Software Map

Nettle is a cryptographic library that is designed to fit easily in more or less any context: in crypto toolkits for object-oriented languages (C++, Python, Pike, etc.), in applications like LSH or GNUPG, or even in kernel space. In most contexts, you need more than the basic cryptographic algorithms; you also need some way to keep track of available algorithms and their properties and variants. You often have some algorithm selection process, often dictated by a protocol you want to implement. And as the requirements of applications differ in subtle and not so subtle ways, an API that fits one application well can be a pain to use in a different context, which is why there are so many different cryptographic libraries around. Nettle tries to avoid this problem by doing one thing, the low-level crypto stuff, and providing a simple but general interface to it. In particular, Nettle doesn't do algorithm selection. It doesn't do memory allocation. It doesn't do any I/O. The idea is that one can build several application- and context-specific interfaces on top of Nettle and share the code, testcases, benchmarks, documentation, etc.

WebCert is a Web application to generate and
manage digital certificates in cases where no
"full" CA is needed. It is very handy for those
who need a cert quickly and don't have the hang of
the OpenSSL command line. It is very easy to
deploy and to use.

SSL-Explorer is an SSL VPN solution that provides
users with WebDAV file access, intranet Web site
proxying, Active Directory authentication, and
Java application deployment using a standard Web
browser.

DIIT provides a simple tool that can hide a message inside a 24-bit colour image so that knowing how it was embedded, or performing statistical analysis, does not make it any easier to find the concealed information. It also provides a framework for implementing other steganography algorithms for use in the tool.

DJIGZO Email Encryption Gateway is a centrally managed email server that encrypts and decrypts incoming and outgoing email at the gateway level. Djigzo currently supports two encryption standards: S/MIME and PDF encryption. The built-in Data Leak Prevention (DLP) module can be used to prevent certain information from leaving the organization via email. DLP can be configured to filter on credit card numbers, bank account numbers, excessive amounts of email addresses or other personal information in one email message, and more. DJIGZO can be installed on most Linux and Unix based systems. Installation packages are available for Ubuntu, Debian, Red Hat and CentOS. A ready to run virtual appliance for VMware and Hyper-V is available. An add-on for BlackBerry is available.

WizCrypt is a cross-platform encryption tool. It
requires no configuration, uses industry standard
RC4 and MD5 encryption, and can be used in scripts
for batch operation. It also exposes public APIs that can be used to embed WizCrypt inside any Java application.

Linux VPN Masquerade allows you to use an IPSec or PPTP VPN host (client or server) behind a Linux masquerading firewall. No more hogging the cable modem when you need to connect to the office network.

Gaim-Encryption provides transparent RSA encryption as a
Gaim plugin using the Mozilla NSS libraries. Key sizes up to
4096 bits are supported. It works with Gaim on most
platforms, including Windows. Keys are automatically
generated, transmitted, and saved.

Gringotts is a small utility that allows you to
jot down sensitive data
(passwords, PINs, small files, etc.) in an
easy-to-read, easy-to-access,
and most of all very secure form. It lets the user
choose from among
eight strong encryption algorithms (RIJNDAEL-128,
RIJNDAEL-256, SERPENT,
TWOFISH, CAST-256, SAFER+, LOKI97, 3DES), two
hashing algorithms (SHA1,
RIPEMD 160), and two compression techniques (ZLib
and BZip2) with four
compression ratios. It allows the user to use any
file or an entire
floppy disk as a password, as an alternative to
the usual text string.

PortableSigner is a Java application to sign
normal PDF files with a
digital signature (X.509). You can verify your
signature by opening the
PDF file in a standard Adobe Reader without any
plugins.

OpenPGP Webmail is a set of PHP scripts which allows anonymous Web users to send encrypted email to anyone with PGP or GPG keys. It is designed to run over SSL, and has a key search facility built in. GnuPG is required to do the encryption.

The project is now abandonware. Anyone can take it over if they like.

A reasonable way to achieve a long term backup of
OpenPGP (GnuPG, PGP, etc) keys is to print them
out on paper. Due to metadata and redundancy,
OpenPGP secret keys are significantly larger than
just the "secret bits". In fact, the secret key
contains a complete copy of the public key. Since
the public key generally doesn't need to be backed
up in this way (most people have many copies of it
on various keyservers, Web pages, etc), only
extracting the secret parts can be a real
advantage. Paperkey extracts just those secret
bytes and prints them. To reconstruct, you
re-enter those bytes (whether by hand or via OCR),
and paperkey can use them to transform your
existing public key into a secret key.

The Enhanced File Crypt/eXtended File Stealth System (EFC/XFSS) makes
your uploaded files safe on the server so that no one can read them
without knowing a few details to decipher the files. It generates
different obfuscated names and encrypted files so no one will know what
the original format or name was.

MUTE File Sharing is an anonymous, decentralized search-and-download file sharing system. Several people have described MUTE as the "third generation file sharing network" (From Napster to Gnutella to MUTE, with each generation getting less centralized and more anonymous). MUTE uses algorithms inspired by ant behavior to route all messages, include file transfers, through a mesh network of neighbor connections.