Open-source cryptography software
1245 open-source libraries, tools and applications tagged cryptography, ranked by how closely cryptography is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| bats3c/shad0w SHAD0W is a modular post-exploitation C2 (command and control) framework written in Python and C, designed to operate covertly in heavily m… | 23 | 2178 | maintenance |
| l123456789jy/Lazy A curated collection of commonly used Android utility classes (LazyLibrary) written in Java, covering areas like animations, dates, bitmaps… | 42 | 2166 | maintenance |
| lbryio/torba Torba is a Python library and client/server framework for building fast, correct, and scalable cryptocurrency wallets based on Bitcoin. It … | 10 | 2128 | maintenance |
| gurnec/HashCheck HashCheck is a Windows Explorer shell extension that lets users verify and generate file checksums (MD5, SHA-1, SHA-2, SHA-3, and more) dir… | 23 | 2092 | maintenance |
| fugue/credstash CredStash is a Python CLI utility for managing and distributing shared credentials in the cloud, encrypting secrets with AWS KMS key wrappi… | 23 | 2064 | maintenance |
| Puyodead1/udemy-downloader A Python command-line utility for downloading Udemy courses, including DRM-protected videos when the user supplies their own decryption key… | 65 | 2054 | maintenance |
| B-Con/crypto-algorithms A collection of from-scratch C implementations of standard cryptography algorithms such as AES and SHA-1, released into the public domain. … | 32 | 2046 | maintenance |
| MegatronKing/StringFog StringFog is a Gradle plugin for Android that automatically encrypts string literals in compiled bytecode (dex/aar/jar) at build time and d… | 32 | 2020 | maintenance |
| tjfoc/gmsm A Go library implementing the Chinese national cryptography standards SM2 (elliptic curve), SM3 (hash), and SM4 (block cipher). It supports… | 23 | 1964 | maintenance |
| r00t-3xp10it/venom VENOM is a shell-based framework that uses msfvenom to generate, obfuscate, and compile multi-format shellcode payloads (exe, dll, apk, elf… | 23 | 1963 | maintenance |
| scipr-lab/libsnark libsnark is a C++ library implementing zkSNARK schemes, cryptographic constructions for proving and verifying computations in zero knowledg… | 40 | 1931 | maintenance |
| winauth/winauth WinAuth is a portable, open-source Windows desktop application that acts as a software two-factor authenticator, supporting RFC 6238 TOTP a… | 10 | 1853 | maintenance |
| klezVirus/inceptor Inceptor is a template-driven PE packer and AV/EDR evasion framework for Windows, aimed at penetration testers and red teamers. It automate… | 32 | 1834 | maintenance |
| cmuratori/meow_hash Meow Hash is an extremely fast non-cryptographic hash function taking a 128-byte seed and producing 128-bit output, implemented in C/C++ us… | 32 | 1833 | maintenance |
| perlin-network/noise noise is an opinionated, easy-to-use peer-to-peer networking stack for decentralized applications and cryptographic protocols, written in G… | 23 | 1831 | maintenance |
| gtank/cryptopasta A collection of copy-and-paste-friendly cryptography snippets for Go, wrapping the standard library's best practices for encryption (AES-GC… | 32 | 1803 | maintenance |
| SavjeeCoin SavjeeCoin is a minimal blockchain implementation in JavaScript, built as an npm library to accompany a YouTube tutorial series. It demonst… | 52 | 1772 | maintenance |
| indutny/elliptic A fast, pure-JavaScript implementation of elliptic curve cryptography supporting ECDSA signing/verification, ECDH key exchange, and EdDSA. … | 32 | 1769 | maintenance |
| knownsec/shellcodeloader A Windows shellcode loader generator written in C++ that packages raw shellcode into encrypted executables with multiple loading techniques… | 23 | 1746 | maintenance |
| liexusong/php-beast php-beast is a PHP extension written in C that encrypts PHP source code files so they can be distributed without exposing the original code… | 32 | 1737 | maintenance |
| mprimi/portable-secret Portable Secret is a tool that packs an encrypted payload and decryption JavaScript into a single self-contained HTML file, using the brows… | 32 | 1735 | maintenance |
| xuperchain/xuperchain XuperChain is an open-source blockchain framework from Baidu's XuperChain Lab for building high-performance permissioned alliance networks.… | 23 | 1703 | maintenance |
| eladshamir/Internal-Monologue A C# post-exploitation tool that retrieves NTLM hashes by inducing NetNTLM challenge-response computations in-process, without touching the… | 32 | 1692 | maintenance |
| TryCatchHCF/Cloakify CloakifyFactory is a Python-based text-based steganography toolset that converts any file type into lists of innocuous everyday strings (e.… | 23 | 1683 | maintenance |
| ius/rsatool A Python command-line tool that computes RSA and RSA-CRT parameters (p, q, n, d, e, dP, dQ, qInv) from either two primes or a modulus and p… | 70 | 1676 | maintenance |
| Tornado Cash Tornado Cash is a non-custodial privacy protocol for Ethereum and ERC20 tokens built on zkSNARKs, implemented as smart contracts with JavaS… | 10 | 1675 | maintenance |
| Google Authenticator The open-source implementations of Google Authenticator, generating one-time passcodes using the OATH HOTP (RFC 4226) and TOTP (RFC 6238) s… | 10 | 1674 | maintenance |
| NitroShare NitroShare is a cross-platform desktop application for transferring files between devices on a local network, built with C++ and Qt. It fea… | 33 | 1664 | maintenance |
| mdp/rotp A Ruby library for generating and validating one-time passwords (HOTP and TOTP) according to RFC 4226 and RFC 6238. It is compatible with G… | 43 | 1657 | maintenance |
| facebookresearch/CrypTen CrypTen is a PyTorch-based library for privacy-preserving machine learning built on secure multiparty computation. It exposes a CrypTensor … | 10 | 1650 | maintenance |
| shuhongfan/NavicatCracker A keygen and patcher for activating Navicat 16 database client software without a paid license. It patches the installed Navicat binary and… | 32 | 1631 | maintenance |
| huangyz0918/AndroidWM AndroidWM is a lightweight Java library for Android that adds visible or invisible (steganographic) watermarks to images. It supports text … | 32 | 1630 | maintenance |
| google/highwayhash A C++ library providing fast, strong (well-distributed and unpredictable) hash functions: a portable SipHash implementation and HighwayHash… | 10 | 1603 | maintenance |
| maciejczyzewski/libchaos A C++ library implementing randomization, hashing, and statistical analysis algorithms based on the concept of chaos machines. It aims to r… | 23 | 1597 | maintenance |
| MyEtherWallet MyEtherWallet (MEW) is a free, open-source, client-side interface for creating and managing Ethereum wallets and interacting with the Ether… | 96 | 1585 | maintenance |
| Picocrypt Picocrypt is a small, simple, and secure file encryption tool built in Go, using XChaCha20 and Argon2id. It offers a portable GUI applicati… | 10 | 1554 | maintenance |
| zboxfs/zbox ZboxFS is a zero-details, privacy-focused embedded file system written in Rust that encrypts everything, including metadata and directory s… | 10 | 1542 | maintenance |
| doy/rbw rbw is an unofficial command line client for Bitwarden written in Rust. It runs a background agent that holds decryption keys in memory (li… | 63 | 1531 | maintenance |
| CovenantSQL/CovenantSQL CovenantSQL is a decentralized, Byzantine fault tolerant SQL database built on SQLite with blockchain features like immutable query history… | 23 | 1531 | maintenance |
| gentilkiwi/kekeo kekeo is a C-based command-line toolbox for manipulating Microsoft Kerberos, from the author of mimikatz. It supports operations like ticke… | 23 | 1524 | maintenance |
| nidem/kerberoast A collection of Python and PowerShell tools for attacking Microsoft Kerberos implementations, including requesting service tickets, crackin… | 32 | 1511 | maintenance |
| chip-red-pill/MicrocodeDecryptor A set of Python scripts for decrypting Intel Atom CPU microcode updates, using encryption keys extracted via the Red Unlock debugging techn… | 32 | 1509 | maintenance |
| ViRb3/TrustMeAlready An Xposed module for rooted Android devices that disables SSL certificate verification and pinning system-wide. It hooks Java trust-check m… | 10 | 1504 | maintenance |
| Tezos Tezos is a self-amending cryptographic ledger (blockchain) platform supporting smart contracts, implemented in OCaml. This repository is a … | 32 | 1499 | maintenance |
| ricmoo/aes-js A pure JavaScript implementation of the AES block cipher supporting all common modes of operation (CBC, CFB, CTR, ECB, OFB) and all key siz… | 23 | 1495 | maintenance |
| regolith-labs/ore-cli-legacy A Rust command-line interface for mining the ORE cryptocurrency on the Solana blockchain. This legacy version is deprecated in favor of a n… | 39 | 1494 | maintenance |
| Consensys/eth-lightwallet A lightweight JavaScript HD wallet for Ethereum that stores private keys encrypted in the browser or Node.js. It generates BIP32/BIP39 addr… | 32 | 1476 | maintenance |
| 0x09AL/RdpThief RdpThief is a standalone DLL that, when injected into the mstsc.exe (Remote Desktop client) process, uses API hooking to extract clear-text… | 32 | 1468 | maintenance |
| DaGenix/rust-crypto A mostly pure-Rust library implementing many common cryptographic algorithms such as AES, SHA-2, ChaCha20, and Ed25519. It aims for practic… | 23 | 1455 | maintenance |
| QAX-A-Team/BrowserGhost BrowserGhost is a C# command-line tool for red team operators that extracts saved browser credentials, cookies, history, and bookmarks from… | 23 | 1453 | maintenance |
| JustasMasiulis/xorstr A header-only C++17 library that encrypts string literals at compile time using XOR with 64-bit keys and vectorized (SSE/AVX) inlined decry… | 32 | 1449 | maintenance |
| oddcod3/Phantom-Evasion Phantom-Evasion is a Python-based antivirus evasion tool that generates obfuscated executables and payloads designed to bypass antivirus de… | 10 | 1448 | maintenance |
| syvaidya/openstego OpenStego is a Java-based steganography application that hides data inside image files and embeds invisible watermarks to detect unauthoriz… | 23 | 1441 | maintenance |
| andreas-mausch/whatsapp-viewer A small Windows application (with command-line support) that decrypts and displays WhatsApp chat history from the Android msgstore.db datab… | 23 | 1440 | maintenance |
| kmackay/micro-ecc A small, fast C library implementing ECDH key exchange and ECDSA signatures for 8-bit, 32-bit, and 64-bit processors, with optional inline … | 88 | 1439 | maintenance |
| aave/aave-protocol Open source implementation of Aave Protocol Version 1.0, a decentralized lending pool system built on Ethereum smart contracts. This is the… | 10 | 1435 | maintenance |
| bpellin/keepassdroid KeePassDroid is an Android port of the KeePass Password Safe, allowing users to open and manage KeePass password databases (.kdb and .kdbx,… | 38 | 1430 | maintenance |
| nfc-tools/mfoc MFOC is an open-source C implementation of the offline nested attack for recovering authentication keys from MIFARE Classic NFC cards. It r… | 32 | 1430 | maintenance |
| nccgroup/demiguise Demiguise is a Python CLI tool from NCC Group that generates HTML files containing RC4-encrypted HTA payloads, which are decrypted dynamica… | 32 | 1427 | maintenance |
| brannondorsey/naive-hashcat A plug-and-play shell script wrapper around hashcat that cracks password hashes using pre-configured, empirically tested attack parameters.… | 23 | 1427 | maintenance |
| atom/node-keytar A native Node.js module (written in C++) for storing, retrieving, replacing, and deleting passwords in the operating system's credential st… | 10 | 1425 | maintenance |
| paranoidninja/CarbonCopy A Python CLI tool that downloads a website's TLS certificate, creates a spoofed version of it, and uses it to sign Windows executables for … | 32 | 1424 | maintenance |
| eosjs EOSIO is an open-source blockchain smart contract platform written in C++ that executes contracts via WebAssembly. It provides high-perform… | 10 | 1422 | maintenance |
| eosjs eosjs is a TypeScript/JavaScript library for integrating applications with EOSIO-based blockchains via the EOSIO RPC API. It provides trans… | 10 | 1422 | maintenance |
| signalapp/libsignal-protocol-c A C implementation of the Signal Protocol, a ratcheting forward-secrecy encryption protocol for synchronous and asynchronous messaging. It … | 10 | 1417 | maintenance |
| handshake-org/hs-airdrop hs-airdrop is the official redemption tool for the Handshake network's decentralized airdrop of HNS coins to open source developers. It che… | 32 | 1415 | maintenance |
| google/conscrypt Conscrypt is a Java Security Provider implementing parts of the Java Cryptography Extension (JCE) and Java Secure Socket Extension (JSSE), … | 97 | 1413 | maintenance |
| MyCrypto MyCrypto is an open-source, client-side Ethereum wallet manager for creating, importing, and managing Ethereum accounts and sending transac… | 23 | 1406 | maintenance |
| susam/mintotp MinTOTP is a minimal TOTP (time-based one-time password) generator written in about 20 lines of Python, usable as a CLI tool or as importab… | 32 | 1401 | maintenance |
| progranism/Open-Source-FPGA-Bitcoin-Miner A fully open-source VHDL implementation of a Bitcoin miner for Altera and Xilinx FPGAs, supporting pool and solo mining as well as Namecoin… | 32 | 1380 | maintenance |
| standardnotes/desktop Standard Notes desktop client, a free, open-source, end-to-end encrypted notes application built with Electron and TypeScript. This reposit… | 10 | 1374 | maintenance |
| kingkool68/generate-ssl-certs-for-local-development A bash script that generates trusted self-signed SSL certificates for local HTTPS development on macOS. It creates a local certificate auth… | 32 | 1354 | maintenance |
| GoSSIP-SJTU/Armariris Armariris is an LLVM-based code obfuscation framework maintained by Shanghai Jiao Tong University's cryptography and computer security lab.… | 32 | 1346 | maintenance |
| tfhe/tfhe TFHE is a C++ library implementing fast fully homomorphic encryption over the torus, based on the CGGI16 scheme with gate-by-gate bootstrap… | 38 | 1333 | maintenance |
| ofek/bit Bit is a fast, intuitive Python library for Bitcoin key management, transaction creation, and blockchain interaction. It supports multiple … | 32 | 1315 | maintenance |
| TakeScoop/SwiftyRSA SwiftyRSA is a Swift library for RSA public/private key encryption and decryption on Apple platforms. It supports loading keys from PEM, DE… | 23 | 1304 | maintenance |
| guyoung/CaptfEncoder CaptfEncoder is an open-source, cross-platform network security tool suite offering encoding/decoding conversions, classical and modern cry… | 23 | 1300 | maintenance |
| google/skicka A Go command-line utility for uploading, downloading, listing, and managing files on Google Drive, with optional AES-256 client-side encryp… | 10 | 1295 | maintenance |
| samr7/vanitygen A standalone command-line vanity Bitcoin address generator written in C that searches for addresses matching custom prefixes or regular exp… | 32 | 1281 | maintenance |
| BytomDAO/bytom The official Go implementation of the Bytom blockchain protocol, providing a full node daemon (bytomd) and CLI client (bytomcli) for a mult… | 10 | 1268 | maintenance |
| LicenseCC Licensecc is an open-source C++ library for software licensing and copy protection that generates hardware signatures and validates license… | 84 | 1252 | maintenance |
| mehrdadrad/radvpn RadVPN is a decentralized, full-mesh VPN written in Go that connects nodes directly without a central server, with a built-in router for pa… | 32 | 1250 | maintenance |
| Yawning/obfs4 obfs4 is a look-like-nothing traffic obfuscation protocol (the obfourscator) implemented in Go, based on ScrambleSuit with ntor handshakes … | 32 | 1248 | maintenance |
| Exonum Exonum is an extensible open-source Rust framework for building private, permissioned blockchain applications with a custom Byzantine fault… | 23 | 1246 | maintenance |
| positive-security/find-you A modified version of OpenHaystack that demonstrates a stealth AirTag clone capable of bypassing Apple's Find My tracking protection featur… | 32 | 1245 | maintenance |
| tf-encrypted/tf-encrypted TF Encrypted is a Python framework for privacy-preserving machine learning in TensorFlow, enabling training and prediction on encrypted dat… | 32 | 1241 | maintenance |
| google/cityhash CityHash is a family of fast, non-cryptographic hash functions for strings, implemented in C++ under the MIT license. It offers 32-, 64-, 1… | 10 | 1230 | maintenance |
| decentralized-identity/ion ION is a public, permissionless Decentralized Identifier (DID) network implementing the Sidetree protocol as a Layer 2 overlay on Bitcoin. … | 23 | 1228 | maintenance |
| openzfsonwindows/ZFSin ZFSin is a port of the OpenZFS filesystem to Windows, implemented as a native kernel driver providing pooled storage, checksums, snapshots,… | 23 | 1222 | maintenance |
| sigstore/rekor Rekor is Sigstore's software supply chain transparency log, providing an immutable tamper-resistant ledger for signed build and provenance … | 91 | 1214 | maintenance |
| iagox86/hash_extender A C command-line tool that automates hash length extension attacks against algorithms like MD4, MD5, SHA-1, SHA-256, SHA-512, RIPEMD-160, a… | 32 | 1213 | maintenance |
| openenclave/openenclave Open Enclave SDK is a hardware-agnostic open source SDK for building C and C++ applications that use hardware-based Trusted Execution Envir… | 84 | 1209 | maintenance |
| ebekker/ACMESharp ACMESharp is an ACME protocol client library and PowerShell module for the .NET platform, primarily used to obtain and manage certificates … | 23 | 1209 | maintenance |
| yggdrasil-network/yggdrasil-go Yggdrasil is a lightweight userspace software router implementing an experimental, fully end-to-end encrypted IPv6 overlay network with a s… | 88 | 5443 | experimental |
| the-xentropy/xencrypt Xencrypt is a single-file PowerShell crypter that encrypts, compresses, and obfuscates PowerShell scripts to bypass AMSI and antivirus dete… | 32 | 1192 | maintenance |
| SciresM/hactool hactool is a C command-line tool for inspecting, decrypting, and extracting common Nintendo Switch file formats such as NCA, XCI, PFS0, Rom… | 23 | 1188 | maintenance |
| lmammino/jwt-cracker jwt-cracker is a Node.js command-line tool that brute-forces the signing secrets of HS256, HS384, and HS512 JWT tokens. It supports custom … | 23 | 1183 | maintenance |
| wwwtyro/cryptico A JavaScript library providing easy-to-use public-key encryption combining RSA and AES, with support for message signing and public key ide… | 10 | 1175 | maintenance |
| Cocos-BCX JSSDK A demo application showcasing the Cocos-BCX JavaScript SDK, demonstrating blockchain operations like account creation, login, and asset tra… | 32 | 1163 | maintenance |
| Ch0pin/AVIator AV|Ator is a GUI backdoor generator that encrypts shellcode with AES and produces Windows executables that decrypt and inject the payload u… | 10 | 1160 | maintenance |