Awesome GitHub RepositoriesZero-Knowledge Storage

Linsa.io is an end-to-end encrypted cloud storage service and zero-knowledge data vault. It functions as a private content sharing platform that encrypts files and data on the client side, ensuring only the owner can access the stored content. The project employs a local-first approach, processing data updates and encryption on the local device before syncing encrypted blobs to a remote persistence layer. It uses a zero-knowledge architecture where the service provider cannot access decryption keys or view the plaintext content of stored files. The platform provides capabilities for private

This project is a curated directory and catalog of privacy-respecting software and security-focused services. It serves as a structured resource for finding alternatives to corporate services, focusing on tools that prioritize data sovereignty, end-to-end encryption, and user anonymity. The directory is maintained as a markdown-based resource list and rendered via a static site generator. It further extends its utility through a CORS-enabled public API and a JSON-based data schema, allowing the curated catalog of tools and providers to be retrieved programmatically. The collection covers a w

PrivateBin is a self-hosted, zero-knowledge text hosting service and secret sharing tool. It utilizes browser-based AES 256-bit encryption to ensure that data is encrypted on the client side before transmission, meaning the hosting server cannot read or recover the original content. The project distinguishes itself by using URL fragments to distribute decryption keys, preventing the secret key from ever being sent to the server. It supports the distribution of both encrypted text and files, which are compressed and encrypted locally prior to storage. The platform includes capabilities for an

itpol est un framework pour la gestion des clés cryptographiques, les politiques de signature numérique et le durcissement de la sécurité. Il fournit une bibliothèque de modèles de politiques IT et des frameworks d'accès à l'infrastructure pour établir des directives de sécurité organisationnelles et la gouvernance. Le projet se concentre sur la gestion de l'identité cryptographique via l'utilisation de clés PGP et SSH, ainsi qu'un guide de durcissement de la sécurité pour les postes de travail. Il définit des standards pour la sécurité de la chaîne d'approvisionnement logicielle, spécifiquement concernant la signature des commits de code et des versions logicielles pour assurer la provenance. Le système couvre un large éventail de capacités de sécurité, incluant l'implémentation de l'authentification multi-facteurs, le chiffrement de disque et la sécurité du bootloader. Il aborde également les flux de travail de communication sécurisés pour la messagerie chiffrée et l'e-mail, ainsi que la gestion des modules de sécurité matériels (HSM) et les stratégies de sauvegarde zéro-connaissance.