orion - Usable, easy and safe pure-Rust crypto

•    Rust

---

Orion is a cryptography library written in pure Rust. It aims to provide easy and usable crypto while trying to minimize the use of unsafe code. You can read more about Orion in the wiki. This library has not undergone any third-party security audit. Usage is at own risk.

cryptography crypto aead argon2 pbkdf2 hmac hkdf chacha20-poly1305 poly1305 blake2b orion sha512 chacha20 argon2i xchacha20-poly1305 pure-rust xchacha20 secretstream

ring - Safe, fast, small crypto using Rust

•    Rust

---

ring is focused on the implementation, testing, and optimization of a core set of cryptographic operations exposed via an easy-to-use (and hard-to-misuse) API. ring exposes a Rust API and is written in a hybrid of Rust, C, and assembly language. ring is focused on general-purpose cryptography. WebPKI X.509 certificate validation is done in the webpki project, which is built on top of ring. Also, multiple groups are working on implementations of cryptographic protocols like TLS, SSH, and DNSSEC on top of ring.

security ecdsa ecdh curve25519 aes-gcm sha-256 sha-384 sha-512 ecc hmac hkdf pbkdf2 p-256 p-384 x25519 chacha20-poly1305 ed25519 constant-time cryptography

hat.sh - Encrypt and Decrypt files securely in your browser.

•    Javascript

---

Hat.sh is a web app that provides secure file encryption in the browser. It's fast, secure and runs locally, the app never uploads the files to the server. It uses modern secure cryptographic algorithms with chunked AEAD stream encryption/decryption. The libsodium library is used for all cryptographic algorithms.

cryptography browser encryption serverless libsodium client-side decryption in-browser file-encryption encryption-decryption xchacha20-poly1305 xchacha20

Wireguard - Fast, Modern, Secure, VPN Tunnel

•    C

---

WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances.

vpn vpn-tunnel virtual-private-network tunnel security

libsodium.js - libsodium compiled to Webassembly and pure JavaScript, with convenient wrappers

•    HTML

---

The sodium crypto library compiled to WebAssembly and pure Javascript using Emscripten, with automatically generated wrappers to make it easy to use in web applications. The complete library weights 188 Kb (minified, gzipped, includes pure js + webassembly versions) and can run in a web browser as well as server-side.

libsodium cryptography crypto webassembly sodium nacl chacha20 poly1305 curve25519 ed25519 blake2 siphash argon2 ecc

pick - A secure and easy-to-use CLI password manager for macOS and Linux

•    Go

---

A secure and easy-to-use password manager for macOS and Linux. Make your master password strong, unique, and don't forget it! You'll need your master password to access your safe. Without it your safe can not be unlocked.

password password-manager cli security crypto chacha20-poly1305 aes-gcm openpgp scrypt pbkdf2

tweetnacl-js - Port of TweetNaCl cryptographic library to JavaScript

•    Javascript

---

Port of TweetNaCl / NaCl to JavaScript for modern browsers and Node.js. Public domain.The primary goal of this project is to produce a translation of TweetNaCl to JavaScript which is as close as possible to the original C implementation, plus a thin layer of idiomatic high-level API on top of it.

crypto authentication signature elliptic-curves secretbox djb salsa20 curve25519 eddsa sha-512 tweetnacl nacl libsodium ed25519 cryptography encrypt hash key poly1305 public signatures

halite - High-level cryptography interface powered by libsodium

•    PHP

---

Halite is a high-level cryptography interface that relies on libsodium for all of its underlying cryptography operations. Halite was created by Paragon Initiative Enterprises as a result of our continued efforts to improve the ecosystem and make cryptography in PHP safer and easier to implement.

easy-to-use cryptography cryptography-library libsodium composer encryption authentication digital-signature curve25519 ed25519 x25519 xsalsa20 poly1305 blake2b siphash argon2 php7 misuse-resistant

SecurityDriven.Inferno - :white_check_mark: .NET crypto done right. Professionally audited.

•    CSharp

---

.NET crypto done right.

crypto cryptography c-sharp aead encryption security hash kdf mac totp hkdf

sjcl - Stanford Javascript Crypto Library

•    Javascript

---

The Stanford Javascript Crypto Library is a project by the Stanford Computer Security Lab to build a secure, powerful, fast, small, easy-to-use, cross-browser library for cryptography in Javascript. SJCL is secure. It uses the industry-standard AES algorithm at 128, 192 or 256 bits; the SHA256 hash function; the HMAC authentication code; the PBKDF2 password strengthener; and the CCM and OCB authenticated-encryption modes.

cryptography toolkit encryption crypto javascript-cryptography

ejson - EJSON is a small library to manage encrypted secrets using asymmetric encryption.

•    Go

---

ejson is a utility for managing a collection of secrets in source control. The secrets are encrypted using public key, elliptic curve cryptography (NaCl Box: Curve25519 + Salsa20 + Poly1305-AES). Secrets are collected in a JSON file, in which all the string values are encrypted. Public keys are embedded in the file, and the decrypter looks up the corresponding private key from its local filesystem.See the manpages for more technical documentation.

forge - A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps

•    Javascript

---

A native implementation of TLS (and various other cryptographic tools) in JavaScript. The Forge software is a fully native implementation of the TLS protocol in JavaScript, a set of cryptography utilities, and a set of tools for developing Web Apps that utilize many network resources.

crypto cryptography x509 message-digest aes asn1 cipher pkcs tls certificate pkcs7 pkcs1 pkcs12 pbkdf2 csr hmac sha1 sha256 md5 asn asn.1 cbc des gcm http https network pki prng rc2 rsa sha384 sha512 ssh x.509

crypto-js - JavaScript library of crypto standards.

•    Javascript

---

JavaScript library of crypto standards.

security crypto hash md5 sha1 sha-1 sha256 sha-256 rc4 rabbit aes des pbkdf2 hmac ofb cfb ctr cbc base64

wolfssl - (formerly CyaSSL) is a small, fast, portable implementation of TLS/SSL for embedded devices to the cloud

•    C

---

The wolfSSL embedded SSL library (formerly CyaSSL) is a lightweight SSL/TLS library written in ANSI C and targeted for embedded, RTOS, and resource-constrained environments - primarily because of its small size, speed, and feature set. It is commonly used in standard operating environments as well because of its royalty-free pricing and excellent cross platform support.

ssl tls cryptography embedded security cipher-suites openssl openssl-library openssl-alternvative tls13 dtls sgx-enclave tls-library trusted-execution https docker decryption iot-security

cryptojs - Following googlecode project crypto-js, provide standard and secure cryptographic algorithms for NodeJS

•    Javascript

---

Following googlecode project crypto-js, provide standard and secure cryptographic algorithms for NodeJS. Support MD5, SHA-1, SHA-256, RC4, Rabbit, AES, DES, PBKDF2, HMAC, OFB, CFB, CTR, CBC, Base64

QAT_Engine - Intel® QuickAssist Technology(QAT) OpenSSL Engine

•    C

---

Intel QuickAssist Technology(QAT) OpenSSL Engine. Its features include Synchronous and Asynchronous Operation, Asymmetric PKE Offload, HMAC Key Derivation Function (HKDF) Offload, Pseudo Random Function (PRF) offload and lot more.

openssl ssl openssl-library cryptography

Kryptor - A simple, modern, and secure encryption tool

•    CSharp

---

Kryptor is a simple, modern, and secure encryption tool. It is a portable, cross-platform command line tool that makes use of modern and secure cryptographic algorithms. It aims to be a mixture of age and Minisign in terms of functionality to provide a simple, user friendly alternative to GPG.

cli encryption signing portable argon2 libsodium ed25519 curve25519 x25519 blake2b signatures file-encryption argon2id libsodium-net digital-signatures xchacha20 libsodium-core encryption-tool

Mantas Cryptography

•    

---

Pequena biblioteca de criptografia com suporte aos algorítmos DES, RC2, Rexor e TripleDES. Gera hashes HMAC-MD5, HMAC-RIPEMD160, HMAC-SHA (SHA1, SHA256, SHA384, SHA512), MD5, RIPEMD160 E SHA (SHA1, SHA 256, SHA384, SHA512)

cryptography

Botan - Crypto library for C++

•    C++

---

Botan (Japanese for peony) is a cryptography library written in C++11. Botan's goal is to be the best option for cryptography in new C++ code by offering the tools necessary to implement a range of practical systems, such as TLS/DTLS, PKIX certificate handling, PKCS#11 and TPM hardware support, password hashing, and post quantum crypto schemes. In addition to the C++, botan has a C89 API specifically designed to be easy to call from other languages. A Python binding using ctypes is included, and several other language bindings are available.

cryptography crypto security pgp ssl secure-library

Password4j - Cryptographic library that supports Argon2, Bcrypt, Scrypt, PBKDF2 and various cryptographic hash functions.

•    Java

---

Password4j is a Java user-friendly cryptographic library for hashing and checking passwords with different Key derivation functions (KDFs) and Cryptographic hash functions (CHFs). The library fully supports Argon2, BCrypt, SCrypt and PBKDF2 and can produce and handle cryptographic salt and pepper.

hashing cryptography scrypt argon2 salt password hash md5 pbkdf2 bcrypt sha-256 argon2d argon2i argon2id security security-library