Frank Denis

A modern, portable, easy to use crypto library.

A widely trusted cryptography library that lets developers add encryption, digital signatures, and secure password storage to apps without needing deep security expertise.

A small, powerful, open-source CLI coding agent that works with open models.

A Dead Simple VPN.

A lightweight, secure, easy-to-use crypto library suitable for constrained environments.

A dead simple tool to sign files and verify digital signatures.

Copy/paste anything over the network.

libsodium compiled to Webassembly and pure JavaScript, with convenient wrappers.

Pure FTP server

The PHP extension for libsodium.

Safe and easy to use crypto for iOS and macOS

A high performance DNS cache designed for Content Delivery Networks

🚀 A blazingly fast, memory-safe rewrite of the classic Unix 'yes' command. Written in Rust! 🦀

Web service to map IP addresses to AS information, using iptoasn.com

A fast Bloom filter implementation in Rust

A secure, standard-conformant, easy to use JWT implementation for Rust.

A library to quickly find visually similar images

An AssemblyScript API layer for WASI system calls.

A simple and stupid load testing tool for DNS resolvers

A WebAssembly (via AssemblyScript) set of cryptographic primitives for building authentication and key exchange protocols.

The dum^H^H^Hsimplest encryption tool in the world.

Gitbook documentation for libsodium

A fast persistent nosql database with a HTTP/JSON interface, not only for geographical data.

BlackNurse attack PoC

UCARP allows a couple of hosts to share common virtual IP addresses in order to provide automatic failover. It is a portable userland implementation of the secure and patent-free Common Address Redundancy Protocol (CARP, OpenBSD's alternative to the patents-bloated VRRP).

A really tiny crypto library.

A command-line tool to sign files and verify signatures in pure Rust.

BitBar plugin to control dnscrypt-proxy usage

A Docker image for a non-censoring, non-logging, DNSSEC-capable, DNSCrypt-enabled DNS resolver

WITX code and documentation generator for AssemblyScript, Zig, Rust and more.

Small, wasm-friendly, zero-dependencies Ed25519 and X25519 implementation for Rust.

A Javascript implementation of SipHash-2-4

Minisign reimplemented in Zig.

Minisign verification library for Golang.

A pure Rust implementation of the Minisign signature tool.

A simple NATS client library for Rust

The easiest way to write services for Fastly's Compute@Edge in Zig.

OpenSSL 3 compiled for WebAssembly/WASI (up-to-date, maintained)

A Zig version of the Charm crypto library.

ffmpeg 7 libraries precompiled for WebAsembly/WASI, as a Rust crate.

A new DNS proxy designed for simplicity, security and extensibility with WebAssembly plugins.

Time and duration crate optimized for speed and API stability.

SipHash (2-4, 1-3 + 128 bit variant) implementations for Rust

BoringSSL for WebAssembly/WASI

Signcryption using libsodium.

Lightweight network and DNS monitoring at a glance, right from your Mac menu bar.

Very fast cryptographic hashing for large messages.

A simple, but damn fast sinkhole

A fast, easy-to-use, and secure command-line tool for encrypting and decrypting files or entire directory trees.

Authenticated encryption for streams and arbitrary large files using libsodium

A tiny, fast, simple, single-file, BSD-licensed CSV parsing library in C.

AEGIS high performance ciphers for Rust.

Sodiumoxide's libsodium-sys crate, but that installs stable versions of libsodium.

A SPAKE2+ Elligator Edition implementation for libsodium 1.0.16+

A small Rust crate to verify Minisign signatures.

A CPace PAKE implementation using libsodium.

A small, self-contained SHA256 and HMAC-SHA256 implementation.

A simple Rust crate to drop privileges

Always up-to-date mirror of the SUPERCOP cryptographic benchmark.

A simple and secure DNS client crate for Rust.

Mass DNS resolution tool

PureDB is a portable and tiny set of libraries for creating and reading constant databases.

RSA blind signatures in Rust

Deterministic/nonce-reuse resistant authenticated encryption scheme using XChaCha20, implemented on libsodium.

All-in-one Rust bindings for libsodium.

SIEVE cache replacement policy for Rust.

Xoodyak, a lightweight and versatile cryptographic scheme implemented in Rust.

C version of the MetroHash function

A C implementation of Spritz, a spongy RC4-like stream cipher and hash function.

A Rust implementation of CPace, a balanced PAKE.

DNS Stamp calculator component for VueJS

Implementation of the HuggingFace Xet Protocol.

A filesystem benchmark tool that simulates a realistic load

Extract, defang, resolve names and IPs from text

Fast(er) AES-based constructions for WebAssembly and Rust.

BoundedArray module for Zig.

A DNS library for Rust.

Blind RSA signatures implementation for Zig.

An implementation of the ROCCA-S encryption scheme.

DNS Stamps library for Go

Make AES-GCM safe to use with random nonces, for any practical number of messages.

The PHP WebDAV extension allows easy access to remote resources with PHP through the DAV protocol.

Constant-time hex and base64 codecs from libsodium reimplemented in Rust.

React2Shell exploit with multiple WAF bypass and vulnerable example application.

HPKE implementation for Zig.

The WASMonkey magically turns exported WASM functions into imported functions.

Libhydrogen bindings for Rust.

A Rust crate to attach BPF filters

Low overhead, high precision measurement crate for Rust

A Zig implementation of EdDSA signatures with blind keys.

Easy-to-use Sigma proofs in C using libsodium.

SPARX block ciphers implementations for Rust.

A tool to extract code from individual functions in a library.

An Adaptative Replacement Cache for Rust

Blind RSA signatures for OpenSSL/BoringSSL.

djbsort: fast, data-oblivious sorting algorithm.

SipHash AVX2 implementation in C

Charm implementation in JavaScript (TypeScript)

Count Min Sketch implementation for Rust

Collection of test vectors for cryptographic operations

Header-only portable implementations of common Intel intrisics, including cryptographic instructions.

AES-GEM (AES Galois Extended Mode) implementation.

IP address encryption and obfuscation for Go.

Progressive hashing PoC

An experimental authenticated cipher.

A sleep-aware-sleep() function

Unbound is a validating, recursive, and caching DNS resolver. This is a fork that re-enables EDNS probes after the "DNS flag day"

LZ4 implementation in pure Zig.

A small, self-contained SHA512 and HMAC-SHA512 implementation.

An implementation of EliMAC, a fast AES-based Message Authentication Code

MORUS-1280-128 implementation in Zig.

A command-line tool for prefix-preserving encryption of IP addresses and URIs in logs and data files.

The original NoSQL database for session storage.

A high-performance VPN.

UltraCDC, a fast content-defined chunking algorithm for data deduplication.

A Boring(SSL)-compatible API abstraction for Rust cryptographic implementations.

No description.

Implementation of the FAST format-preserving encryption cipher in C.

C implementation of the BlaBla20 cipher

A C library to check if a string starts with a prefix from a potentially large set of candidates

Standard and advanced low-level AES building blocks for Go.

An encrypted tunnel for TigerBeetle with connection pooling and session multiplexing.

A high-performance Go implementation of the SIEVE cache replacement algorithm with thread-safe and sharded variants.

Implementation of the Alzette box and the CRAX block cipher in Zig.

CBC mode for Zig.

Skein hash functions for PHP

Encode binary data as a UTF-8 string.

A dead simple bloom filter in C

The AREION public crypto permutation, implemented in Zig.

This crate does only one thing: format a Unix timestamp.

A Go implementation of the FAST (Format-preserving encryption And Secure Tokenization) algorithm.

No description.

SHA1 and HMAC-SHA1 for Rust.

Find hidden jumps in code intended to be constant-time.

asymcrypt: if you encrypt, you can't decrypt.

PQConnect - A new easy-to-install layer of Internet security (git mirror)

Length-preserving, format-preserving UTF-8 encryption. Experimental, super dangerous, you've been warned.

IP address encryption and obfuscation for PHP.

Predict where a shopper is likely to go and what he's likely to buy next.

HCTR2 and HCTR3 length-preserving encryption algorithm for Zig.

AES Key Wrap construction for Rust.

Forró : ARX-based cipher with faster diffusion than ChaCha.

XET: Content-Addressable Storage Protocol for Efficient Data Transfer.

PolymurHash universal hash function.

LeMac - A fast AES-based universal hash function and MAC.

A Zig implementation of the IP address encryption and obfuscation methods specified in the ipcrypt document.

Base91 encoding for Zig.

Zig implementations of the Cymric authenticated encryption modes.

iOS client for DSVPN.

AES-SIV deterministic authenticated encryption in Go.

Swift implementation of IP address encryption methods (ipcrypt)

AEGIS ciphers for Python.

Lightweight 32-bit Block Cipher Library.

PoC for CVE-2025-65945 (Improper Verification of Cryptographic Signature in node-jws)

High-performance Ed25519 signatures for WebAssembly / WASI.

Self-contained AEGIS ciphers implementation in JavaScript (TypeScript).

Poly1163 MAC implementation in Zig.

Prefix-preserving, deterministic encryption for URIs.

Zig implementation of Common Access Token (CTA-5007).

IP address obfuscation library for Rust.

HiAE implementation in pure Rust.

Fast Lightweight Online Encryption.

Up-to-date WITX interface definitions for the Fastly Compute@Edge platform.

🦀😂

The Vistrutah block large cipher, in Zig.

Encrypt anything offline with a key that cannot decrypt what it just wrote.

Seekable stream cipher and encryption/decryption API for Rust and WebAssembly.

General-purpose programming language and toolchain for maintaining robust, optimal, and reusable software.

A Zig implementation of the FAST (Format-preserving, Additive, Symmetric Translation) cipher.

AEGIS-based cipher suites for TLS 1.3, DTLS 1.3 and QUIC.

Fastly VCL documentation, for humans and AI agents.

Implementation of the SKINNY tweakable block cipher in Zig.

A Tweakable Pseudorandom Function (TPRF) based on the masked Iterate-Fork-Iterate design paradigm.

Use an Arduino to send text messages when an attached mic detects a sustained, abnormal sound level.

encodeURI() and encodeURIComponent() for Rust.

Mount Hugging Face Buckets and repos as local filesystems, with client-side encryption.

Rust implementation of HCTR2, HCTR3, and their beyond-birthday-bound secure variants (CHCTR2, HCTR2-TwKD), plus format-preserving variants.

Blind RSA signatures for Go.

ALF: AES-NI-based length-and format-preserving encryption.

TLS 1.3 implementation in C (master supports RFC8446 as well as draft-26, -27, -28)

Cap'n Proto for Rust

FAST cipher implementation in JavaScript.

Python implementation of the FAST format-preserving cipher.

C library to verify Minisign signatures (experimental, completely untested)

Partially Blind RSA Signatures in C.

Lightweight block ciphers for Rust.

Algorithm powering the For You feed on X

xet client tech, used in huggingface_hub

Log::Log4perl::Layout::LTSV - A Log4perl layout that spits out LTSV

Run LLMs with MLX

No description.

An implementation of the BKDF key derivation function.

Nono pack for Swival.

Wesolowski VDF in JavaScript.

No description.

eXtended Keccak Code Package

Cryptographic implementation conformance testing harness for ML-KEM and ML-DSA.

BEANIE tweakable block cipher for Zig.

Run Fastly Compute@Edge Wasm programs on your own computer, powered by wasmtime

WASI Cryptography API Proposal

Exponentially Weighted Moving Average algorithms for Go.