Paranoid Crypto github.com ↗

Google's open-source library for detecting weaknesses in cryptographic keys and signatures.

LibrarySecurity & privacycryptographykey-auditingweak-keys

Recommended in 2 threads

CVE-2026-111943: Compromised Intermediate Certificate Authority
nvd.nist.gov · 4 days ago
It was the tool that found the weak eMudhra intermediates.
Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
scotthelme.co.uk · 5 days ago
The original reporter found the weak eMudhra keys by running it out of the box on the CCADB corpus.

AWS-LC Security & privacy
AWS's general-purpose cryptographic library derived from BoringSSL.
1 thread
BoringSSL Security & privacy
Google's fork of OpenSSL used in Chrome and Android.
1 thread
Privacy Guides ↗Security & privacy
A community website recommending privacy tools, including VPN providers.
1 thread
sandbox-runtime ↗Security & privacy
Anthropic's lightweight sandbox for restricting filesystem and network access of processes.
1 thread
Infisical Security & privacy
An open source secrets management platform.
1 thread
OutGuess ↗Security & privacy
A steganography tool that hides data in the redundant bits of JPEG images.
1 thread
AWS WAF Security & privacy
Amazon's managed web application firewall service.
1 thread
AppArmor Security & privacy
A Linux kernel security module that confines programs with per-application profiles.
1 thread

Canarytokens ↗
Free service for planting tripwire tokens that alert you when they are accessed.
2 threads
Cloudflare WAF ↗
Cloudflare's managed web application firewall.
2 threads
Convergence ↗
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
2 threads
Ente Photos
An end-to-end encrypted photo storage service.
2 threads
Lockdown Mode ↗
An optional iOS hardening mode that restricts attachments, web features and connections.
2 threads
SELinux ↗
A Linux kernel security module for mandatory access control.
2 threads
Tor
An anonymity network that routes traffic through volunteer relays.
2 threads
YubiKey
A hardware security key supporting FIDO2, PIV and OpenPGP.
2 threads
1Password ↗
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
1 thread
ACME Renewal Information
An ACME extension that lets CAs tell clients when to renew certificates early.
1 thread
AWS WAF
Amazon's managed web application firewall service.
1 thread
AWS-LC
AWS's general-purpose cryptographic library derived from BoringSSL.
1 thread

Link from a commenter, not checked or endorsed by us: ↗ https://github.com/google/paranoid_crypto