Botan : A C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others

Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports SSL/TLS, X.509 certificates and CRLs, and PKCS #10 certificate requests, and has a high level filter/pipe message processing system. The library is easily portable to most systems and compilers, and includes a substantial tutorial and API reference.

• Licenses : BSD Revised
• Operating Systems : Linux, Mac OS, X Windows, Windows, FreeBSD, NetBSD, Solaris
• Implementation : C++, Assembly

UsbCryptFormat : A graphical user interface (GUI) for the encryption of USB flash drives or external hard drives

UsbCryptFormat is a graphical user interface (GUI) for the encryption of USB flash drives or external hard drives. It allows the user to reformat a USB flash drive, an SD card, or an external hard drive with an encrypted filesystem very easily and without the danger of destroying data on an internal hard drive because of incautious handling of device names. So it is usable even for a layperson.

• Licenses : GPL
• Operating Systems : Debian GNU/Linux Ubuntu
• Implementation : bash

RetroShare : A cross-platform private P2P sharing program

RetroShare is a cross-platform private P2P sharing program. It lets you share securely with your friends, using a web-of-trust to authenticate peers and OpenSSL to encrypt all communication. RetroShare provides file sharing, chat, messages, and channels.

• Licenses : LGPL GPL
• Operating Systems : POSIX, Linux, Windows, mac
• Implementation : C++, Qt

XML Security Library : A C library based on LibXML2

XML Security Library is a C library based on LibXML2. It provides an implementation for major XML security standards: XML Digital Signature and XML Encryption.

• Licenses : MIT/X
• Implementation : C

RetroShare : A cross-platform private P2P sharing program

RetroShare is a cross-platform private P2P sharing program. It lets you share securely with your friends, using a web-of-trust to authenticate peers and OpenSSL to encrypt all communication. RetroShare provides file sharing, chat, messages, and channels.

• Licenses : LGPL, GPL
• Operating Systems : POSIX, Linux, Windows, mac
• Implementation : C++, Qt

Portable OpenSSH : A Unix/Linux port of OpenBSD's excellent OpenSSH, a full implementation of the SSH1 and SSH2 protocols

Portable OpenSSH is a Unix/Linux port of OpenBSD's excellent OpenSSH, a full implementation of the SSH1 and SSH2 protocols. It includes sftp client and server support.

• Licenses : BSD Revised, BSD Original

strongSwan : A complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels

strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It also fully supports the new IKEv2 protocol with Linux 2.6 kernels. It interoperates in both IKEv1 and IKEv2 mode with most other IPsec-based VPN products. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

• Licenses : GPL
• Operating Systems : POSIX, Linux
• Implementation : C

Graphical certification authority : An interface for managing RSA and DSA keys, certificates, certificate signing requests, revocation lists and temp

Graphical certification authority is an interface for managing RSA and DSA keys, certificates, certificate signing requests, revocation lists and templates. It uses the OpenSSL and Qt4 libraries. Certificates and requests can be created and signed and many x509v3 extensions can be added. XCA supports multiple root and intermediate Certificate authorities. The CAs can be used to create CRLs and extend certificates. The following file-formats are supported: PEM, DER, PKCS#7, PKCS#8, PKCS#10, PKCS#12, SPKAC.

• Licenses : BSD Revised
• Operating Systems : POSIX, BSD, FreeBSD, Mac OS X, Linux, Windows
• Implementation : C++

Paperkey : An OpenPGP key archiver

Paperkey is a reasonable way to achieve a long term backup of OpenPGP (GnuPG, PGP, etc) keys is to print them out on paper. Due to metadata and redundancy, OpenPGP secret keys are significantly larger than just the "secret bits". In fact, the secret key contains a complete copy of the public key. Since the public key generally doesn't need to be backed up in this way (most people have many copies of it on various keyservers, Web pages, etc), only extracting the secret parts can be a real advantage. Paperkey extracts just those secret bytes and prints them. To reconstruct, you re-enter those bytes (whether by hand or via OCR), and paperkey can use them to transform your existing public key into a secret key.

• Licenses : GPLv2
• Operating Systems : Mac OS X, Windows, Cygwin, OS Independent, POSIX, Unix
• Implementation : C

pam_passwdqc : A simple password strength checking module for PAM-aware password changing programs, such as passwd

pam_passwdqc is a simple password strength checking module for PAM-aware password changing programs, such as passwd(1). In addition to checking regular passwords, it offers support for passphrases and can provide randomly generated ones. All features are optional and can be (re-)configured without rebuilding. The package additionally includes libpasswdqc (a password/passphrase strength checking library), pwqcheck (a standalone password/passphrase strength checking program), and pwqgen (a standalone random passphrase generator program).

• Licenses : BSD Revised
• Operating Systems : POSIX, Linux, Solaris, BSD, FreeBSD, HP-UX
• Implementation : C

DeleGate : A multi-purpose application level gateway or proxy server

DeleGate is a multi-purpose application level gateway or proxy server that mediates communication of various protocols, applying cache and conversion for mediated data, controlling access from clients, and routing toward servers. It translates protocols between clients and servers, converting between IPv4 and IPv6, applying SSL (TLS) to arbitrary protocols, merging several servers into a single server view with aliasing and filtering. It can be used as a simple origin server for some protocols (HTTP, FTP, and NNTP).

• Licenses : Free for non-commercial use
• Operating Systems : Unix, Mac OS X, Windows, Mobile
• Implementation : C

Botan : A C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others

Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports X.509 certificates and CRLs, and PKCS #10 certificate requests, and has a high level filter/pipe message processing system. The library is easily portable to most systems and compilers, and includes a substantial tutorial and API reference.

• Licenses : BSD Revised
• Operating Systems : POSIX, Linux, BeOS, Mac OS X, Windows, Unix
• Implementation : C++, Assembly

YAPET : A small text based password manager

YAPET is a small text based password manager. It features the Blowfish encryption algorithm and runs on most modern Unixes.

• Licenses : GPLv3
• Operating Systems : POSIX, BSD, FreeBSD, Linux, Solaris, Unix
• Implementation : C++

Botan : A C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others

Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports X.509 certificates and CRLs, and PKCS #10 certificate requests, and has a high level filter/pipe message processing system. The library is easily portable to most systems and compilers, and includes a substantial tutorial and API reference.

• Licenses : BSD Revised
• Operating Systems : POSIX, Linux, BeOS, Mac OS X, Windows, Unix
• Implementation : C++, Assembly

The CyaSSL software package : A fast, dual-licensed implementation of SSL for embedded and small footprint devices

The CyaSSL software package is a fast, dual-licensed implementation of SSL for embedded and small footprint devices. It includes SSL client libraries and an SSL server implementation. It supports multiple APIs including an OpenSSL compatibility interface. TLS 1.1 is supported along with cipher suites for AES, 3DES, RC4, HC-128, and RABBIT.

• Licenses : GPL
• Operating Systems : Mac OS X, Windows, POSIX, Linux, Unix
• Implementation : C

SILC (Secure Internet Live Conferencing) : A protocol which provides secure conferencing services in the Internet

SILC (Secure Internet Live Conferencing) is a protocol which provides secure conferencing services in the Internet. It can be used to send any kind of messages, in addition to normal text messages. This includes multimedia messages like images, video, and audio stream. All messages in the SILC network are encrypted and authenticated, and messages can also be digitally signed. SILC protocol supports AES, SHA-1, PKCS#1, PKCS#3, X.509, OpenPGP, and is being developed in the IETF. The software is delivered as SILC Client for end users, SILC Server for system administrators, and SILC Toolkit for application developers.

• Licenses : GPL, BSD Revised
• Operating Systems : SymbianOS, OS Independent
• Implementation : C

sha_digest : An implementation of the secure hash algorithms SHA-1, SHA-224, SHA-256, SHA 384, and SHA-512 as described in the FIPS 180-3 standard

sha_digest is an implementation of the secure hash algorithms SHA-1, SHA-224, SHA-256, SHA 384, and SHA-512 as described in the FIPS 180-3 standard. It is written in standard compliant C (ANSI C89), thread-safe, and system- and architecture-agnostic. The package can be used as a shared library or its modular components can be integrated directly into other projects. It also comes with an example program that supplies the same functionalities as the GNU coreutils SHA implementations.

• Licenses : GPLv2
• Operating Systems : OS Independent
• Implementation : C

XML Security Library : A C library based on LibXML2

XML Security Library is a C library based on LibXML2. It provides an implementation for major XML security standards: XML Digital Signature and XML Encryption.

• Licenses : MIT/X
• Implementation : C

The OpenSource IPsec-based VPN Solution for Linux

strongSwan is a complete IPsec and IKEv1 implementation for Linux 2.4 and 2.6 kernels. It also fully supports the new IKEv2 protocol with Linux 2.6 kernels. It interoperates in both IKEv1 and IKEv2 mode with most other IPsec-based VPN products. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface. A unique feature is the use of X.509 attribute certificates to implement advanced access control schemes based on group memberships.

• Licenses: GPL
• Operating Systems: POSIX, Linux
• Implementation: C