Awesome GitHub RepositoriesKey Derivation Functions

crypto-js is a JavaScript cryptography library providing a collection of standard cryptographic algorithms and data transformation tools. It functions as a symmetric encryption toolset, a cryptographic hash implementation, and a password derivation tool for the JavaScript environment. The library enables the protection of sensitive data through symmetric encryption and the production of fixed-size data digests to verify integrity. It includes utilities for converting user passwords into secure cryptographic keys and a data format converter for translating information between Base64, Hex, and

Cryptomator is a client-side cloud encryption tool and cross-platform vault manager. It provides a transparent encryption layer that encrypts files and folder structures locally before they are uploaded to a cloud storage provider. The software creates virtual encrypted drives that mount encrypted vaults, allowing users to interact with their data as if it were on a physical disk. It supports the management of multiple independent encrypted containers, each protected by a unique password. The project covers data privacy through directory structure obfuscation and filename encryption to hide

CryptoSwift is a cryptography library implemented entirely in the Swift programming language. It provides a collection of standard cryptographic algorithms for encryption, decryption, and hashing without relying on native C libraries or system frameworks. The library supports symmetric and asymmetric encryption, including RSA key generation and signature management. It features authenticated encryption schemes and the ability to generate cryptographic digests for data integrity verification. The toolset covers message authentication codes, secure key derivation from passwords, and data paddi

VeraCrypt is a cross-platform disk encryption utility used to create encrypted file containers and secure entire disk partitions. It functions as a tool for full disk encryption and a manager for encrypted volumes, providing a means to protect sensitive data on local disks and removable media across multiple operating systems. The software is distinguished by its support for plausible deniability, allowing the creation of hidden volumes nested within other encrypted volumes to conceal the existence of data. It also implements hardware-based access control, requiring physical security tokens,

pysheeet एक तकनीकी संदर्भ लाइब्रेरी है जो उन्नत Python डेवलपमेंट, सिस्टम एकीकरण और उच्च-प्रदर्शन कंप्यूटिंग के लिए कोड स्निपेट्स और कार्यान्वयन पैटर्न का एक क्यूरेटेड संग्रह प्रदान करती है। यह निम्न-स्तरीय नेटवर्क प्रोग्रामिंग, नेटिव C एक्सटेंशन, और एसिंक्रोनस और समवर्ती प्रोग्रामिंग को लागू करने के लिए एक व्यापक गाइड के रूप में कार्य करती है। यह प्रोजेक्ट वितरित GPU इन्फरेंस और उच्च-प्रदर्शन सर्विंग के लिए टूल्स सहित लार्ज लैंग्वेज मॉडल्स के विकास और डिप्लॉयमेंट के लिए विशेष फ्रेमवर्क प्रदान करती है। इसमें GPU रिसोर्स एलोकेशन और मल्टी-नोड वर्कलोड मैनेजमेंट को कवर करते हुए उच्च-प्रदर्शन कंप्यूटिंग क्लस्टर ऑर्केस्ट्रेशन के लिए विस्तृत पैटर्न भी शामिल हैं। यह लाइब्रेरी सुरक्षित नेटवर्क संचार और क्रिप्टोग्राफी, ऑब्जेक्ट-रिलेशनल मैपिंग और डेटाबेस मैनेजमेंट, और जटिल डेटा स्ट्रक्चर्स और एल्गोरिदम के कार्यान्वयन सहित क्षमताओं की एक विस्तृत श्रृंखला को कवर करती है। यह मेमोरी मैनेजमेंट, फॉरेन-फंक्शन इंटरफ़ेस के माध्यम से नेटिव इंटरऑपरेबिलिटी, और सिस्टम-स्तरीय OS एकीकरण के लिए यूटिलिटीज़ भी प्रदान करती है।

Staticrypt is a tool for securing static HTML files using AES-256 encryption. It provides a command-line interface to encrypt and decrypt web pages, transforming plain HTML into encrypted payloads that are decrypted directly in the browser without the need for a backend server or database. The project distinguishes itself through access management features such as auto-decrypting links, which use hashed passwords in URL fragments to unlock files for specific recipients. It also supports browser session persistence, storing hashed passwords in local storage to prevent repeated authentication.

This project is a Python cryptography library that provides a collection of cryptographic primitives and high-level recipes for implementing secure encryption and authentication. It functions as a symmetric encryption toolkit and a cryptographic hash provider, offering both a low-level cryptographic interface for building custom protocols and high-level tools for securing data. The library covers a broad range of security capabilities, including symmetric data encryption, the derivation of cryptographic keys from passwords or secret values, and data integrity verification through the generati

This is an open-source educational website that translates and localizes MIT's Missing Semester course, teaching practical computing skills for computer science students. The curriculum covers developer tooling, shell scripting, version control, security fundamentals, and open-source collaboration, with a focus on core computing skills including data processing pipelines, workflow automation, secure remote access, shell productivity, Vim editing, and Git version control. The project distinguishes itself by teaching command-line mastery, shell scripting, and automation to boost daily developer

Tutanota is an end-to-end encrypted email client and privacy-focused mail server. It functions as a cross-platform secure messaging application that provides encrypted email and calendar synchronization across desktop and mobile devices. The system ensures that only the sender and recipient can read messages by implementing a zero-knowledge architecture, where the service provider cannot access user private keys or cleartext data. This is achieved through client-side encryption and the use of asymmetric key exchange to share encrypted messages without prior secret key exchange. The platform

SQLCipher is an encrypted SQLite database engine and secure relational database that provides transparent AES-256 encryption for database files and stored data. It functions as a cryptographic storage engine that requires a passphrase or binary key to unlock and access content. The engine ensures data confidentiality through page-level encryption and protects data integrity using cryptographic hashes to detect unauthorized modifications. It includes capabilities for encryption key rotation to update passphrases and secure memory locking to prevent sensitive keys from being swapped from RAM to

BLAKE3 सुरक्षित डेटा डाइजेस्ट और फिंगरप्रिंट्स की गणना करने के लिए उपयोग किए जाने वाले BLAKE3 क्रिप्टोग्राफिक हैश एल्गोरिदम का एक उच्च-प्रदर्शन कार्यान्वयन है। यह एक समानांतर क्रिप्टोग्राफिक हैश टूल के रूप में कार्य करता है जो बड़े डेटासेट को तेज़ी से प्रोसेस करने के लिए कई प्रोसेसर थ्रेड्स में वर्कलोड वितरित करता है। प्रोजेक्ट कीड हैशिंग और मैसेज ऑथेंटिकेशन कोड्स के जनरेशन के लिए विशेष उपकरण प्रदान करता है। इसमें क्रिप्टोग्राफिक की डेरिवेशन के लिए कार्यक्षमता भी शामिल है, जो मास्टर की और संदर्भ स्ट्रिंग्स से अद्वितीय गुप्त सब-कीज़ बनाने की अनुमति देती है। कार्यान्वयन समानांतर हैश गणना और सत्यापित डेटा स्ट्रीमिंग के माध्यम से डेटा अखंडता सत्यापन का समर्थन करता है। ये क्षमताएं Rust और C वातावरण के लिए एक क्रॉस-भाषा लाइब्रेरी के रूप में प्रदान की जाती हैं और इसमें फ़ाइलों या मानक इनपुट के डाइजेस्ट की गणना करने के लिए एक कमांड-लाइन इंटरफ़ेस शामिल है।

GmSSL is an open-source cryptographic library that implements the Chinese national cryptographic standards SM2, SM3, SM4, SM9, and ZUC as a unified algorithm suite. It provides a comprehensive set of cryptographic primitives including symmetric and asymmetric encryption, digital signatures, hashing, and key exchange, all built around these national standards for government and enterprise security applications. The library distinguishes itself through several integration capabilities. It includes an OpenSSL compatibility layer that maps GmSSL functions to OpenSSL API calls, enabling drop-in re

LessPass is a stateless password manager that generates deterministic, site-specific passwords entirely on the client device. It uses a pure function to derive passwords from a master password combined with site details, producing the same output every time without storing any secrets on a server or requiring network access. This approach means passwords can be recalculated on any device from remembered inputs, with no database synchronization needed. The project distinguishes itself through its counter-based password rotation, which allows changing a site's password by incrementing a counter

Forge is a JavaScript cryptography library providing a comprehensive set of tools for symmetric and asymmetric encryption, hashing, and digital signatures. It includes a full Transport Layer Security implementation for establishing secure network connections and managing encrypted traffic. The project implements a wide array of public key infrastructure tools, including X.509 certificate management, the generation of certificate signing requests, and the validation of certificate chains. It provides a PKCS cryptographic toolkit for handling secure archives and signed messages, alongside suppo

This is a cryptographic implementation of the Argon2 memory-hard function, serving as a password hashing library and key derivation function. It transforms passwords and salts into secure hashes and generates cryptographic keys designed to resist high-speed hardware cracking attacks. The library utilizes a memory-hard design that requires significant RAM to prevent acceleration via GPUs or ASICs. It incorporates data-independent memory access to block side-channel timing attacks and supports the integration of secret keys or peppers to protect against brute-force attacks on compromised salts.

This project is a command-line tool for managing public key infrastructure and digital identities. It provides a comprehensive suite for X.509 certificate lifecycle management, including the generation, signing, renewal, and revocation of certificates and signing requests. The tool distinguishes itself through specialized security capabilities such as binding cryptographic credentials to TPMs and HSMs for hardware-backed identity attestation. It also provides dedicated support for machine identity security, using short-lived SSH certificates and mTLS to secure non-human workloads. Broad capa

gocryptfs is a FUSE-based encrypted filesystem that transparently encrypts and decrypts file contents and filenames on disk. It uses block-level authenticated encryption with AES-GCM or AES-SIV-512, binding each block to its file header and offset for integrity, while obfuscating filenames with EME or AES-SIV wide-block ciphers using per-directory initialization vectors. The system derives all encryption keys and initialization vectors deterministically from a master key using HKDF and SHA256, enabling reproducible ciphertext for reliable backup and synchronization workflows. The project dist

This project is a mnemonic seed generator and deterministic wallet deriver. It converts mnemonic phrases into binary seeds and derives cryptocurrency wallet addresses and private keys. The tool is implemented as a browser-based cryptographic utility designed for offline execution. This ensures that all key generation and seed computation occur locally on the machine to prevent private keys from leaving the local environment. The system covers mnemonic phrase generation from entropy, seed computation using password-based derivation, and the derivation of public addresses for multiple cryptocu

php-encryption is a symmetric encryption library for PHP that provides tools for authenticated encryption and key derivation to ensure data confidentiality and integrity. It functions as a cryptography toolkit that wraps complex primitives into simplified interfaces to prevent common implementation errors. The library includes a binary-safe ciphertext serializer to maintain data structure during storage and transmission, as well as a password-based key derivation tool that transforms low-entropy passwords into cryptographically strong keys through iterative processes. The project covers a br