Awesome GitHub RepositoriesCryptographic Random Number Generators

This project is a UUID generation library providing a standards-compliant implementation of RFC 4122. It serves as a tool for creating and validating universally unique identifiers across multiple versions to ensure global uniqueness and prevent data collisions. The library supports several generation methods, including random-based entropy, timestamp sequencing, and namespace-based hashing. It also includes utilities for identifier validation, parsing, and converting identifiers between hexadecimal string representations and binary byte arrays. A command line utility is included for the man

node-uuid is a JavaScript library for generating and validating universally unique identifiers that comply with the RFC 4122 standard. It provides a utility for creating random, timestamp-based, or namespace-based identifiers within a Node.js environment. The library includes tools for detecting the specific standard version of a provided identifier and transforming identifiers between different versions. It also provides a command line utility for generating identifiers directly from the terminal. The project covers binary manipulation, including parsing strings into byte arrays and stringi

Lucia is an authentication library that provides session management, OAuth integration, and password-based login for web applications. It creates and validates server-side sessions using cryptographically random tokens stored in HttpOnly, Secure, SameSite=Lax cookies, with constant-time token comparison to prevent timing side-channel attacks. The library supports authentication through email and password, GitHub OAuth, Google OAuth, and passkey-based sign-in. It enforces two-factor authentication using time-based one-time passwords (TOTP) from authenticator apps, generates recovery codes for

Embassy is an asynchronous framework for microcontrollers that provides a runtime for cooperative multitasking. It enables the execution of multiple concurrent tasks to maximize energy efficiency and CPU usage, utilizing an async executor that puts the processor to sleep when idle. The framework includes a comprehensive set of embedded components, featuring a hardware abstraction layer for peripherals like GPIO, SPI, I2C, and UART, alongside a TCP/IP network stack and a USB device stack. It also provides a Bluetooth Low Energy host stack for wireless communication and a bootloader framework t

randomcompat is a backward-compatibility library that provides cryptographically secure random number generation functions for PHP 5.x environments. It delivers the randombytes() and random_int() functions that are natively available in PHP 7+, enabling legacy applications to generate secure random bytes and unbiased integers from system entropy sources. The library implements a priority-based fallback chain across operating-system CSPRNGs, selecting the best available random source in order of security. It uses rejection sampling to convert raw random bytes into unbiased integers withi

这是一个用于 Node.js 的 bcrypt 密码哈希库和加密模块。它提供了一套工具，用于生成安全盐值、计算加密强度高的哈希值以及验证密码，以保护用户凭据免受未经授权的访问。 该库实现了自适应哈希，利用可配置的成本因子来增加暴力破解密码所需的计算工作量。它包括一个密码验证工具，可保护比较过程免受时序攻击。 该项目涵盖安全密码哈希和盐值生成，以及用于哈希成本提取和密码验证的实用程序。这些功能支持安全密码存储和用户身份验证工作流。

This is a Node.js library for securely hashing and verifying passwords using the bcrypt adaptive hashing algorithm. It functions as a password security module that transforms plain-text credentials into protected hashes and generates cryptographically secure salts. The implementation allows for the adjustment of computational cost to resist brute-force attacks. It provides utilities for password hash verification and the extraction of hash metadata to determine the number of encryption rounds used. The project covers a range of security and access control capabilities, including credential s

Sui is a blockchain platform featuring an object-centric state model and resource-oriented smart contracts. It utilizes parallel transaction execution to increase network throughput and supports programmable transaction blocks that bundle multiple operations into single atomic units. The platform distinguishes itself with a capability-based access control system and zero-knowledge login mechanisms, enabling users to authenticate via identity providers without seed phrases. It also implements deterministic object addressing to allow predictable state lookups and supports the creation of soulbo

bignumber.js 是一个任意精度的 JavaScript 库，旨在对超过标准浮点数限制的十进制数和整数执行数学运算。它作为一个十进制算术引擎和数学库，用于计算平方根、幂和模幂运算。 该项目提供了一个基数转换工具，能够解析和转换 2 到 36 之间任何基数的数值。它还包括一个数值格式化工具，用于将高精度值渲染为带有自定义分隔符和表示样式的本地化字符串。 该库涵盖了广泛的功能，包括任意精度算术、可配置的舍入规则和高精度数值比较。它还提供用于十进制到分数转换和加密安全随机数生成的工具。

Masuit.Tools is a comprehensive static utility library for .NET and ASP.NET Core development. It provides a broad collection of reusable helper methods and infrastructure components that cover common programming tasks without requiring dependency injection or instance management. The library is organized as flat utility classes, making its functionality directly accessible from anywhere in a project. The toolkit distinguishes itself through a wide range of integrated capabilities that go beyond typical utility libraries. It includes a multithreaded range-request file downloader with pause and

GmSSL is an open-source cryptographic library that implements the Chinese national cryptographic standards SM2, SM3, SM4, SM9, and ZUC as a unified algorithm suite. It provides a comprehensive set of cryptographic primitives including symmetric and asymmetric encryption, digital signatures, hashing, and key exchange, all built around these national standards for government and enterprise security applications. The library distinguishes itself through several integration capabilities. It includes an OpenSSL compatibility layer that maps GmSSL functions to OpenSSL API calls, enabling drop-in re

Forge 是一个 JavaScript 加密库，提供了一套全面的对称和非对称加密、哈希及数字签名工具。它包含完整的传输层安全（TLS）实现，用于建立安全网络连接和管理加密流量。 该项目实现了广泛的公钥基础设施（PKI）工具，包括 X.509 证书管理、证书签名请求生成以及证书链验证。它提供了一个用于处理安全归档和签名消息的 PKCS 加密工具包，并支持 SSH 密钥管理以及在 PEM、OpenSSH 和 PKCS#12 格式之间转换密钥。 该库涵盖了广泛的安全原语，如分组密码加密、HMAC 计算和基于密码的密钥派生。它还包括用于使用 ASN.1 DER 编码进行二进制数据序列化的工具，以及用于 Base58、Base64 和十六进制格式的数据转换工具。 其他功能包括用于 HTTP 客户端请求处理的底层网络通信工具，以及用于排队后台操作的异步任务编排功能。

ksuid 是一个 Go 语言实现的 k-sortable（k-可排序）唯一标识符库。它提供了一套生成全局唯一标识符的系统，这些标识符能够根据生成时间戳保持自然的先后顺序。 该项目支持在分布式系统中创建唯一键，无需中心协调器。这些标识符专为数据库主键设计，旨在维持索引性能并提高插入效率。 该库包含标识符序列化和解析功能，支持在二进制、文本和 SQL 格式之间进行转换。它还提供了命令行工具，无需编写应用代码即可生成和解码标识符。

This project is a web application security standard and vulnerability framework. It provides a comprehensive list of the most critical security risks facing web applications, paired with technical guidance and a structured methodology for identifying and mitigating these flaws. The framework functions as a secure coding guide and a risk assessment methodology, offering a standardized approach to prioritizing vulnerabilities based on their potential impact and likelihood of exploitation. It defines architectural patterns and technical recommendations to help developers implement defense in dep

这是一个用于生成和解析通用唯一标识符 (UUID) 的 Go 库。它提供了一种编程方式来生成唯一标识符，并根据 RFC 4122 行业标准对其进行验证。 该项目专注于确保分布式系统和数据库中的数据唯一性。它包括用于创建符合公认规范的标识符的工具，以及在字符串表示形式和结构化对象之间转换这些标识符的工具。 该库涵盖了数据验证、解析和分布式数据索引功能。它还提供用于应用状态跟踪的实用程序，以维护对象或会话的稳定句柄。

Sprig is a comprehensive library of helper functions designed to extend the Go text template engine. It provides a wide array of custom functions that can be injected into the engine to enable complex data manipulation and logic directly within templates. The project offers specialized capabilities for cryptography, including the generation of private keys, X.509 certificates, and secure password hashes. It also includes advanced logic extensions for semantic versioning comparison, ternary evaluations, and the resolution of environment variables from the host operating system. The library co

hashids.js 是一个 JavaScript 库，可将数字转换为短小的唯一字符串，并将其解码回原始值。它充当双向数字编码器，将整数转换为非顺序字符串，而无需存储映射关系。 该项目提供了用于掩码数据库主键和十六进制值的实用程序，以防止猜测顺序资源地址。它使用自定义盐值 (salt) 和字母表来生成格式化的标识符，确保相同的数字在不同项目中产生不同的字符串。 该库包含十六进制字符串掩码功能，可保留前导零以保持一致的字符长度。它还支持自定义长度填充，以确保标识符满足特定的最小字符要求。

OSV 是一个 unikernel 操作系统和云原生执行环境，旨在作为安全微型虚拟机 (microVM) 在 KVM、Firecracker、Xen 和 VMware 等虚拟机管理程序上运行。它是一个与 Linux 二进制兼容的运行时，允许未经修改的 Linux 二进制文件作为安全微型虚拟机执行，而无需重新编译。 该项目通过将应用程序打包成最小化的可启动镜像以及提供虚拟机管理 API 而脱颖而出。此 REST 接口支持远程监控系统健康状况、管理执行跟踪以及控制客户虚拟机状态。 该系统涵盖了广泛的底层功能，包括对称多处理调度、基于通道的网络栈和虚拟设备集成。它包括用于内存泄漏检测、CPU 使用率采样和网络数据包跟踪的全面可观测性工具，以及对各种启动文件系统和持久块存储管理的支持。

该项目是一个用于管理公钥基础设施和数字身份的命令行工具。它提供了一套全面的 X.509 证书生命周期管理套件，包括证书和签名请求的生成、签名、续订和吊销。 该工具通过专门的安全功能脱颖而出，例如将加密凭据绑定到 TPM 和 HSM 以进行硬件支持的身份证明。它还为机器身份安全提供专用支持，使用短寿命 SSH 证书和 mTLS 来保护非人类工作负载。 广泛的功能包括用于管理 JSON Web Tokens 和 Keys 的 JOSE 加密工具包、用于授权流程的 OAuth 和 OIDC 客户端，以及用于自动化 TLS 配置的 ACME 客户端。该工具集还涵盖通用加密实用程序、系统信任存储管理和证书颁发机构管理。 该工具链可以通过基于路径的插件发现进行扩展，以添加新的子命令。

Ring 是一个底层加密原语库和安全工具集，旨在构建可移植、安全的应用程序。它提供了一系列 RSA、椭圆曲线加密和认证对称加密的实现。 该项目专注于恒定时间加密，以防止敏感数据通过计时侧信道攻击泄露。它利用一种形式化验证工具从模板生成算术逻辑，确保数学正确性并消除手动实现错误。 该库包含生成用于密钥和盐值的加密强随机序列的功能，以及用于认证流加密的工具。它支持跨平台构建流程，允许使用特定的系统根目录和工具链为多种硬件架构编译二进制文件。 通过详尽的向量测试和扩展的加密检查套件来验证原语，从而保持正确性。