Awesome Cryptography

A curated list of cryptography resources and links.

Theory
Tools
- Standalone
- Plugins
  - Git
- Playgrounds
Frameworks and Libs
- C
- C#
- C++
- Clojure
- Common Lisp
- Delphi
- Elixir
- Erlang
- Golang
- Haskell
- Haxe
- Java
- JavaScript
- Julia
- Lua
- OCaml
- Objective-C
- PHP
- Python
- R
- Ruby
- Rust
- Scala
- Scheme
- Swift
Resources
Contributing
License

Theory

Algorithms

Symmetric encryption

3DES - Symmetric-key block cipher (or Triple Data Encryption Algorithm (TDEA or Triple DEA), which applies the Data Encryption Standard (DES) cipher algorithm three times to each data block.
AES - Symmetric-key block cipher algorithm and U.S. government standard for secure and classified data encryption and decryption (also known as Rijndael).
Blowfish - Symmetric-key block cipher, designed in 1993 by Bruce Schneier. Notable features of the design include key-dependent S-boxes and a highly complex key schedule.

Asymmetric encryption

DH - A method of exchanging cryptographic keys securely over a public channel. Unlike RSA, the Diffie-Hellman Key Exchange is not encryption, and is only a way for two parties to agree on a shared secret value. Since the keys generated are completely pseudo-random, DH key exchanges can provide forward secrecy (https://en.wikipedia.org/wiki/Forward_secrecy).
ECC - Public-key cryptosystems based on the algebraic structure of elliptic curves over finite fields.
RSA - One of the first practical public-key cryptosystems and is widely used for secure data transmission. In RSA, this asymmetry is based on the practical difficulty of factoring the product of two large prime numbers, the factoring problem.

Transform Encryption

Transform Encryption (aka Proxy Re-Encryption) - Transform encryption uses three mathematically related keys: one to encrypt plaintext to a recipient, a second to decrypt the ciphertext, and a third to transform ciphertext encrypted to one recipient so it can be decrypted by a different recipient.

Hash functions

MD5 - Widely used hash function producing a 128-bit hash value. MD5 was initially designed to be used as a cryptographic hash function, but it has been found to suffer from extensive vulnerabilities. It can still be used as a checksum to verify data integrity, but only against unintentional corruption.
SHA1 - Cryptographic hash function designed by the NSA. SHA-1 produces a 160-bit hash value known as a message digest. SHA-1 is no longer considered secure against well-funded opponents.
SHA2 - Set of hash functions designed by the NSA. SHA-256 and SHA-512 are novel hash functions computed with 32-bit and 64-bit words, respectively. They use different shift amounts and additive constants, but their structures are otherwise virtually identical, differing only in the number of rounds.
SHA3 - Cryptographic hash function that produces a fixed-size output, typically 224, 256, 384, or 512 bits, from variable-size input data. It is part of the SHA-3 family of cryptographic algorithms designed to resist attacks from quantum computers and offers security properties such as pre-image resistance, second pre-image resistance, and collision resistance.

Articles

How to Generate Secure Random Numbers in Various Programming Languages.
Password Insecurity - This article is written for everybody who is interested in password security.
Secure Account Recovery Made Simple.

Books

A Graduate Course in Applied Cryptography - The book covers many constructions for different tasks in cryptography.
An Introduction to Mathematical Cryptography - Introduction to modern cryptography.
Applied Cryptography: Protocols, Algorithms and Source Code in C - This cryptography classic provides you with a comprehensive survey of modern cryptography.
Crypto101 - Crypto 101 is an introductory course on cryptography.
Cryptography Engineering - Learn to build cryptographic protocols that work in the real world.
Handbook of Applied Cryptography - This book is intended as a reference for professional cryptographers.
Introduction to Modern Cryptography - Introductory-level treatment of cryptography written from a modern, computer science perspective.
OpenSSL Cookbook - The book about OpenSSL.
Practical Cryptography for Developers - Developer-friendly book on modern cryptography (hashes, MAC codes, symmetric and asymmetric ciphers, key exchange, elliptic curves, digital signatures) with lots of code examples.
Real World Cryptography - This book teaches you applied cryptographic techniques to understand and apply security at every level of your systems and applications.
Security Engineering - There is an extraordinary textbook written by Ross Anderson, professor of computer security at University of Cambridge.
Serious Cryptography - A Practical Introduction to Modern Encryption by Jean-Philippe Aumasson.
The Code Book - This book is a digest of the history of cryptography, covering both ancient times, and newer cryptography methods. There are exercises at the end and the solution of those was rewarded with $10.000.
The Cryptoparty Handbook - This book provides a comprehensive guide to the various topics of the computer and internet security.
Understanding Cryptography - Often overlooked, this book is a boon for beginners to the field. It contains plenty of exercises at the end of each chapter, aimed at reinforcing concepts and cementing ideas.

Courses

A Self-Study Course In Block-Cipher Cryptanalysis - This paper attempts to organize the existing literature of block-cipher cryptanalysis in a way that students can use to learn cryptanalytic techniques and ways to break algorithms, by Bruce Schneier.
Applied Cryptography - Cryptography is present in everyday life, from paying with a credit card to using the telephone. Learn all about making and breaking puzzles in computing.
Crypto Strikes Back! - This talk will cover crypto vulnerabilities in widely-deployed systems and how the smallest oversight resulted in catastrophe.
Cryptography - A practical oriented course in Cryptography by University of Maryland College Park.
Cryptography - Stanford University - This course explains the inner workings of cryptographic primitives and how to correctly use them. Students will learn how to reason about the security of cryptographic constructions and how to apply this knowledge to real-world applications.
Cryptography I - The course begins with a detailed discussion of how two parties who have a shared secret key can communicate securely when a powerful adversary eavesdrops and tampers with traffic. We will examine many deployed protocols and analyze mistakes in existing systems.
Cybrary Cryptography - This online course we will cover how cryptography is the cornerstone of security, and how through its use of different encryption methods, such as ciphers, and public or private keys, you can protect private or sensitive information from unauthorized access.
Harvard's Cryptography Lecture notes - An introductory but fast-paced undergraduate/beginning graduate course on cryptography, Used for Harvard CS 127.
Journey into cryptography - The course of cryptography by Khan Academy.
Practical Aspects of Modern Cryptography - Practical Aspects of Modern Cryptography, Winter 2006 University of Washington CSE.
Theory and Practice of Cryptography - Introduction to Modern Cryptography, Using Cryptography in Practice and at Google, Proofs of Security and Security Definitions and A Special Topic in Cryptography.

Other lists

Awesome crypto-papers – A curated list of cryptography papers, articles, tutorials and howtos.
Awesome HE – A curated list of homomorphic encryption libraries, software and resources.
TLS Cipher Suites - A list of TLS cipher suites and their security ratings.

Tools

Standalone

Bcrypt - Cross-platform file encryption utility.
blackbox - safely store secrets in Git/Mercurial/Subversion.
certbot - Previously the Let's Encrypt Client, is EFF's tool to obtain certs from Let's Encrypt, and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
Coherence - Cryptographic server for modern web apps.
cryptomator - Multi-platform transparent client-side encryption of your files in the cloud.
Databunker - API based personal data or PII storage service built to comply with GDPR and CCPA.
gpg - Complete and free implementation of the OpenPGP standard. It allows to encrypt and sign your data and communication, features a versatile key management system. GnuPG is a command line tool with features for easy integration with other applications.
ironssh - End-to-end encrypt transferred files using sftp/scp and selectively share with others. Automatic key management works with any SSH server. Encrypted files are gpg compatible.
Nipe - Nipe is a script to make Tor Network your default gateway.
sops - sops is an editor of encrypted files that supports YAML, JSON and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault and PGP.
ves - End-to-end encrypted sharing via cloud repository, secure recovery through a viral network of friends in case of key loss.

Plugins

Git

git-crypt - Transparent file encryption in git.
git-secret - Bash-tool to store your private data inside a git repository.

Playgrounds

Cryptography Playground - A simple web tool to play and learn basic concepts of cryptography like, hashing, symmetric, asymmetric, zkp etc.

Frameworks and Libs

C

crypto-algorithms - Basic implementations of standard cryptography algorithms, like AES and SHA-1.
libgcrypt - Cryptographic library developed as a separated module of GnuPG.
libkcapi - Linux Kernel Crypto API User Space Interface Library.
libsodium - Modern and easy-to-use crypto library.
libtomcrypt - Fairly comprehensive, modular and portable cryptographic toolkit.
libVES.c - End-to-end encrypted sharing via cloud repository, secure recovery through a viral network of friends in case of key loss.
milagro-crypto-c - Small, self-contained and fast open source crypto library. It supports RSA, ECDH, ECIES, ECDSA, AES-GCM, SHA2, SHA3 and Pairing-Based Cryptography.
monocypher - small, portable, easy to use crypto library inspired by libsodium and TweetNaCl.
NaCl - High-speed library for network communication, encryption, decryption, signatures, etc.
nettle - is a cryptographic library that is designed to fit easily in more or less any context: In crypto toolkits for object-oriented languages (C++, Python, Pike, ...), in applications like LSH or GNUPG, or even in kernel space.
OpenSSL - TLS/SSL and crypto library.
PolarSSL - PolarSSL makes it trivially easy for developers to include cryptographic and SSL/TLS capabilities in their (embedded) products, facilitating this functionality with a minimal coding footprint.
RHash - Great utility for computing hash sums.
themis - High level crypto library for storing data (AES), secure messaging (ECC + ECDSA / RSA + PSS + PKCS#7) and session-oriented, forward secrecy data exchange (ECDH key agreement, ECC & AES encryption). Ported on many languages and platforms, suitable for client-server infastructures.
tiny-AES128-C - Small portable AES128 in C.
wolfSSL - Small, fast, portable implementation of TLS/SSL for embedded devices to the cloud.
XKCP — is a repository that gathers different free and