 | 1547 | active |
| unlir/XDrive XDrive is open-source firmware (with hardware schematics and enclosure designs) for a stepper motor driver featuring a multi-function inter… | 32 | 1543 | active |
| wechatpay-apiv3/wechatpay-java The official Java SDK for WeChat Pay APIv3, consisting of a core library with automatic request signing, response verification, callback ha… | 37 | 1541 | active |
| profanity-im/profanity Profanity is a console-based XMPP chat client written in C using ncurses and libstrophe, inspired by Irssi. It supports MUC chat rooms, OTR… | 91 | 1536 | active |
| janmojzis/tinyssh TinySSH (tinysshd) is a minimalistic SSHv2 server written in C with under 100,000 words of code, implementing only a secure subset of the p… | 89 | 1524 | active |
| Tongsuo-Project/Tongsuo Tongsuo (铜锁) is an open-source cryptographic library providing modern cryptographic primitives and secure communication protocols, includin… | 84 | 1521 | active |
| svpcom/wfb-ng WFB-NG is a long-range packet radio link that transmits video, MAVLink telemetry, and IP traffic over raw (unconnected) WiFi frames, bypass… | 85 | 1516 | active |
| sartoopjj/thefeed TheFeed is a DNS-based feed reader and lightweight messenger that works on networks where only DNS queries pass through, letting users read… | 76 | 1512 | active |
| cupcakearmy/cryptgeon Cryptgeon is a secure, open-source note and file sharing service inspired by PrivNote, built with Rust and Svelte. Notes are encrypted clie… | 92 | 1508 | active |
| jaraco/keyring A Python library providing a simple API to access the operating system's native keyring service for safe password storage and retrieval. It… | 70 | 1508 | stable |
| 0xsp-SRD/mortar Mortar Loader is a red team evasion tool that encrypts PE binaries and shellcode and executes them in memory using various injection techni… | 23 | 1508 | active |
| DarthTon/Blackbone Blackbone is a C++ library for Windows memory hacking, providing APIs for process memory manipulation, DLL injection, manual PE image mappi… | 32 | 5479 | maintenance |
| traceless/alist-encrypt A Node.js proxy service for Alist that adds transparent WebDAV encryption and decryption of files. It supports streaming encrypted video pl… | 74 | 1504 | active |
| pyca/bcrypt pyca/bcrypt is a Python library providing bcrypt password hashing and a bcrypt_pbkdf key derivation function. It offers salted hashing with… | 77 | 1499 | active |
| cryptii/cryptii Cryptii is a web app and framework for modular conversion, encoding, and encryption, performed entirely in the browser with no server inter… | 34 | 1498 | active |
| twofas/2fas-android The official open-source Android app for 2FAS, a two-factor authentication service that generates one-time passwords (TOTP and HOTP) for se… | 86 | 1497 | active |
| T4y1oR/RingQ RingQ is a post-exploitation antivirus evasion tool that obfuscates and loads arbitrary Windows executables or shellcode (e.g., Cobalt Stri… | 27 | 1497 | active |
| project-oak/oak Oak is a Rust-based platform for building distributed systems whose components can produce externally verifiable claims about their behavio… | 77 | 1496 | active |
| robinkarlberg/transfer.zip-web Transfer.zip is an open-source, self-hostable file-sharing service and website, an alternative to WeTransfer, with stored transfers (S3 or … | 72 | 1496 | active |
| Meckazin/ChromeKatz ChromeKatz is a set of offensive security tools (CookieKatz, ElevationKatz) written in C that dump cookies and decryption keys directly fro… | 72 | 1495 | active |
| cossacklabs/acra Acra is a database security suite that provides field-level encryption, searchable encryption, tokenization, data masking, SQL firewalling,… | 58 | 1491 | active |
| libressl/portable LibreSSL Portable is the portable build of LibreSSL, a TLS and cryptography stack forked from OpenSSL 1.0.1g by the OpenBSD project. It pro… | 94 | 1489 | stable |
| Spomky-Labs/otphp A PHP library for generating one-time passwords according to RFC 4226 (HOTP) and RFC 6238 (TOTP). It is compatible with Google Authenticato… | 93 | 1488 | stable |
| hellman/xortool xortool is a Python command-line tool for cryptanalysis of multi-byte XOR ciphers. It guesses the key length based on character frequency s… | 42 | 1488 | active |
| pass-extension/pass-otp pass-otp is an extension for the pass password manager that stores and manages one-time-password (OTP) tokens as otpauth:// URIs. It genera… | 39 | 1485 | active |
| zlib-ng/minizip-ng minizip-ng is a zip manipulation library written in C, forked from the minizip code contributed to zlib. It adds features like WinZip AES e… | 92 | 1483 | active |
| SChernykh/p2pool P2Pool is a decentralized, peer-to-peer mining pool for Monero written in C++. It combines the regular payouts of centralized pools with th… | 98 | 1482 | active |
| securitybunker/databunker Databunker is a self-hosted, Go-based secure vault for tokenizing and storing personal records such as PII, PHI, KYC, and PCI data. It expo… | 75 | 1482 | active |
| Shopify/ejson EJSON is a Go CLI utility for managing encrypted secrets in JSON files using asymmetric elliptic-curve (NaCl Box) encryption. It lets teams… | 86 | 1480 | stable |
| vslavik/winsparkle WinSparkle is an app update framework for Windows desktop applications, inspired by Sparkle for macOS. It ships as a single dependency-free… | 88 | 1475 | stable |
| puleos/object-hash A JavaScript library that generates hashes from arbitrary JavaScript objects, working in both Node.js and the browser. It supports hashing … | 32 | 1474 | stable |
| digitalbazaar/forge Forge is a pure-JavaScript implementation of the TLS protocol plus a broad set of cryptographic utilities including AES, RSA, X.509 certifi… | 66 | 5330 | maintenance |
| hectorm/otpauth A JavaScript One-Time Password library implementing HOTP (RFC 4226) and TOTP (RFC 6238) for generating and validating 2FA tokens. It runs i… | 86 | 1471 | stable |
| napi-rs/node-rs A collection of Node.js native addons written in Rust using napi-rs, providing packages like @node-rs/bcrypt, @node-rs/argon2, @node-rs/crc… | 98 | 1469 | active |
| meganz/sdk The official MEGA C++ SDK providing client access to MEGA's end-to-end encrypted cloud storage, including a low-level API, an intermediate … | 95 | 1469 | active |
| strongbox-password-safe/Strongbox Strongbox is a native password manager client for iOS and macOS that opens KeePass (KDB/KDBX) and Password Safe (v3) vault files. It encryp… | 74 | 1453 | active |
| hudikhq/hoodik Hoodik is a self-hosted, end-to-end encrypted cloud storage server written in Rust with a Vue 3 frontend, where all encryption happens in t… | 98 | 1450 | active |
| intel/confidential-computing.sgx Intel Software Guard Extensions (SGX) software stack for Linux, comprising the SGX driver, SDK, and Platform Software (PSW). It enables dev… | 93 | 1449 | active |
| GhostPack/SharpDPAPI SharpDPAPI is a C# port of Mimikatz's Windows DPAPI functionality, allowing triage of DPAPI masterkeys, credentials, vaults, certificates, … | 32 | 1449 | active |
| passwordless-lib/fido2-net-lib A battle-tested .NET library implementing a FIDO2 server / WebAuthn relying party for passkey registration (attestation) and authentication… | 71 | 1448 | active |
| polhenarejos/pico-fido Open-source firmware that turns a Raspberry Pi Pico (RP2040/RP2350) or ESP32-S3 microcontroller into a FIDO2 passkey authenticator, support… | 95 | 1446 | active |
| harmony-one/harmony The core protocol implementation of the Harmony blockchain, a sharded proof-of-stake network written in Go. It implements consensus (PBFT-b… | 90 | 1445 | active |
| zama-ai/concrete-ml Concrete ML is a privacy-preserving machine learning library built on top of Zama's Concrete FHE compiler. It lets data scientists convert … | 69 | 1445 | active |
| superpoweredSDK/Low-Latency-Android-iOS-Linux-Windows-tvOS-macOS-Interactive-Audio-Platform Superpowered is a commercial cross-platform C++ SDK suite providing low-latency interactive audio processing, HTTP/HTTPS networking, and cr… | 76 | 1443 | active |
| EgeBalci/amber Amber is a reflective PE packer that converts Windows PE files (EXE, DLL, SYS) into position-independent shellcode payloads for in-memory e… | 23 | 1442 | active |
| tuneinsight/lattigo Lattigo is a pure Go library implementing lattice-based (RLWE) homomorphic encryption schemes such as BFV/BGV and CKKS, along with their mu… | 72 | 1440 | active |
| richardkiss/pycoin A Python library providing utilities for Bitcoin and Bitcoin-like altcoins, including key creation/parsing, BIP32 hierarchical deterministi… | 72 | 1439 | active |
| atsign-foundation/at_client_sdk The Dart implementation of the atSDK for building applications on the Atsign Platform, a protocol for personal data ownership and controlle… | 67 | 1437 | active |
| potatameister/PaperKnife PaperKnife is a privacy-first PDF utility that merges, splits, compresses, encrypts, signs, and sanitizes PDFs entirely on-device with no s… | 67 | 1435 | active |
| tahoe-lafs/tahoe-lafs Tahoe-LAFS is a free and open-source decentralized storage system that distributes encrypted, erasure-coded file shares across multiple unt… | 62 | 1435 | active |
| algorand/go-algorand The official Go implementation of the Algorand blockchain protocol, including the algod node software and goal CLI tool. It lets users run … | 98 | 1432 | active |
| eljojo/rememory ReMemory is a tool that encrypts your files with age and splits the key using Shamir's Secret Sharing among trusted people, who each receiv… | 74 | 1432 | active |
| boku7/BokuLoader BokuLoader is a proof-of-concept User-Defined Reflective Loader (UDRL) for Cobalt Strike written in C and assembly. It recreates, integrate… | 32 | 1431 | active |
| rubyzip/rubyzip Rubyzip is a Ruby library (gem) for reading and writing zip archives, including support for AES encryption. It provides both high-level Zip… | 98 | 1427 | stable |
| Kodiqa-Solutions/VaultS3 VaultS3 is a lightweight, S3-compatible object storage server written in Go, shipped as a single binary with a built-in web dashboard, encr… | 78 | 1426 | active |
| enarx/enarx Enarx is an open-source command-line tool and runtime for running applications inside hardware Trusted Execution Environments (TEEs) such a… | 52 | 1425 | active |
| f0ng/autoDecoder A Burp Suite extension (written in Java) that lets users plug in custom encryption/decryption logic so intercepted HTTP traffic can be view… | 78 | 1424 | active |
| Isaacdelly/Plutus Plutus is a Python CLI tool that brute-forces Bitcoin private keys by generating sequential keys via elliptic curve point addition and chec… | 59 | 1423 | active |
| Aiven-Open/pghoard PGHoard is a PostgreSQL backup daemon and restore tooling that continuously stores basebackups and WAL transaction logs in cloud object sto… | 93 | 1421 | active |
| jesseduffield/horcrux A Go CLI tool that splits a file into encrypted fragments using Shamir's Secret Sharing, requiring only a threshold of fragments to reconst… | 23 | 5097 | maintenance |
| cr-marcstevens/sha1collisiondetection A C library and command-line tool that computes SHA-1 hashes while detecting known cryptanalytic collision attacks against SHA-1 with proba… | 45 | 1414 | stable |
| primihub/primihub PrimiHub is an open-source privacy-preserving computing platform built by a team of cryptography experts, supporting secure multi-party com… | 44 | 1408 | active |
| Kianmhz/GooseRelayVPN A Go-based SOCKS5 VPN client that tunnels raw TCP traffic through Google Apps Script web apps to a user-controlled VPS exit server. Traffic… | 69 | 1406 | active |
| rosenpass/rosenpass Rosenpass is a post-quantum-secure key exchange tool written in Rust that establishes symmetric keys and feeds them to WireGuard via its pr… | 85 | 1401 | active |
| ZeusLN/zeus ZEUS is a self-custodial mobile Bitcoin and Lightning Network wallet built with React Native and TypeScript. It doubles as a remote node ma… | 99 | 1399 | active |
| cisco/libsrtp libSRTP is Cisco's open-source C library implementing the Secure Real-time Transport Protocol (SRTP, RFC 3711) along with a supporting cryp… | 78 | 1397 | stable |
| PeculiarVentures/PKI.js PKI.js is a pure TypeScript library implementing the common formats and protocols used in PKI applications, including X.509 certificates, P… | 90 | 1396 | stable |
| libbitcoin/libbitcoin-system Libbitcoin System is a cross-platform C++ toolkit library for building Bitcoin applications, serving as the base library of the broader lib… | 67 | 1394 | active |
| noir-lang/noir Noir is a Rust-inspired domain-specific language for writing privacy-preserving programs that compile to zero-knowledge (SNARK) proofs via … | 98 | 1393 | active |
| bepaald/signalbackup-tools A C++ command-line tool for working with backup files generated by the Signal Android app. It can decrypt, inspect, export, merge, crop, an… | 88 | 1393 | active |