Open-source cryptography software
1245 open-source libraries, tools and applications tagged cryptography, ranked by how closely cryptography is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| open-obfuscator/o-mvll O-MVLL is an LLVM-based code obfuscator for native code that integrates with Clang and the Swift compiler via the LLVM pass manager, with o… | 93 | 1142 | active |
| MEGA Web Client The official MEGA (mega.nz) web client, a browser-based front end for MEGA's zero-knowledge encrypted cloud storage service. It implements … | 75 | 1139 | active |
| Endermanch/XPKeygen A C++ tool that generates valid Windows XP and Windows Server 2003 VLK product keys from a raw product key, based on reverse-engineered ell… | 59 | 1135 | active |
| HZJQF/help_tool A PyQt5-based Windows GUI tool that uses inference models to identify the encryption or hashing algorithm behind a given ciphertext and att… | 14 | 1134 | active |
| Xilinx/Vitis_Libraries A collection of open-source, performance-optimized accelerated libraries for the AMD Vitis Unified Software Platform, offering out-of-the-b… | 90 | 1130 | active |
| zkcrypto/bellman bellman is a Rust crate for building zk-SNARK circuits, providing circuit traits, primitive structures, and gadgets like booleans and numbe… | 75 | 1130 | stable |
| sigstore/gitsign Gitsign is a CLI tool that signs Git commits and tags using Sigstore's keyless signing, backed by your GitHub or other OIDC identity instea… | 89 | 1126 | active |
| nexus-xyz/nexus-cli Nexus CLI is a Rust-based command-line tool for registering nodes and contributing zero-knowledge proofs to the Nexus verifiable computatio… | 74 | 1126 | active |
| defuse/php-encryption A PHP library for symmetric encryption of strings and files using a key or password, built on OpenSSL. Its API is deliberately designed to … | 23 | 3878 | maintenance |
| Sign-In with Ethereum (SIWE) A TypeScript library implementing Sign-In with Ethereum (EIP-4361), a standard message format for Ethereum accounts to authenticate with of… | 30 | 1122 | active |
| RavenProject/Ravencoin Raven Core is the full-node reference implementation of Ravencoin, a Bitcoin-forked peer-to-peer blockchain optimized for issuing and trans… | 88 | 1121 | active |
| DroneBridge DroneBridge for ESP32 is open-source firmware for ESP32 modules that provides a secure, transparent, bidirectional telemetry link between a… | 91 | 1120 | active |
| commetchat/commet Commet is a feature-rich, privacy-respecting Matrix chat client built with Dart/Flutter, supporting end-to-end encryption, threads, spaces,… | 93 | 1119 | active |
| taoensso/nippy Nippy is a fast, mature serialization library for Clojure, serving as a high-performance drop-in alternative to the Clojure reader for free… | 90 | 1112 | stable |
| wstrange/GoogleAuth GoogleAuth is a Java server-side library implementing the Time-based One-Time Password (TOTP) algorithm from RFC 6238, compatible with Goog… | 63 | 1107 | stable |
| shim shim is a small first-stage UEFI bootloader written in C that loads and validates a second-stage bootloader, enabling Secure Boot on Linux … | 69 | 1106 | active |
| dromara/dongle Dongle is a simple, semantic, and developer-friendly cryptography library for Go, offering a fluent API for encryption, hashing, and encodi… | 83 | 1104 | active |
| intel/isa-l Intel's Intelligent Storage Acceleration Library (ISA-L) is a C library of SIMD-optimized low-level functions for storage applications, inc… | 82 | 1104 | stable |
| 13xforever/ps3-disc-dumper A cross-platform desktop utility that creates decrypted dumps of PS3 game discs using a compatible Blu-ray drive and a matching disc key. B… | 83 | 1101 | active |
| softhsm/SoftHSMv2 SoftHSMv2 is a software implementation of a cryptographic store accessible through the PKCS#11 interface, originally developed as part of t… | 71 | 1100 | active |
| HEIR Google's repository of demos for fully homomorphic encryption (FHE), originally a C++ transpiler and now showcasing the HEIR MLIR-based FHE… | 84 | 3784 | maintenance |
| mcginty/snow Snow is a pure-Rust implementation of the Noise Protocol Framework for building encrypted, authenticated channel handshakes. It supports No… | 60 | 1095 | stable |
| Trillian Trillian is a transparent, cryptographically verifiable append-only data store built on Merkle trees, backed by scalable storage like MySQL… | 89 | 3759 | maintenance |
| QQBackup/qq-win-db-key A collection of Python and Frida scripts for extracting database encryption keys from QQ (Tencent's messenger) across Windows, Linux, macOS… | 68 | 1090 | active |
| secureblue/secureblue secureblue is a security-focused desktop and server Linux operating system built as OCI bootable container images on top of Fedora Atomic D… | 93 | 1088 | active |
| semaphore-protocol/semaphore Semaphore is a zero-knowledge protocol and toolkit for proving group membership anonymously, letting users cast signals like votes or endor… | 92 | 1088 | active |
| mtrojnar/osslsigncode osslsigncode is a small C tool that implements Microsoft Authenticode signing and timestamping, based on OpenSSL and cURL. It signs, verifi… | 87 | 1087 | active |
| 7thSamurai/steganography A C++ command-line tool that encrypts files with password-protected AES-256-CBC and hides them inside images using Least-Significant-Bit pi… | 32 | 1087 | stable |
| æternity blockchain The reference node implementation of the æternity blockchain, a scalable public blockchain platform written in Erlang. It supports smart co… | 91 | 1086 | active |
| rpgp/rpgp rPGP is a pure Rust implementation of OpenPGP (RFC9580, RFC4880, RFC6637) with a flexible low-level API, published as the `pgp` crate. It s… | 88 | 1078 | active |
| Bitcoin Dev Kit (BDK) A suite of Rust libraries for building modern, lightweight, descriptor-based Bitcoin wallets, built on rust-bitcoin and rust-miniscript. It… | 95 | 1075 | active |
| xiaogang000/XG_NTAI A Java-based GUI tool for generating obfuscated webshell payloads (ASP, PHP, JSP, JSPX) that evade WAF and antivirus detection, compatible … | 34 | 1074 | active |
| margelo/react-native-quick-crypto A fast C/C++ JSI-based implementation of Node's crypto module for React Native, built on Nitro Modules. It serves as a drop-in replacement … | 98 | 1072 | active |
| duo-labs/py_webauthn A Python 3 library implementing the server-side of the WebAuthn API for verifying FIDO2 credential registration and authentication. It supp… | 94 | 1069 | active |
| mCodex/react-native-sensitive-info A React Native library for hardware-backed secure storage of sensitive data, using iOS Keychain and Android Keystore with AES-GCM encryptio… | 92 | 1066 | active |
| mwiede/jsch JSch (Java Secure Channel) is a pure Java implementation of the SSH2 protocol, maintained as an actively updated fork of the original JCraf… | 95 | 1061 | active |
| YeeZTech/YeeZ-Privacy-Computing Fidelius is a privacy computing middleware built on Intel SGX trusted execution environments, enabling secure data collaboration where orig… | 74 | 1059 | active |
| apple/security-pcc Apple's source code for Private Cloud Compute (PCC), the infrastructure that runs Apple Intelligence requests in a privacy-preserving cloud… | 56 | 1059 | active |
| nih-at/libzip libzip is a C library for reading, creating, and modifying zip archives, with support for Zip64, multiple compression codecs (deflate, bzip… | 91 | 1058 | stable |
| trezor/trezor-suite Trezor Suite is the official desktop, web, and mobile application for managing Trezor hardware wallets, enabling users to send, receive, bu… | 94 | 1055 | active |
| Bazuka Bazuka is the wallet and node software for the Ziesha Protocol, a layer-1 proof-of-stake cryptocurrency that uses zero-knowledge proofs (Ze… | 32 | 1054 | active |
| ac3ss0r/obfusheader.h Obfusheader.h is a portable, header-only C++14 library providing compile-time obfuscation via metaprogramming, including string and constan… | 72 | 1053 | active |
| D0n9X1n/hexo-blog-encrypt A Hexo plugin that encrypts blog posts with passwords so only readers with the correct password can view the content. It works with the Hex… | 94 | 1051 | active |
| in-toto/in-toto in-toto is a Python framework and reference implementation of the in-toto specification for protecting software supply chain integrity. It … | 76 | 1051 | stable |
| brichard19/BitCrack BitCrack is a C++ command-line tool for brute-forcing Bitcoin private keys using CUDA (NVIDIA) or OpenCL (AMD/Intel) GPU acceleration. It w… | 23 | 1048 | active |
| bnb-chain/tss-lib A Go library implementing multi-party threshold signature schemes (TSS) for ECDSA and EdDSA, based on the Gennaro-Goldfeder CCS 2018 protoc… | 77 | 1047 | active |
| nickvourd/Supernova Supernova is an open-source command-line tool written in Go for encrypting and obfuscating raw shellcode. It supports multiple ciphers incl… | 81 | 1042 | active |
| DSS (Digital Signature Service) DSS (Digital Signature Service) is an open-source Java library from the European Commission for creating, extending, and validating advance… | 89 | 1040 | stable |
| OpenMined/TenSEAL TenSEAL is a Python library (with a C++ core) for performing homomorphic encryption operations on tensors, built on top of Microsoft SEAL. … | 96 | 1039 | active |
| google/fscrypt fscrypt is a Go command-line tool for managing Linux native filesystem encryption (fscrypt API) on filesystems like ext4 and f2fs. It handl… | 83 | 1038 | active |
| square/certigo Certigo is a Go command-line utility for examining, dumping, and validating TLS/SSL certificates in formats like X.509 (DER/PEM), PKCS7, PK… | 89 | 1035 | stable |
| openmls/openmls OpenMLS is a Rust implementation of the Messaging Layer Security (MLS) protocol as specified in RFC 9420. It is a library providing safe, e… | 95 | 1032 | active |
| kyleavery/AceLdr AceLdr is a position-independent reflective loader (UDRL) for Cobalt Strike written in C, designed to evade memory scanners like Moneta, PE… | 23 | 1032 | active |
| ogxd/gxhash GxHash is a blazingly fast, robust non-cryptographic hashing algorithm implemented in Rust with zero dependencies. It uses hardware-acceler… | 56 | 1028 | active |
| krzyzanowskim/OpenSSL A multiplatform distribution of the OpenSSL C libraries packaged for Swift Package Manager, CocoaPods, and Carthage, targeting iOS, macOS (… | 94 | 1023 | active |
| jose (JOSE/JWT library) A zero-dependency .NET library implementing the full JOSE suite: JWT generation/decoding, JWE encryption, JWS signatures, and JWK key handl… | 65 | 1022 | active |
| polkadot-js/extension A browser extension for Chrome and Firefox that manages Polkadot and Substrate network accounts and signs transactions (extrinsics) with th… | 94 | 1020 | active |
| keybase/saltpack Saltpack is a modern crypto messaging format built on the NaCl library, encoding encrypted, signed, and signcrypted messages as MessagePack… | 77 | 1018 | stable |
| CityOfZion/neon-wallet Neon Wallet is an Electron-based desktop light wallet for the NEO blockchain, supporting wallet creation, Ledger hardware login, NEP6 accou… | 31 | 1012 | active |
| yuzhengyang/Fork Fork is a C# utility library (published as Azylee.Core on NuGet) that bundles common helper methods for data processing, file handling, enc… | 39 | 1011 | active |
| BruceWind/AESJniEncrypt An Android NDK library that implements ChaCha20-Poly1305 encryption via libsodium, with keys hidden in native code to resist reverse engine… | 23 | 1011 | active |
| Tencent Kona JDK Tencent Kona 8 is a no-cost, production-ready distribution of OpenJDK 8 with long-term support and quarterly updates, serving as the defaul… | 86 | 1005 | stable |
| BcryptNet/bcrypt.net BCrypt.Net-Next is a C# port of jBCrypt for password hashing on .NET, using a Blowfish-based keying schedule with a configurable work facto… | 80 | 999 | stable |
| piotrnar/gocoin Gocoin is a full Bitcoin solution written in Go, consisting of a high-performance P2P full node client and a separate offline cold-storage … | 74 | 998 | active |
| notaryproject/notary Notary is a Go implementation of The Update Framework (TUF), providing a client and server for signing and verifying trusted collections of… | 10 | 3288 | maintenance |
| ChatSecure ChatSecure is a free and open source encrypted chat client for iOS that supports OTR and OMEMO end-to-end encryption over XMPP, with option… | 23 | 3150 | maintenance |
| kishikawakatsumi/UICKeyChainStore UICKeyChainStore is an Objective-C wrapper library for the Apple Keychain on iOS, watchOS, tvOS, and macOS, making Keychain APIs as simple … | 23 | 3077 | maintenance |
| bcoin-org/bcoin Bcoin is an alternative implementation of the Bitcoin protocol written in JavaScript and C/C++ for Node.js and browsers. It can run as a fu… | 23 | 3069 | maintenance |
| pooler/cpuminer A multi-threaded CPU miner for Litecoin and Bitcoin, forked from Jeff Garzik's reference cpuminer. It supports SIMD optimizations (SSE2, AV… | 23 | 3010 | maintenance |
| lastpass/lastpass-cli lastpass-cli is an official command line interface to the LastPass password manager, written in C. It lets users log in, list, add, edit, c… | 89 | 2909 | maintenance |
| matthewpalmer/Locksmith Locksmith is a protocol-oriented Swift library for interacting with the iOS, macOS, watchOS, and tvOS keychain. It provides a simple API fo… | 23 | 2909 | maintenance |
| nic-delhi/AarogyaSetu_Android The open-source native Android code of Aarogya Setu, the Government of India's COVID-19 contact-tracing mobile application. It uses Bluetoo… | 32 | 2902 | maintenance |
| Bitmessage/PyBitmessage PyBitmessage is the reference client for Bitmessage, a peer-to-peer protocol for sending encrypted, authenticated messages without central … | 57 | 2885 | maintenance |
| ShadowsocksR-Live/shadowsocksr-native A lightweight ShadowsocksR (SSRoT) proxy client and server written in pure C, adding TLS-based obfuscation to evade deep packet inspection … | 49 | 2769 | maintenance |
| 1y0n/AV_Evasion_Tool YanRi (AV_Evasion_Tool) is a Windows GUI tool for red teams that generates loaders to evade antivirus detection of shellcode payloads, supp… | 36 | 2760 | maintenance |
| solana-foundation/solana-web3.js The Solana JavaScript SDK (v1.x maintenance branch) for interacting with accounts and programs on the Solana blockchain via its JSON RPC AP… | 97 | 2758 | maintenance |
| patrickfav/uber-apk-signer A Java-based command-line tool that signs, zipaligns, and verifies Android APK files using debug or release certificates, supporting v1-v4 … | 23 | 2754 | maintenance |
| Sia Sia is a decentralized, blockchain-based peer-to-peer cloud storage marketplace where users rent storage from hosts, with files encrypted a… | 10 | 2693 | maintenance |
| ParrotSec/mimikatz mimikatz is a well-known Windows security tool that extracts plaintext passwords, hashes, PINs, and Kerberos tickets from memory, and suppo… | 32 | 2672 | maintenance |
| pointbiz/bitaddress.org A single-file, client-side Bitcoin wallet generator that creates addresses and private keys entirely in the browser with no network request… | 23 | 2640 | maintenance |
| OpenKeychain OpenKeychain is an open-source OpenPGP implementation for Android that manages encryption keys and encrypts, decrypts, and signs messages a… | 32 | 2619 | maintenance |
| apple/HomeKitADK Apple's open-source HomeKit Accessory Development Kit implementing the HomeKit Accessory Protocol (HAP) in C. It lets developers prototype … | 10 | 2618 | maintenance |
| satazor/js-spark-md5 SparkMD5 is a fast JavaScript implementation of the MD5 hash algorithm, supporting both one-shot and incremental hashing. It works in brows… | 32 | 2606 | maintenance |
| brendan-rius/c-jwt-cracker A multi-threaded JWT brute-force secret key cracker written in C using OpenSSL. It attempts to recover the HMAC signing key of a JWT token … | 32 | 2563 | maintenance |
| seemoo-lab/openhaystack OpenHaystack is a framework and macOS application for creating custom Bluetooth tracking tags that leverage Apple's Find My (offline findin… | 63 | 13695 | experimental |
| x2on/OpenSSL-for-iPhone A shell script and example Xcode project for compiling the OpenSSL library for Apple platforms including iPhone, iPad, Apple Watch, Apple T… | 23 | 2529 | maintenance |
| sekey/sekey SeKey is a macOS SSH agent that lets users authenticate to SSH servers using keys stored in the Apple Secure Enclave, unlocked via Touch ID… | 23 | 2516 | maintenance |
| ethers-rs ethers-rs is a complete Ethereum and Celo library and wallet implementation in Rust, providing JSON-RPC clients, contract bindings via abig… | 10 | 2506 | maintenance |
| vuvuzela/vuvuzela Vuvuzela is a metadata-private messaging system written in Go that hides who is talking to whom, even against nation-state adversaries, usi… | 32 | 2487 | maintenance |
| charmbracelet/charm Charm is a Go library and CLI tool that provided client access to Charm Cloud, a hosted service offering encrypted key-value storage, linke… | 10 | 2487 | maintenance |
| LBRY Android The official LBRY Android app, a mobile browser and wallet for the LBRY decentralized content network. It lets users discover, view, publis… | 23 | 2393 | maintenance |
| solokeys/solo1 Solo 1 is the open-source C firmware for the Solo security key, implementing FIDO2 (CTAP2) and U2F (CTAP) over USB and NFC on an STM32L432 … | 23 | 2384 | maintenance |
| Userbase Userbase is an open-source backend-as-a-service that adds user accounts and end-to-end encrypted data persistence to static web apps via a … | 57 | 2340 | maintenance |
| PHPGangsta/GoogleAuthenticator A PHP library implementing TOTP (RFC 6238) for Google Authenticator two-factor authentication. It generates secrets and codes, verifies cod… | 23 | 2332 | maintenance |
| inconshreveable/go-update A Go library that lets programs update themselves by safely replacing their own executable file with a new version. It supports checksum ve… | 32 | 2274 | maintenance |
| QuipNetwork/quip-miner A Python mining stack for the Quip Network Substrate chain that coordinates CPU (simulated annealing), GPU (CUDA/Metal/Modal), and QPU (D-W… | 61 | 11592 | experimental |
| diafygi/gethttpsforfree A browser-based web application (source for gethttpsforfree.com) that walks users through obtaining free TLS certificates from Let's Encryp… | 41 | 2213 | maintenance |
| madMAx43v3r/chia-plotter A high-performance, pipelined multi-threaded Chia plotter written in C that creates proof-of-space plot files for the Chia blockchain. It u… | 32 | 2208 | maintenance |
| peewpw/Invoke-PSImage Invoke-PSImage is a PowerShell tool that encodes a PowerShell script into the pixels of a PNG image using steganography, then generates a o… | 32 | 2187 | maintenance |
| Quip Network Quip Network SDK is a TypeScript SDK plus a set of EVM smart contracts (Deployer, WOTSPlus, QuipFactory) for interacting with the Quip Netw… | 63 | 11341 | experimental |