An implementation of JOSE standards (JWE, JWS, JWT) in Go

An implementation of JOSE standards (JWE, JWS, JWT) in Go

CIRCL: Cloudflare Interoperable Reusable Cryptographic Library

A high-level OpenPGP library

Implements a subset of PKCS #7 / Cryptographic Message Syntax (CMS, RFC 2315, RFC 5652)

DEPRECATED - Implements a subset of PKCS#7/Cryptographic Message Syntax (rfc2315, rfc5652)

Pure Go implementation of XML Digital Signatures

Sigstore OIDC PKI

Add CA certificates into containers

age plugin for keeping keys with a TKey USB security key

SSH Agent for TKey, the flexible open hardware/software USB security key 🔑

PKCS #11 modules in Go without cgo

Relic is a service and a tool for adding digital signatures to operating system packages for Linux and Windows

Go crypto backend for Windows using CNG

A docker CLI plugin for verifying signed attestations on images

Reference implementation of OpenPubkey

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

Fortify enables web applications to use smart cards, local certificate stores and do certificate enrollment. This is the desktop application repository.

Go implementation of the keyless protocol

Kadeessh (formerly Caddy-SSH) is a general-purpose, extensible, modular, memory-safe SSH server built in Go

A CONIKS implementation in Golang

Entity Attestation Token manipulation library

Caddy storage module acting as middleware to ensure encryption at-rest

Crypto is a collection of packages used by Smallstep products

Split-Trust Encryption Tool for ubiquitous data encryption.

Cert Warden is a centralized ACME Client. It provides an API for certificate consumers to fetch their individual keys and certs with API keys.

Full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob

pure go library for processing signed XML documents

Nitrokey NetHSM system software

PKCS#11 module for NetHSM