Software Map

Privatix Live-System is a portable encrypted operating system designed to be run directly from a USB flash drive or an external hard drive. This allows the user to safely edit and carry along sensitive data for encrypted communication and anonymous Web surfing. It is based on Debian GNU/Linux.

Strip is a password and account management program for the Palm Computing Platform. Designed to fit the needs of both IT professionals and the average user, it combines ease of use with flexibility and security. 128 bit encryption ensures that even if your Palm Pilot is lost or stolen your important account and password information will remain confidential. Strip has a quick and easy to use interface, with many useful features including the ability to beam shared accounts to other Strip users.

jslibs is a standalone JavaScript development environment for using JavaScript as a general-purpose scripting language. jslibs provides a set of native modules that contains various general-purpose classes and functions. Some of these modules are simple wrappers to familiar libraries such as zlib, SQLite, FastCGI, and NSPR. Other modules provide tools to enhance JavaScript programming. The jslibs distribution comes with a small standalone command-line access program (jshost) that can be used to run JavaScript files.

Figaro's Password Manager (FPM) is a GNOME application that allows you to securely store your passwords, which are encrypted with the blowfish algorithm. It allows you to copy passwords or usernames to the clipboard or primary selection. If a password is for a Web site, FPM can keep track of the URLs of your login screens and can automatically launch your browser. You can also teach FPM to launch other applications. FPM can sort your passwords into categories. Finally, it has a password generator that can help you choose good passwords.

vpnd is a daemon which connects two networks on network level either via TCP/IP or a (virtual) leased line attached to a serial interface. All data transfered between the two networks are encrypted using the unpatented free Blowfish encryption algorithm with a key length of up to 576 bits (may be downgraded to a minimum of 0 bits to suit any legal restrictions).

OpenSign is a collection of Java applets providing
client-side digital signing functionality using
x.509 certificates. It currently consists of two
applets, one for signing plain ASCII text and arbitary attachments and another providing login functionality.

fsh is a tool for establishing an ssh tunnel for
remote execution of commands without requiring an
ssh authentication on every connection. Once the
tunnel is established, remote commands can be
executed almost instantaneously. This makes
systems such as remote cvs over ssh much faster.
It includes fcp, an rcp variant that uses fsh.

PortableSigner is a Java application to sign
normal PDF files with a
digital signature (X.509). You can verify your
signature by opening the
PDF file in a standard Adobe Reader without any
plugins.

UsbCryptFormat is a graphical user interface (GUI) for the encryption of USB flash drives or external hard drives. It allows the user to reformat a USB flash drive, an SD card, or an external hard drive with an encrypted filesystem very easily and without the danger of destroying data on an internal hard drive because of incautious handling of device names. So it is usable even for a layperson.

Gaim-Encryption provides transparent RSA encryption as a
Gaim plugin using the Mozilla NSS libraries. Key sizes up to
4096 bits are supported. It works with Gaim on most
platforms, including Windows. Keys are automatically
generated, transmitted, and saved.

WebCert is a Web application to generate and
manage digital certificates in cases where no
"full" CA is needed. It is very handy for those
who need a cert quickly and don't have the hang of
the OpenSSL command line. It is very easy to
deploy and to use.

This Webmin module allows one to configure nearly every detail of the FreeS/WAN IPSec implementation. This module is currently in a development state, and considered to be beta. Key management and connection status are missing at the moment, but will be available soon.

A reasonable way to achieve a long term backup of
OpenPGP (GnuPG, PGP, etc) keys is to print them
out on paper. Due to metadata and redundancy,
OpenPGP secret keys are significantly larger than
just the "secret bits". In fact, the secret key
contains a complete copy of the public key. Since
the public key generally doesn't need to be backed
up in this way (most people have many copies of it
on various keyservers, Web pages, etc), only
extracting the secret parts can be a real
advantage. Paperkey extracts just those secret
bytes and prints them. To reconstruct, you
re-enter those bytes (whether by hand or via OCR),
and paperkey can use them to transform your
existing public key into a secret key.

DJIGZO Email Encryption Gateway is a centrally managed email server that encrypts and decrypts incoming and outgoing email at the gateway level. Djigzo currently supports two encryption standards: S/MIME and PDF encryption. The built-in Data Leak Prevention (DLP) module can be used to prevent certain information from leaving the organization via email. DLP can be configured to filter on credit card numbers, bank account numbers, excessive amounts of email addresses or other personal information in one email message, and more. DJIGZO can be installed on most Linux and Unix based systems. Installation packages are available for Ubuntu, Debian, Red Hat and CentOS. A ready to run virtual appliance for VMware and Hyper-V is available. An add-on for BlackBerry is available.

Nettle is a cryptographic library that is designed to fit easily in more or less any context: in crypto toolkits for object-oriented languages (C++, Python, Pike, etc.), in applications like LSH or GNUPG, or even in kernel space. In most contexts, you need more than the basic cryptographic algorithms; you also need some way to keep track of available algorithms and their properties and variants. You often have some algorithm selection process, often dictated by a protocol you want to implement. And as the requirements of applications differ in subtle and not so subtle ways, an API that fits one application well can be a pain to use in a different context, which is why there are so many different cryptographic libraries around. Nettle tries to avoid this problem by doing one thing, the low-level crypto stuff, and providing a simple but general interface to it. In particular, Nettle doesn't do algorithm selection. It doesn't do memory allocation. It doesn't do any I/O. The idea is that one can build several application- and context-specific interfaces on top of Nettle and share the code, testcases, benchmarks, documentation, etc.