Open-source cryptography software
1245 open-source libraries, tools and applications tagged cryptography, ranked by how closely cryptography is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
1245 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| ideawu/Objective-C-RSA A small Objective-C library for performing RSA encryption and decryption on iOS, using PEM-formatted public and private keys. It provides s… | 32 | 1157 | maintenance |
| 0xs34n/blockchain-cli A minimal blockchain command-line interface built with Node.js that lets users create blocks, mine with proof-of-work, validate chain integ… | 32 | 1157 | maintenance |
| wangyi-fudan/wyhash wyhash is a fast, high-quality 64-bit non-cryptographic hash function with accompanying PRNG (wyrand/w1rand) and hash map, written in porta… | 52 | 1148 | maintenance |
| med0x2e/GadgetToJScript GadgetToJScript is a C# tool that generates .NET BinaryFormatter serialized gadget payloads embedded in JS/VBS/VBA/HTA scripts, triggering … | 23 | 1141 | maintenance |
| JPaulMora/Pyrit Pyrit is a WPA/WPA2-PSK precomputed cracker that builds massive databases of pre-computed Pairwise Master Keys using multi-core CPUs and GP… | 64 | 1140 | maintenance |
| nccgroup/featherduster FeatherDuster is an automated, modular cryptanalysis tool from NCC Group that identifies and exploits weak cryptosystems from supplied ciph… | 23 | 1136 | maintenance |
| dalek-cryptography/bulletproofs A pure-Rust implementation of Bulletproofs zero-knowledge range proofs using the Ristretto group over Curve25519. It supports single and ag… | 32 | 1135 | maintenance |
| SilenceIM/Silence Silence is an Android SMS/MMS messaging app that encrypts messages end-to-end using the Signal protocol, working entirely over the cellular… | 32 | 1133 | maintenance |
| mgeeky/ShellcodeFluctuation A C++ proof-of-concept implementing an in-memory evasion technique that encrypts shellcode and fluctuates its memory protection between RW/… | 23 | 1133 | maintenance |
| kelp404/CocoaSecurity An Objective-C library for iOS and macOS providing AES encryption/decryption, MD5 and SHA-family hashing (including HMAC variants), and Bas… | 23 | 1130 | maintenance |
| nfc-tools/mfcuk MFCUK is a C-based command-line toolkit for recovering cryptographic keys from MIFARE Classic RFID cards using the Darkside attack, built o… | 32 | 1115 | maintenance |
| chishaxie/BlindWaterMark A Python command-line tool that embeds invisible blind watermarks into images and extracts them later using frequency-domain techniques. De… | 38 | 1114 | maintenance |
| jborg/attic Attic is a deduplicating backup program written in Python that stores only changed data chunks, with optional AES-256 encryption and SSH-ba… | 32 | 1098 | maintenance |
| aguinet/wannakey A C++ tool that recovers the RSA private key prime numbers generated by the WannaCry ransomware from the wcry.exe process memory. It exploi… | 32 | 1090 | maintenance |
| mmozeiko/aes-finder A small C++ command-line utility that scans the memory of running processes to locate AES encryption and decryption keys (128, 192, and 256… | 32 | 1087 | maintenance |
| google/mundane Mundane is a Rust cryptography library backed by BoringSSL, designed to be difficult to misuse, ergonomic, and performant. It vendors its o… | 32 | 1087 | maintenance |
| sysdream/chashell Chashell is a Go-based reverse shell that tunnels communication over DNS, paired with a multi-client control server called chaserv. All tra… | 32 | 1083 | maintenance |
| bitcoin-php A PHP library implementing Bitcoin protocol primitives including blocks, transactions, scripts, and deterministic key algorithms (BIP32, BI… | 60 | 1076 | maintenance |
| scrt/avcleaner avcleaner is a C/C++ source-to-source obfuscator built on LLVM, designed to evade antivirus detection by transforming source code (e.g., hi… | 32 | 1072 | maintenance |
| threema-ch/threema-web Threema Web is the official browser-based web client for Threema, a privacy-focused end-to-end encrypted mobile messenger. It mirrors the m… | 89 | 1069 | maintenance |
| antonioCoco/SharPyShell SharPyShell is a Python tool that generates a tiny, obfuscated ASP.NET webshell for C# web applications on .NET Framework and provides an i… | 23 | 1068 | maintenance |
| ohyicong/decrypt-chrome-passwords A Python script that decrypts Chrome passwords saved locally on a Windows machine, exporting them to a CSV file. It is intended to raise aw… | 54 | 1065 | maintenance |
| momosecurity/rhizobia_J A Java security SDK from MOMO Security that provides utilities for SQL injection sanitisation, CSRF token handling, safe deserialization, S… | 32 | 1062 | maintenance |
| charlotte-xiao/NCM2MP3 A Java tool that converts NetEase Cloud Music's proprietary NCM encrypted audio files back into standard MP3/FLAC formats, with both a Swin… | 10 | 1060 | maintenance |
| thomasxm/BOAZ_beta BOAZ is a multilayered AV/EDR evasion framework written in C++/C with Python linking, designed to generate polymorphic payloads that bypass… | 54 | 1054 | maintenance |
| WaykiChain/WaykiChain WaykiChain is an open-source public blockchain node implementation (coind) written in C++, designed as a decentralized finance (DeFi) infra… | 23 | 1045 | maintenance |
| mzjdy/MobaXterm-Keygen A Python script that generates a license file (Custom.mxtpro) to unlock the Professional edition of MobaXterm, based on the original work b… | 32 | 1041 | maintenance |
| SaadAhla/FilelessPELoader A C++ tool that fetches an AES-encrypted Windows PE executable from a remote location, decrypts it in memory, and executes it without writi… | 31 | 1041 | maintenance |
| minio/sha256-simd A pure Go library that accelerates SHA256 hashing using hardware instructions: AVX512 and Intel SHA Extensions on x86, and ARM64 Cryptograp… | 23 | 1039 | maintenance |
| mpplab/mnssp3 MNSSp3 is a privacy protection sharing platform for medical big data, built on the Malleable Network System Simulator (MNSS) platform. It a… | 32 | 1036 | maintenance |
| Tylous/ZipExec ZipExec is a Go-based proof-of-concept tool that wraps binaries into a password-protected zip file, base64 encodes it into a JScript loader… | 32 | 1029 | maintenance |
| Graphene Graphene is a C++ toolkit for building high-performance blockchain networks using delegated proof-of-stake consensus, originally developed … | 23 | 1029 | maintenance |
| felix-pb/kfd kfd is a C library that provides kernel memory read/write on Apple devices by exploiting physical use-after-free (PUAF) vulnerabilities to … | 29 | 1016 | maintenance |
| sytelus/CryptoJS CryptoJS is a JavaScript collection of standard cryptographic algorithms such as MD5, SHA-3, and AES, with a consistent and simple interfac… | 32 | 1014 | maintenance |
| ryancdotorg/brainflayer Brainflayer is a proof-of-concept command-line cracker for cryptocurrency brainwallets and other low-entropy key derivation schemes, using … | 32 | 1011 | maintenance |
| ddz/whatsapp-media-decrypt A Go command-line tool that decrypts WhatsApp encrypted media files (.enc) using the media key extracted from WhatsApp's local databases on… | 32 | 1005 | maintenance |
| gbraad-apps/gauth GAuth is a browser-based multi-factor authentication app that implements the TOTP (RFC6238) algorithm to generate one-time passwords, built… | 23 | 1005 | maintenance |
| trottier/original-bitcoin A historical archive of Satoshi Nakamoto's original Bitcoin v0.1 source code, preserved for study and reference. It is not a maintained for… | 10 | 1003 | maintenance |
| dtjohnson/xlsx-populate A JavaScript library for parsing and generating Excel XLSX files, usable in both Node.js and the browser. It preserves existing workbook fe… | 23 | 1002 | maintenance |
| Kakarot zkEVM Kakarot is a zkEVM written in Cairo that implements the full EVM instruction set as provable programs, leveraging STARK proofs on Starknet.… | 10 | 999 | maintenance |
| freenet/freenet-core Freenet is a fully decentralized peer-to-peer network implemented in Rust that acts as a global shared computer and distributed key-value s… | 96 | 3109 | experimental |
| TryQuiet/quiet Quiet is an encrypted peer-to-peer team chat application that serves as a private alternative to Slack and Discord, syncing messages direct… | 93 | 2656 | experimental |
| nexus-xyz/nexus-zkvm The Nexus zkVM is a modular, prover-optimized zero-knowledge virtual machine written in Rust, built on StarkWare's Stwo prover. It lets dev… | 52 | 2621 | experimental |
| openairplay/airplay2-receiver A Python implementation of an AirPlay 2 receiver that can accept audio streams from Apple devices and other AirPlay senders. It supports Ho… | 69 | 2421 | experimental |
| cryfs/cryfs CryFS is a cryptographic filesystem that encrypts files locally so they can be safely stored in cloud services like Dropbox, iCloud, or One… | 83 | 2311 | experimental |
| vgough/encfs EncFS is a userspace encrypted virtual filesystem built on FUSE, originally released in 2003 and recently rewritten in Rust. It transparent… | 86 | 2160 | experimental |
| saljam/webwormhole WebWormhole is a tool that creates ephemeral, peer-authenticated WebRTC pipes between computers for sending files or data, secured with a P… | 55 | 2090 | experimental |
| OwshenNetwork/owshen Owshen Network is a privacy-focused project for Ethereum built in Rust, using zk-SNARKs to enable private transactions. It is a work in pro… | 19 | 2001 | experimental |
| Ridera-Rwa/Ridera-core Ridera is a Real-World Work (RWW) tokenization protocol that converts verified gig-worker earnings into standardized on-chain productivity … | 39 | 1598 | experimental |
| google/keytransparency A Google open-source key transparency service that provides a lookup service for public keys backed by a publicly auditable, tamper-proof l… | 10 | 1571 | experimental |
| cyphar/paperback paperback is a Rust CLI tool that creates encrypted paper backups suitable for long-term storage. It encrypts data and splits the secret ke… | 51 | 1490 | experimental |
| whitequark/unfork unfork(2) is a proof-of-concept Linux technique and library that joins two process address spaces into one, the inverse of fork(2), by comb… | 32 | 1485 | experimental |
| buckyos/CYFS CYFS (CYberFileSystem) is a Rust-implemented protocol stack that upgrades the Web's basic protocols (TCP/IP+DNS+HTTP) to enable fully decen… | 23 | 1442 | experimental |
| darkrenaissance/darkfi DarkFi is an anonymous Layer 1 blockchain built in Rust that uses zero-knowledge cryptography (zk-SNARKs, halo2, a zkVM) to enable fully pr… | 73 | 1380 | experimental |
| nethical6/conversation-steganography A Go CLI tool that hides encrypted secret messages inside natural-looking chat text generated by a local LLM (GPT-2), enabling covert commu… | 52 | 1250 | experimental |
| lem0nSec/ShellGhost ShellGhost is a proof-of-concept memory-based evasion technique written in C that keeps shellcode invisible in memory from process start to… | 29 | 1201 | experimental |
| leonboe1/GoogleFindMyTools A Python framework that reimplements parts of Google's Find My Device (Find Hub) network, allowing users to query trackers and Android devi… | 55 | 1195 | experimental |
| hanselime/paqet paqet is a raw-packet proxy written in Go that tunnels traffic inside hand-crafted TCP packets, bypassing the host's TCP/IP stack using pca… | 81 | 1191 | experimental |
| tailscale/tailscale-rs A work-in-progress Rust implementation of Tailscale, providing a library for building tailnet-connected applications with bindings to C, El… | 80 | 1173 | experimental |
| syphon-org/syphon Syphon is a privacy-centric, open-source Matrix chat client built with Flutter/Dart, featuring end-to-end encryption via Olm/Megolm and no … | 23 | 1059 | experimental |
| a16z/jolt Jolt is a zero-knowledge virtual machine (zkVM) for RISC-V (RV64IMAC) that generates cryptographic proofs of arbitrary program execution, b… | 78 | 1056 | experimental |
| Diem Diem Core is a Rust implementation of the Diem blockchain, a decentralized programmable distributed ledger designed for a low-volatility st… | 67 | 16658 | abandoned |
| brix/crypto-js CryptoJS is a JavaScript library implementing standard cryptographic algorithms such as AES, DES, MD5, SHA family hashes, HMAC, and PBKDF2,… | 32 | 16404 | abandoned |
| apprenticeharper/DeDRM_tools A collection of Python scripts packaged as calibre plugins (DeDRM and Obok) that remove DRM from ebooks, covering Amazon, Adobe Digital Edi… | 23 | 15368 | abandoned |
| solana-labs/solana Solana is a high-performance, web-scale blockchain implemented in Rust, designed for fast, secure, scalable decentralized apps and marketpl… | 10 | 14945 | abandoned |
| mozilla/send Firefox Send was a web application for sharing files with end-to-end encryption and expiring links, built by Mozilla on Node.js. Mozilla di… | 10 | 13240 | abandoned |
| dgrijalva/jwt-go A Go library for creating, signing, parsing, and verifying JSON Web Tokens (JWTs), supporting HMAC, RSA, RSA-PSS, and ECDSA signing algorit… | 10 | 10726 | abandoned |
| zhukov/webogram Webogram is a browser-based Telegram web client implementing the MTProto protocol in pure JavaScript with AngularJS, jQuery, and Bootstrap.… | 10 | 8062 | abandoned |
| Empire Empire is a post-exploitation framework with a pure PowerShell Windows agent and a pure Python Linux/OS X agent, offering encrypted communi… | 10 | 7850 | abandoned |
| bitwiseshiftleft/sjcl The Stanford Javascript Crypto Library (SJCL) is a JavaScript library providing high-level cryptographic primitives such as AES encryption,… | 52 | 7194 | abandoned |
| StackExchange/blackbox BlackBox is a CLI tool that uses GPG to encrypt specific files in a Git, Mercurial, Subversion, or Perforce repository so secrets are encry… | 10 | 6767 | abandoned |
| shadowsocks/shadowsocks-go A Go port of the Shadowsocks lightweight encrypted tunnel proxy, providing local SOCKS5 client and remote server binaries to bypass firewal… | 10 | 6545 | abandoned |
| Zcash The original zcashd full node implementation for Zcash, a privacy-focused cryptocurrency derived from Bitcoin Core that uses zero-knowledge… | 10 | 5490 | abandoned |
| qTox/qTox qTox is a cross-platform instant messaging desktop client supporting encrypted text chat, voice and video calls, and file transfer over the… | 10 | 4976 | abandoned |
| Pyrogram Pyrogram is an elegant, modern and asynchronous Python framework for the Telegram MTProto API, usable with both user accounts and bot ident… | 10 | 4615 | abandoned |
| Buttercup Password Manager Buttercup Desktop is a free, open-source, cross-platform password manager built with Electron and TypeScript that stores credentials in enc… | 10 | 4387 | abandoned |
| Status Mobile App Status is a free, open-source mobile Ethereum client combining a private messenger, crypto wallet, and Web3 browser, built with ClojureScri… | 10 | 4023 | abandoned |
| ethereum/aleth Aleth (formerly cpp-ethereum) is a full Ethereum client along with C++ libraries and tools, including the testeth testing utility. The proj… | 10 | 3963 | abandoned |
| bitpay/wallet BitPay Wallet (formerly Copay) is an open-source, self-custody cryptocurrency wallet for Bitcoin, Bitcoin Cash, Ethereum, and ERC20 tokens … | 64 | 3939 | abandoned |
| input-output-hk/cardano-sl Cardano SL is the original Haskell implementation of the Cardano cryptocurrency, implementing the Ouroboros proof-of-stake consensus protoc… | 10 | 3744 | abandoned |
| LUX-Core/lux LUX Core is the full-node client for the LUX cryptocurrency, a 2017 fork of the Bitcoin codebase written in C++ that implements a hybrid Po… | 23 | 3728 | abandoned |
| andOTP/andOTP andOTP is an open-source two-factor authentication app for Android that generates TOTP and HOTP one-time passwords. It stores tokens in enc… | 10 | 3710 | abandoned |
| SuxueCode/WechatBakTool A C#-based Windows GUI tool for backing up WeChat PC chat history by decrypting WeChat's local database and exporting messages. The project… | 53 | 3707 | abandoned |
| BaiduPCS A C/C++ command-line client for Baidu Network Disk (Baidu Yun) that works in the Linux terminal without requiring app registration. It supp… | 10 | 3544 | abandoned |
| henryboldi/felony Felony is an open-source PGP keychain desktop app built with Electron, React, and Redux, designed to make PGP encryption approachable for n… | 23 | 3457 | abandoned |
| kjur/jsrsasign jsrsasign is a pure JavaScript cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing and validation, ASN.1, PKCS key formats, X.509 … | 88 | 3370 | abandoned |
| redox-os/tfs TFS is a next-generation, modular file system written in Rust for Redox OS, inspired by ZFS with features like copy-on-write, full-disk com… | 32 | 2939 | abandoned |
| facebookarchive/conceal Conceal is a Facebook library providing Java APIs for fast, memory-efficient encryption and authentication of data on Android, especially l… | 10 | 2925 | abandoned |
| Golem (Clay) Clay Golem is a Python implementation of a decentralized peer-to-peer marketplace for renting idle CPU and GPU computing power, with Ethere… | 10 | 2877 | abandoned |
| Netflix/bless BLESS is an SSH Certificate Authority that runs as an AWS Lambda function and signs short-lived SSH certificates for user authentication. I… | 23 | 2758 | abandoned |
| speakeasyjs/speakeasy Speakeasy is a Node.js one-time passcode generator implementing HOTP (RFC 4226) and TOTP (RFC 6238) for two-factor authentication, compatib… | 23 | 2753 | abandoned |
| ethereum/pyethereum PyEthereum was a Python implementation of the Ethereum protocol, the next-generation cryptocurrency network. The project is officially depr… | 10 | 2660 | abandoned |
| android-password-store/Android-Password-Store An Android password manager application compatible with ZX2C4's Pass command-line password store, using OpenPGP for encryption. It lets use… | 10 | 2656 | abandoned |
| Exposure Notifications Server Google's open-source reference implementation of the COVID-19 Exposure Notifications key server, written in Go. It accepts, validates, stor… | 10 | 2585 | abandoned |
| pycrypto/pycrypto PyCrypto is the Python Cryptography Toolkit, providing secure hash functions (SHA256, RIPEMD160) and encryption algorithms (AES, DES, RSA, … | 10 | 2472 | abandoned |
| github/SoftU2F SoftU2F is a software U2F authenticator for macOS that emulates a hardware U2F HID device and performs cryptographic operations using the m… | 10 | 2249 | abandoned |
| DarkCoderSc/PowerRemoteDesktop PowerRemoteDesktop is a remote desktop application written entirely in PowerShell, with both client and server components implementing its … | 23 | 2247 | abandoned |
| ethereum/ethereumj EthereumJ is a pure-Java implementation of the Ethereum protocol as defined in the yellow paper, usable as a Maven/Gradle dependency or sta… | 10 | 2179 | abandoned |
| ircmaxell/password_compat A PHP library providing forward compatibility with the password_* functions (password_hash, password_verify) that ship natively with PHP 5.… | 32 | 2128 | abandoned |
| iotaledger-archive/legacy-wallet-use-trinity-wallet-instead The legacy desktop wallet for the IOTA cryptocurrency, built with Electron and JavaScript. It is deprecated and users are directed to the T… | 10 | 2041 | abandoned |