The Olm library implements the Double Ratchet cryptographic ratchet. It is written in C and C++11, and exposed as a C API.

ccrypt is a utility for encrypting and decrypting files and streams. It was designed as a replacement for the standard unix crypt utility, which is notorious for using a very weak encryption algorithm. ccrypt is based on the Rijndael block cipher, a version of which is also used in the Advanced Encryption Standard (AES, see http://www.nist.gov/aes). This cipher is believed to provide very strong security.

This package provides a simple password-based encryption utility as a demonstration of the scrypt key derivation function. Scrypt is designed to be far more resistant against hardware brute-force attacks than alternative functions such as PBKDF2 or bcrypt.

Optimized C library for EC operations on curve secp256k1.

Features:

• secp256k1 ECDSA signing/verification and key generation.

• Additive and multiplicative tweaking of secret/public keys.

• Serialization/parsing of private keys, public keys, signatures.

• Constant time, constant memory access signing and public key generation.

• Derandomized ECDSA (via RFC6979 or with a caller provided function.)

• Very efficient implementation.

• Suitable for embedded systems.

• No runtime dependencies.

• Optional module for public key recovery.

• Optional module for ECDH key exchange.

• Optional module for Schnorr signatures according to BIP-340.

The currently provided message digest algorithms are:

• MD2

• MD4

• MD5

• RIPEMD-160

• SHA-1

• SHA-2 (SHA-256, SHA-384 and SHA-512)

CryFS encrypts your files, so you can safely store them anywhere. It works well together with cloud services like Dropbox, iCloud, OneDrive and others. CryFS creates an encrypted userspace filesystem that can be mounted via FUSE without root permissions. It is similar to EncFS, but provides additional security and privacy measures such as hiding file sizes and directory structure. However CryFS is not considered stable yet by the developers.

The libdecaf library is an implementation of elliptic curve cryptography using the Montgomery and Edwards curves Curve25519, Ed25519, Ed448-Goldilocks and Curve448, using the Decaf encoding.

libxcrypt is a modern library for one-way hashing of passwords. It supports a wide variety of both modern and historical hashing methods: yescrypt, gost-yescrypt, scrypt, bcrypt, sha512crypt, sha256crypt, md5crypt, SunMD5, sha1crypt, NT, bsdicrypt, bigcrypt, and descrypt.

This package provides a crate to sign files and verify signatures.

ISAAC (Indirection, Shift, Accumulate, Add, and Count) is a fast pseudo-random number generator. It is suitable for applications where a significant amount of random data needs to be produced quickly, such as solving using the Monte Carlo method or for games. The results are uniformly distributed, unbiased, and unpredictable unless you know the seed.

This package implements the same interface as Math::Random::ISAAC.

The signify utility creates and verifies cryptographic signatures using the elliptic curve Ed25519. This is a Linux port of the OpenBSD tool of the same name.

Botan is a cryptography library, written in C++11, offering the tools necessary to implement a range of practical systems, such as TLS/DTLS, PKIX certificate handling, PKCS#11 and TPM hardware support, password hashing, and post-quantum crypto schemes. In addition to the C++, botan has a C89 API specifically designed to be easy to call from other languages. A Python binding using ctypes is included, and several other language bindings are available.

The Olm library implements the Double Ratchet cryptographic ratchet. It is written in C and C++11, and exposed as a C API.

mkp224o generates valid ed25519 (hidden service version 3) onion addresses. It allows one to produce customized vanity .onion addresses using a brute-force method.

This package provides architecture-specific implementations of the CRC32C algorithm, which is specified in RFC 3720, section 12.1.

This package provides a cryptographic hash function that is fast, secure, parallelizable, capable of incremental updates.

Cryptsetup is a utility used to conveniently set up disk encryption based on the dm-crypt Linux kernel module. It is most often used to manage LUKS volumes but also supports plain dm-crypt volumes and loop-AES, TrueCrypt (including VeraCrypt extension), and BitLocker formats.

LUKS is the standard for hard disk encryption with the kernel Linux. It provides a standard on-disk-format compatible amongst distributions as well as secure management of multiple user passwords. LUKS stores all necessary setup information in the partition header to facilitate data transport and migration.

The package also includes the veritysetup and integritysetup utilities to conveniently configure the dm-verity and dm-integrity block integrity kernel modules.

Cryptsetup is a utility used to conveniently set up disk encryption based on the dm-crypt Linux kernel module. It is most often used to manage LUKS volumes but also supports plain dm-crypt volumes and loop-AES, TrueCrypt (including VeraCrypt extension), and BitLocker formats.

LUKS is the standard for hard disk encryption with the kernel Linux. It provides a standard on-disk-format compatible amongst distributions as well as secure management of multiple user passwords. LUKS stores all necessary setup information in the partition header to facilitate data transport and migration.

The package also includes the veritysetup and integritysetup utilities to conveniently configure the dm-verity and dm-integrity block integrity kernel modules.

Cryptsetup is a utility used to conveniently set up disk encryption based on the dm-crypt Linux kernel module. It is most often used to manage LUKS volumes but also supports plain dm-crypt volumes and loop-AES, TrueCrypt (including VeraCrypt extension), and BitLocker formats.

LUKS is the standard for hard disk encryption with the kernel Linux. It provides a standard on-disk-format compatible amongst distributions as well as secure management of multiple user passwords. LUKS stores all necessary setup information in the partition header to facilitate data transport and migration.

The package also includes the veritysetup and integritysetup utilities to conveniently configure the dm-verity and dm-integrity block integrity kernel modules.

foo2zjs is a printer driver for printers that use the Zenographics ZjStream wire protocol for their print data, often erroneously referred to as winprinters or GDI printers.

It supports Minolta/QMS Magicolor, Minolta Color PageWorks/Pro, HP LaserJet, and possibly other printers. See README for details.

SpliX is a set of CUPS drivers for printers that speak QPDL, also called SPL2. These include many laser printers sold by Samsung, Xerox, Lexmark, Toshiba, and Dell.

Colour printers need colour profile files to get better results. These cms files are provided by the printer's manufacturer and must be obtained and installed separately.

CUPS is a printing system that uses IPP to talk to printers and network clients. It also provides the old lp and lpr commands, a Web interface, and a C programming interface to manage printers and print jobs.

CUPS can print to both local (USB, serial, even parallel) and networked printers. Almost any modern printer supports IPP Everywhere, sometimes sold as AirPrint, and is supported out of the box. Older printers can be supported through legacy PPD-based printer drivers called ``printer applications''. These must be installed separately.

This package provides the org.opensuse.CupsPkHelper.Mechanism DBus system service which uses cups-pk-helper-mechanism. This package should only be used as part of the Guix cups-pk-helper service.

Hewlett-Packard printer drivers and PostScript Printer Descriptions (PPDs).