Topics / #cryptography
Cryptography projects on GitHub
Encryption, hashing and cryptographic algorithm implementations
As of , the most-starred Cryptography projects on GitHub are javascript-algorithms (196.7K stars), bitcoin (90.4K stars) and cs-self-learning (76.3K stars). GitHub.Locker tracks 79 Cryptography repositories with 1.3M stars combined. The fastest-growing on October 16 was Anthropic-Cybersecurity-Skills, with +71 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
+71Anthropic-Cybersecurity-Skills
mukul975/Anthropic-Cybersecurity-Skills · ★ 34.6KAn open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.
+59awesome-reverse-engineering
morluto/awesome-reverse-engineering · ★ 628A curated list of reverse-engineering tools and learning resources covering binaries, applications, firmware, file formats, and protocols, organized by the task you need to do rather than alphabetically.
+33CF-Workers-TGProxy
ToiCF/CF-Workers-TGProxy · ★ 886A single-file Cloudflare Workers script that acts as Telegram's own Web Proxy (td web-proxy) backend, relaying the WebSocket lanes opened by Telegram Desktop/Android's embedded webview straight into Telegram's own Web K (KWS) channel.
+26ente
ente/ente · ★ 29.4KEnte is a fully open source, end-to-end encrypted cloud: a place to keep photos, documents and 2FA codes without having to trust the provider. It ships three apps so far: Photos, Locker and Auth.
The all-time top
79 projects · by stars
- 196.7K
#1 · trekhleb/javascript-algorithmsjavascript-algorithms
A large collection of JavaScript implementations of classic algorithms and data structures, where each one has its own folder with code, tests, and a README explaining the theory and further reading links.
- 90.4K
#2 · bitcoin/bitcoinbitcoin
Bitcoin Core is the reference client for the Bitcoin peer-to-peer network: it connects to that network to download and fully validate every block and transaction. It also ships an optional wallet and graphical user interface.
- 76.3K
#3 · PKUFlyingPig/cs-self-learningcs-self-learning
A free, open-source online guide that curates the best open courseware from top international universities so anyone can self-study computer science from scratch, aiming to turn a beginner into a well-rounded programmer in 2-3 years.
- 4

Anthropic-Cybersecurity-Skills
34.6Kmukul975/Anthropic-Cybersecurity-Skills · PythonAn open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.
- 5

JavaScript
34.3KTheAlgorithms/JavaScript · JavaScriptA JavaScript implementation of classic algorithms and data structures, built for beginners who want readable, well-organized reference code.
- 6

anoma
33.6Kanoma/anoma · ElixirAnoma is the reference implementation of the Anoma protocol - a distributed, peer-to-peer system combining blockchain-style consensus and cryptography, written mainly in Elixir with a Rust component.
- 7

certbot
33.3Kcertbot/certbot · PythonCertbot is EFF's command-line tool that automatically fetches a free TLS certificate from Let's Encrypt and deploys it to your web server to enable HTTPS, and it can also work with any other certificate authority that speaks the ACME protocol.
- 8

openssl
31Kopenssl/openssl · COpenSSL is an open source toolkit for TLS, DTLS and QUIC, built on a full-strength general purpose cryptographic library you can also use on its own. It descends from the SSLeay library by Eric Young and Tim Hudson.
- 9

hutool
30.2Kchinabugotech/hutool · JavaHutool calls itself 'a set of tools that keep Java sweet': a rich, easy-to-use Java utility library whose tool classes help you get everyday development tasks done quickly.
- 10

ente
29.4Kente/ente · DartEnte is a fully open source, end-to-end encrypted cloud: a place to keep photos, documents and 2FA codes without having to trust the provider. It ships three apps so far: Photos, Locker and Auth.
- 11

fhevm
24.8Kzama-ai/fhevm · RustFHEVM is a full-stack framework from Zama for confidential smart contracts: it integrates Fully Homomorphic Encryption (FHE) with EVM-compatible blockchains so encrypted data can be processed directly onchain.
- 12
age
23.9KFiloSottile/age · Goage is a simple, modern and secure file encryption tool and Go library, with small explicit keys, no config options, and UNIX-style composability.
- 13

sops
23.4Kgetsops/sops · GoSOPS (Secrets OPerationS) is an editor for encrypted files that supports YAML, JSON, ENV, INI and BINARY formats, encrypting values with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, or PGP.
- 14
Ciphey
21.7Kbee-san/Ciphey · Rustciphey automatically decrypts ciphertext without knowing the key or cipher, decodes encodings and cracks hashes. It is the Rust-built next generation of Ciphey — roughly 7x faster per decode — and the same team intends it to fully replace the original.
- 15

whitepaper
20.1Kunicitynetwork/whitepaper · TeXThis repository hosts the Unicity protocol whitepaper and its companion papers, describing the 'Autonomous Agentic Internet', the protocol's system model, tokenomics, and how the network components fit together.
- 16

simplex-chat
19.6Ksimplex-chat/simplex-chat · HaskellSimpleX Chat is a private messaging app for phones and desktops, and the first messaging network that uses no user identifiers of any kind — nobody can link your conversations to who you are. It is 100% private by design.
- 17
gun
19.1Kamark/gun · JavaScriptGUN is an open source cybersecurity protocol for syncing decentralized graph data — a peer-to-peer database that keeps app data in sync across browsers and devices, with no master server and no single source of truth.
- 18

interview
18.4KOlshansk/interviewA curated collection of links — books, courses, articles, question banks, mock-interview services, and videos — meant to help you prepare for a technical interview, especially at companies like Google and Facebook.
- 19

awesome-hacking
17.3Kcarpedm20/awesome-hackingA curated list of hacking tutorials, tools and resources covering system exploitation, reverse engineering, web security, network security, forensics, cryptography and wargames.
- 20
fabric
16.7Khyperledger/fabric · GoHyperledger Fabric is an enterprise-grade permissioned distributed ledger (blockchain) framework for building distributed ledger solutions and applications, with a modular architecture that balances confidentiality, resiliency and scalability.
- 21

diem
16.7Kdiem/diem · RustDiem Core is the prototype implementation of the Diem blockchain (formerly Libra) — a decentralized, programmable distributed ledger meant to provide financial infrastructure for a global payment network.
- 22

crypto-js
16.4Kbrix/crypto-js · JavaScriptCrypto-js is a JavaScript library of crypto standards — hashes, ciphers like AES, PBKDF2 key derivation and encodings such as Base64, usable from Node.js and the browser.
- 23

cryptomator
16.3Kcryptomator/cryptomator · JavaCryptomator is a free, open-source app that encrypts your files on your own device before they reach cloud storage, so your provider only ever stores data it cannot read.
- 24

javascript-obfuscator
16.3Kjavascript-obfuscator/javascript-obfuscator · TypeScriptA free, powerful obfuscator for JavaScript and Node.js that protects source code with identifier renaming, string encryption, dead code injection, and control flow flattening.
- 25

free-books
16Kruanyf/free-booksThis is a curated, Chinese-language collection of free computer-science books found online, grouped into eight categories: web development, systems administration, programming languages, databases, software development, artificial intelligence, math theory, and other topics.
- 26

sismo-badges
15.9Ksismo-core/sismo-badges · TypeScriptThe smart contracts of the Sismo Protocol, a badge minting protocol on Ethereum. Attestations (claims about accounts) are recorded in a registry and surfaced as non-transferable Badge tokens.
- 27

OpenCorePkg
15.6Kacidanthera/OpenCorePkg · COpenCorePkg is OpenCore, a UEFI bootloader bundled with a development SDK, best known for booting and patching macOS on non-Apple hardware, while also providing shared UEFI libraries used by other Acidanthera projects.
- 28

bounty-program
15.2Kzama-ai/bounty-programZama's bounty program: it pays developers to solve Fully Homomorphic Encryption (FHE) challenges built on Zama's open source libraries, as an experiment to advance the whole FHE field.
- 29

solana
15Ksolana-labs/solana · RustThis is the original Rust implementation of the Solana blockchain validator and ledger — a web-scale, high-performance blockchain protocol for decentralized apps and marketplaces. The repo is now archived and kept only as a historical reference.
- 30

libsodium
14Kjedisct1/libsodium · CLibsodium is an easy-to-use software library providing cryptographic operations like encryption, decryption, digital signatures, and secure password hashing. It is a portable, cross-compilable fork of NaCl that keeps API compatibility while improving usability.
- 31

opennhp
13.9KOpenNHP/opennhp · GoOpenNHP is a lightweight, cryptography-powered, open-source Zero Trust toolkit: it hides server ports, IP addresses, and domain names so your infrastructure stays invisible until a client is cryptographically authorized.
- 32

borg
13.9Kborgbackup/borg · PythonBorgBackup is a deduplicating backup program that supports optional compression and authenticated encryption. It's designed to let you run efficient, secure daily backups since it only stores changed data.
- 33

tink
13.5Ktink-crypto/tink · JavaTink is an open source cryptographic library whose APIs are designed to be secure, easy to use correctly, and hard to misuse. It was built by cryptographers and security engineers at Google.
- 34

Halfrost-Field
13.2Khalfrost/Halfrost-Field · GoHalfrost-Field is a personal technical blog archive by halfrost containing long-form deep-dive articles on source code analysis, system design, and engineering topics such as Go internals, vLLM/LLM serving, machine learning notes, and network protocols.
- 35

YubiKey-Guide
12.5Kdrduh/YubiKey-Guide · HTMLA community guide for using a YubiKey hardware security key to store GnuPG (PGP) keys and SSH keys, so cryptographic secrets live on a physical device instead of a disk.
- 36

Signal-iOS
12.3Ksignalapp/Signal-iOS · SwiftSignal iOS is the free, open source messaging app for private communication with friends on iPhone, part of the Signal family which also ships for Android and Desktop.
- 37

nostr
12.1Knostr-protocol/nostrNostr (Notes and Other Stuff Transmitted by Relays) is an open protocol for a censorship-resistant global social network. This repo holds the idea and spec, not an app.
- 38

awesome-ctf
11.9Kapsdehal/awesome-ctf · JavaScriptA curated list of frameworks, libraries, tools, and resources for Capture The Flag (CTF) competitions, covering everything from building challenges to solving them.
- 39

VeraCrypt
11.8Kveracrypt/VeraCrypt · CVeraCrypt is free disk encryption software based on TrueCrypt, with added security enhancements. It lets you create encrypted virtual disks or encrypt entire partitions and system drives.
- 40

quic-go
11.8Kquic-go/quic-go · Goquic-go is a pure Go implementation of the QUIC transport protocol (RFC 9000/9001/9002), plus HTTP/3 (RFC 9114) built on top of it.
- 41

awesome-c
11.6Koz123/awesome-cA curated list of awesome C frameworks, libraries, resources and other 'shiny things' for the C programming language, organized by category like AI, databases, compilers, crypto, and more.
- 42

ethereum-sdk
11.3KQuipNetwork/ethereum-sdk · SolidityQuip Network SDK provides the smart contracts and TypeScript SDK for interacting with Quip Network's EVM-based smart contracts, which rely on post-quantum hash-based signatures (WOTS+) instead of standard ECDSA keys.
- 43

cpp-sdk
11.3KQuipNetwork/cpp-sdk · C++The Quip C++ SDK is a client library and CLI tool for interacting with Quip smart contracts on Ethereum, letting you deploy and manage 'Quip' wallets that use post-quantum Winternitz signatures instead of standard ECDSA keys.
- 44

hashsigs-rs
11.2KQuipNetwork/hashsigs-rs · Rusthashsigs-rs is a Rust workspace implementing hash-based post-quantum signature schemes - WOTS+ (legacy), the stateless SPHINCS+C scheme, and a hybrid construction called SHRINCS that combines a cheap stateful path with an expensive stateless recovery path.
- 45

hashsigs-solidity
11.2KQuipNetwork/hashsigs-solidity · SolidityA Solidity implementation of hash-based post-quantum signatures using the Winternitz One-Time Signature Plus (WOTS+) scheme, meant to be used inside blockchain smart contracts.
- 46

hashsigs-ts
11.2KQuipNetwork/hashsigs-ts · TypeScriptA TypeScript implementation of hash-based signatures, specifically WOTS+ (Winternitz One-Time Signature Plus), a post-quantum signature primitive.
- 47

hashsigs-py
11.2KQuipNetwork/hashsigs-py · PythonIt is a Python package implementing WOTS+ (Winternitz One-Time Signature Plus), a hash-based post-quantum digital signature scheme, with optional Rust acceleration via hashsigs-rs.
- 48

jjwt
11.1Kjwtk/jjwt · JavaJJWT is a pure Java library for creating, parsing, and verifying JSON Web Tokens (JWTs), signed/encrypted JWTs (JWS/JWE), and JSON Web Keys (JWKs) on the JVM and Android.
- 49

monero
10.9Kmonero-project/monero · C++Monero (monero-project/monero) is the core C++ implementation of Monero, a private, secure, and untraceable decentralized cryptocurrency.
- 50
chia-blockchain
10.8KChia-Network/chia-blockchain · PythonChia-blockchain is the official Python implementation of the Chia cryptocurrency, bundling full node, farmer, harvester, timelord, and wallet software.
- 51

Signal-Server
10.7Ksignalapp/Signal-Server · JavaThis is the server-side backend that powers Signal Private Messenger, handling the server logic that the official Android, Desktop, and iOS Signal apps connect to.
- 52
jwt-go
10.7Kdgrijalva/jwt-go · GoA Go library implementing JSON Web Tokens (JWT): it parses, verifies, generates, and signs tokens.
- 53

CryptoSwift
10.6Kkrzyzanowskim/CryptoSwift · SwiftA growing collection of standard and secure cryptographic algorithms implemented in pure Swift: hashes, ciphers, RSA, message authenticators, key-derivation functions, plus helpers for String and Data.
- 54

how-to-secure-anything
10.2Kveeral-patel/how-to-secure-anythingA curated README that documents a systematic process for security engineering: how to secure any kind of system, whether it is a medieval castle, an art museum, or a computer network, by thinking about adversaries, policies, models, and defenses.
- 55
PySyft
10KOpenMined/PySyft · PythonPySyft (the 'syft' package) lets you perform data science on data that stays on someone else's server, so researchers can get answers from data without needing a copy or direct access to it.
- 56

skills
7.6Ktrailofbits/skills · PythonThis is Trail of Bits' Claude Code plugin marketplace: a curated collection of AI-agent skills for security research, vulnerability detection, and audit workflows, covering everything from smart contract audits to malware analysis and reverse engineering.
- 57

Claude-Red
7.6KSnailSploit/Claude-Red · Pythonclaude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.
- 58

sphere-sdk
5.4Kunicity-sphere/sphere-sdk · TypeScriptSphere SDK is a modular TypeScript SDK that gives autonomous AI agents an identity, a wallet, and the ability to pay, negotiate, and settle with other agents peer-to-peer on the Unicity network.
- 59

wifit3
2.4Kderv82/wifit3 · Pythonwifit3 is a standalone Wi-Fi security auditing tool that scans networks, captures WPA/WPA2 handshakes, and exploits WPS/WEP weaknesses using a supported USB Wi-Fi adapter, without relying on aircrack-ng or OS kernel drivers.
- 60

CF-Workers-TGProxy
886ToiCF/CF-Workers-TGProxyA single-file Cloudflare Workers script that acts as Telegram's own Web Proxy (td web-proxy) backend, relaying the WebSocket lanes opened by Telegram Desktop/Android's embedded webview straight into Telegram's own Web K (KWS) channel.
- 61

artifactproof
858MaxHu-xuan/artifactproof · PythonArtifactProof is an offline, local command-line tool that hashes a final PPTX with SHA-256, runs basic structural checks, and binds caller-supplied QA evidence into a tamper-evident HMAC-SHA256 receipt, so you can reverify before delivery or after receipt that nothing was swapped.
- 62

nordef-matrix-open-control
741MORTEN-BUUR/nordef-matrix-open-control · PythonA model-independent safety belt for AI agents: it puts deterministic 0/1/2 policy decisions, Ed25519-signed human approval, replay protection, and a hash-chained evidence log outside the language model itself.
- 63

tiktok-web-signature
713n1tr00-10/tiktok-web-signature · PythonA reverse-engineered implementation of TikTok's web API signature algorithm, generating valid X-Dynosaur, X-Gnarly and X-Bogus headers that TikTok's servers accept.
- 64

wcdb-key-tool
652TANGandXUE/wcdb-key-tool · PythonA single-purpose Python tool that pulls the encryption keys out of WeChat's local WCDB/SQLCipher4 chat databases on Linux, macOS and Windows, so you can decrypt your own chat history.
- 65

awesome-reverse-engineering
628morluto/awesome-reverse-engineeringA curated list of reverse-engineering tools and learning resources covering binaries, applications, firmware, file formats, and protocols, organized by the task you need to do rather than alphabetically.
- 66
getcontact-cli
613xdreizein666/getcontact-cli · PythonGetContact CLI is a Python command-line tool that talks directly to the GetContact phone-lookup API, letting you check a number's display name, tags and email without installing the Android app or using a browser.
- 67

scuttle
521Continuum-AI-Corp/scuttle · GoScuttle is an open-source Go library that encrypts sensitive fields in application logs before they ever reach storage, so copies that survive in databases, replicas, snapshots and backups stay unreadable even if the datastore is later compromised.
- 68

tiktok-signature
399n1tr00-10/tiktok-signature · PythonThis is a Python library that generates the signatures TikTok's Web API requires on requests — X-Gnarly, X-Bogus, and X-Dynosaur — matching SDK version 5.1.2 (build 1.0.0.316).
- 69
playport
283youcci/playport · KotlinPlayPort is a server-side CarPlay receiver that runs on a Mac and turns any browser on your network into a wireless CarPlay screen — touch, knob, media keys, Siri and calls included, with no dongle or app install required.
- 70
auth
232yielded-dev/auth · TypeScriptA composable authentication, session, and identity workflow library built specifically for the Effect ecosystem. You define your auth contract with Schema and wire up infrastructure through Effect Layers.
- 71

ablation
214Ablation-Tool/ablation · PythonAblation is a reverse engineering framework that provides the same core disassembly, decompilation, and binary analysis capabilities as industry tools like Ghidra, IDA Pro, and Binary Ninja, and it's built to be driven by an AI coding agent.
- 72

open-crypto-puzzles
203floflo777/open-crypto-puzzles · PythonA catalog of real, unsolved crypto puzzles with wallets still funded on-chain (about 6 BTC, 13 ETH, 1,900 AR across 31 puzzles), each with the author's own research: the escrow address, the puzzle author's clues, what has been tried, and where the trail goes cold.
- 73

nuvex
195NuvexNetwork/nuvex · RustNuvex is a Solana-native protocol for verifiable compute and oracle data: programs accept a job, an input, constraints, and a callback, and the first supported job is randomness fulfilled by a staked node with an ECVRF proof.
- 74

CrypTool-2
168CrypToolProject/CrypTool-2 · C#CrypTool 2 (CT2) is a free open-source e-learning program for Windows that visualizes cryptography and cryptanalysis — from classic ciphers like Enigma to modern crypto — for interactive learning and academic study.
- 75

docker
165decionis/docker · GoDecionis for Docker is an execution-authority layer for AI agents: before an agent performs a sensitive action like deploying infrastructure or calling a privileged MCP tool, it checks a deterministic policy and returns PROCEED, HOLD, or BLOCK.
- 76
hush
132Stellar-hush/hush · TypeScriptHush is an open-source beta for private, programmable email built on Stellar identity. Senders must satisfy a recipient-chosen policy (trusted access, verification, explicit approval, or postage) before a message is delivered, and the system produces verifiable delivery receipts.
- 77

turbocrypt
129jedisct1/turbocrypt · ZigTurboCrypt is a fast, easy-to-use command-line tool that encrypts and decrypts files, Git repositories, and directory trees — from a single document to a whole directory of backups.
- 78

BlockNetDiamond
117lgomesappj/BlockNetDiamond · JavaScriptBlockNetDiamond is a library that implements a distributed ledger with a consensus-driven architecture, aimed at developers who need a straightforward building block for cryptographic security.
- 79

NSNFSSSFSFN
103ucsd-hacc/NSNFSSSFSFN · PythonThis repository contains the code accompanying the paper (eprint 2026/2131) implementing a variant of the number field sieve that lets an attacker with temporary access to a raw RSA signing oracle permanently forge signatures or decrypt ciphertexts, without ever factoring the public modulus N.
Related topics
Often tagged together
- security976
- open-source5,666
- encryption256
- linux4,184
- macos3,544
- library1,587
- windows3,403
- cross-platform2,623
- python2,383
- developer-tools2,924
- privacy886
- self-hosted1,929
- blockchain112
- cli2,227
- security-tools282
- decentralized70
- mit3,312
- apache-2.01,434
- networking565
- cybersecurity245
- smart-contracts59
- authentication241
- reverse-engineering221
- web384