sharemylogin

ShareMyLogin Open Source This is the public source code for ShareMyLogin.com. What is ShareMyLogin? ShareMyLogin is a secure tool for sharing sensitive information like passwords, API keys, or config secrets. The Problem Sending a password over Slack, Email, or WhatsApp creates a permanent record...

CloakBin

CloakBin Zero-Knowledge Encrypted Pastebin Your data is encrypted before it leaves your browser. We can't read it. No one can. Live Demo • Report Bug • Request Feature Why Zero-Knowledge? Traditional pastebins store your data in plaintext. Server admins, hackers, or anyone with database access ca...

legion

Legion ZK Auth 🛡️ True Zero-Knowledge Authentication with Hardware-Bound Device Ring Signatures 🎯 What is Legion? Legion is a passwordless zero-knowledge authentication system that proves you're authorized without revealing who you are. Authenticate using only your fingerprint + 24-word recovery...

Pribado

🔐 Pribado Private API Key Management & Zero-Knowledge Infrastructure Pribado is a self-hostable, zero-knowledge platform for managing API keys, encrypted secrets, and private communications. Built on Oasis Sapphire for hardware-backed confidential computing. ✨ Features 🔑 Private API Proxy Store A...

apm

APM A better local password manager for everyone. APM is a fast, zero-knowledge CLI password manager written in Go and Rust. It stores 25+ structured secret types in a single encrypted vault — from passwords and TOTP codes to SSH keys, medical records, photos, and binary files. Two binaries ship...

longfellow-zk

Longfellow ZK 概述 Longfellow 库能够构建涉及传统身份验证标准（如 ISO MDOC 标准、JWT 标准和 W3 可验证凭据）的零知识协议。该实现描述于： ECDSA 的匿名凭证 libzk: 一个零知识证明的 C++ 库 项目文档 它的名字来源于谷歌剑桥办公室外的一座桥。 安全审查 该项目目前正在进行两项独立的安全审查，由该领域的学术和行业专家小组进行。他们的报告可在项目文档/审查页面上查看。 规范 该仓库包含 Longfellow 及其组件规范的工作文件。如果您有兴趣贡献，请创建一个 Issue 或 Pull Request。我们的讨论在 Issue 下进行。...

quantum-zk-proof-poc

破解Google量子密码分析零知识证明的概念验证 本仓库包含了Trail of Bits博客文章的资源，该文章详细介绍了我们如何破解Google声称拥有用于椭圆曲线密码分析的高效量子电路的零知识证明。它包含我们的伪造证明、验证说明以及生成量子电路的代码，该代码利用了未修补的zkVM模拟器代码中的漏洞。 完整的证明二进制文件位于此处，以下是Google的证明与我们的证明的结果对比。 资源类型| Google低门数| Google低量子比特| 我们的证明 ---|---|---|--- 总操作数| 17,000,000| 17,000,000| 8,300,000 量子比特数量| 1,425...

libsignal

Descripción general libsignal contiene APIs agnósticas de la plataforma utilizadas por los clientes y servidores oficiales de Signal, expuestas como una biblioteca Java, Swift o TypeScript. Las implementaciones subyacentes están escritas en Rust: libsignal-protocol: Implementa el protocolo Signal...

PrivateSphare

PrivateSphare PrivateSphare is a secure, anonymous, zero-knowledge file storage and sharing platform. It allows users to upload files and receive a human-readable 24-word passphrase for retrieval. No accounts, no tracking, and no unencrypted data ever touches the server's persistent storage. 🛡️ Ke...

chpwd

DEPRECATED This is an old version of a CLI password vault. The development has been shifted to vlt: https://codeberg.org/artich0ke/vlt GitHub mirror: https://github.com/b0lbas/vlt. You can still download the utility / use it as a personal password storage, however, neither is recommended. chpwd A...

PublicSafe

PublicSafe Your Browser, Your Safe Space PublicSafe is a free and open-source browser extension focused on privacy, encryption, and user control. It provides client-side encryption tools designed to help users protect sensitive information before it leaves their browser. PublicSafe is built aroun...

reverie

Reverie Una implementación eficiente del NIZKPoK presentado en KKW 2018 Reverie es una implementación demostrador y verificador del NIZKPoK MPC-in-the-head presentado en Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures. Reverie busca ofrecer eficiencia concreta...

Malicious code in zkjson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758a19e42db66cf6ae7a08d462278b30e3a154b56613d2d95f8020de3add3816 package.json declares "preinstall": "./.github/scripts/precheck", pointing to a 976 KB Linux ELF executable sha256...

monerochan-stark (>=5.2.2, <=5.2.12), p3-circle (>=0.1.0, <=0.3.3-succinct) +20 more potentially affected by CVE-2026-46654 via p3-challenger (>=0.1.0, <=0.3.3-succinct)

p3-challenger CARGO version =0.1.0, =5.2.2, =0.1.0, =0.1.0, =0.1.0, =0.1.5-succinct, =0.1.0, =0.1.0, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.2.1 and more Source cves: CVE-2026-46654 Source advisory: OSV:GHSA-VJ64-RJF3-W3V7...

midnight-ownpublickey-attack

Bounty 295: Why ownPublicKey Can't Be Trusted for Access...

OrchidMantis

Orchid Mantis A Framework for ZKPoX — Zero-Knowledge Proof...

CVE-2026-40323

SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. In versions 6.0.0 through 6.0.2, a soundness vulnerability in the SP1 V6 recursive shard verifier allows a malicious prover to construct a recursive proof from a shard proof...

SP1 安全漏洞

SP1 is an open-source zero-knowledge virtual machine developed by Succinct. Versions 6.0.0 to 6.0.2 of SP1 contain security vulnerabilities. These vulnerabilities stem from defects in the recursive sharding verifier, which could allow malicious provers to construct invalid proofs...

CVE-2026-40323 SP1 V6 Recursion Circuit Row-Count Binding Gap

SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. In versions 6.0.0 through 6.0.2, a soundness vulnerability in the SP1 V6 recursive shard verifier allows a malicious prover to construct a recursive proof from a shard proof...

CVE-2026-40323

SP1 (zero‑knowledge VM) has a soundness vulnerability in the V6 recursive shard verifier affecting versions 6.0.0–6.0.2, allowing a malicious prover to construct a recursive proof from a shard proof that the native verifier would reject. The issue is fixed in version 6.1.0. Impact is described as...