Shapeshifter-IPC is a library for Go implementing the IPC protocol from the Pluggable Transports 2.0 specification.

ZLint is a X.509 certificate linter that checks for consistency with standards (e.g. RFC 5280) and other relevant PKI requirements (e.g. CA/Browser Forum Baseline Requirements).

Package btcec implements elliptic curve cryptography needed for working with Bitcoin (secp256k1 only for now). It is designed so that it may be used with the standard crypto/ecdsa packages provided with Go. A comprehensive suite of test is provided to ensure proper functionality. Package btcec was originally based on work from ThePiachu which is licensed under the same terms as Go, but it has significantly diverged since then. The btcsuite developers original is licensed under the liberal ISC license.

Although this package was primarily written for btcd, it has intentionally been designed so it can be used as a standalone package for any projects needing to use secp256k1 elliptic curve cryptography.

Package imohash implements a fast, constant-time hash for files. It is based atop murmurhash3 and uses file size and sample data to construct the hash.

A Golang library to verify Minisign signatures.

This package implements RFC 7512 - the PKCS #11 URI Scheme; and errata specifications.

This repository contains Go packages related to cryptographic standards that are not included in the Go standard library.

GoPtLib is a library for writing Tor pluggable transports in Go.

This package provides a Go implementation of several rolling hashes.

Keyring provides utility functions for and a common interface to a range of secure credential storage services. Originally developed as part of AWS Vault, a command line tool for securely managing AWS access from developer workstations.

Currently Keyring supports the following backends: macOS/OSX Keychain, Windows pcredential store, Pass, Secret Service, KDE Wallet, Encrypted File. This package provides an command line interface (CLI) tool.

This package produces a collection of cryptographic utilities, including the following:

• drbg: a cryptographically secure pseudorandom number generator as specified in NIST SP 800-90A

• encoding/base32: a compact base32 encoder

• secretkey: user-friendly secret keys that can be used with secretbox

• salsa20: a streaming interface (cipher.Stream) for the Salsa20 stream cipher

• poly1305: a streaming interface (hash.Hash) for the Poly1305 one-time authenticator as specified in poly1305

PKI based identities for use in go-libp2p.

This package holds supplementary Go cryptography libraries, it's a fork of golang.org/x/crypto maintained by Tailscale.

Dust is an Internet protocol designed to resist a number of attacks currently in active use to censor Internet communication. While adherence to the theoretical maxims of cryptographic security is observed where possible, the focus of Dust is on real solutions to real attacks.

Boiler-plate to securely seed Go's random number generator (if possible).

This package provides a Golang implementation of the Fernet symmetric encryption specification. It handles key management, token creation, encryption/decryption, and integrity verification.

Package agent implements the ssh-agent protocol, and provides both a client and a server. The client can talk to a standard ssh-agent that uses UNIX sockets, and one could implement an alternative ssh-agent process using the sample server.

This package implements the edwards25519 elliptic curve in Go, exposing the necessary APIs to build a wide array of higher-level primitives.

This package provides an implementation of REALITY protocol, which is intented to eliminate the detectable TLS fingerprint on the server side, while still maintain the secrecy. It achieves full real TLS that is undistingwishable with the specified SNI to the middleman.

This package provides a port of the XXH3 hash algorithm to Golang. XXH3 is an extremely fast non-cryptographic hash algorithm.

This native Go library manages secrets via the freedesktop.org Secret Service DBus interface.

Native Go implementation of Austin Appleby's third MurmurHash revision (aka MurmurHash3). Reference algorithm has been slightly hacked as to support the streaming mode required by Go's standard Hash interface.

Package ssh wraps the crypto/ssh package with a higher-level API for building SSH servers. The goal of the API was to make it as simple as using net/http, so the API is very similar. It's alternative fork of https://github.com/gliderlabs/ssh.

This package provides a Go implementation of Google City Hash, originated from https://github.com/zhenjl/cityhash and https://github.com/zentures/cityhash projects.