keeper

keeper Keeper 是一个用于 Go 的加密秘密存储器。它使用 Argon2id 密钥派生和 XChaCha20-Poly1305（默认）认证加密来加密静态的任意字节负载，并将它们存储在嵌入式 bbolt 数据库中。 它打包成三个独立可用的部分： 一个 Go 库 — 将经过加固的秘密存储器直接嵌入到您的进程中，具有四个安全级别、每个桶的 DEK 隔离以及防篡改审计链。 一个 HTTP 处理器 x/keephandler — 通过一次调用将 keeper 端点挂载到任何 net/http 多路复用器上，并带有可插拔的钩子、守卫和响应编码器，用于访问控制和审计日志记录。 一个 CLI...

Concryptor

Concryptor Rustで構築されたマルチスレッドAEAD暗号化エンジンです。トリプルバッファリングされたiouringパイプライン、Rayonによる並列チャンク処理、ringによるアセンブリ最適化暗号を利用して、ギガバイト/秒のスループットでファイルを暗号化・復号します。 ⚠️ 免責事項：実験的ソフトウェア ⚠️ このプロジェクトは非常に新しく、現在、本番環境やミッションクリティカルな使用には推奨されていません。...

torchat

TorChat - 匿名P2P 聊天 安全、私密且匿名的点对点聊天——基于Tor网络。 TorChat 是什么？ 它是一个轻量级、隐私优先的即时通讯工具，让你可以直接通过Tor网络与他人通信——无需任何中央服务器。专为极度重视隐私、安全与简洁的人设计。 TorChat 的独特之处 TorChat 真的很酷。 它拥有一些其他工具没有的酷炫功能。 与使用固定地址的标准Tor聊天系统不同，这个实现完全是临时的。 root@kitploit: 零持久性：服务端创建一个临时的隐藏服务。一旦会话结束，.onion地址会被删除，无法恢复或重复使用。...

Astra Linux – Vulnerability in nss

A flaw was discovered in the implementation of CHACHA20-POLY1305 in NSS versions prior to 3.55. When using multi-part Chacha20, it could lead to out-of-bounds reads. This issue was addressed by explicitly disabling multi-part ChaCha20 which was not functioning correctly and enforcing strict tag...

jdvrif

jdvrif jdvrif JPG Data Vehicle , v9.0 is a fast, easy-to-use steganography command-line tool for concealing and extracting any file type via a JPG image. Linux only. Your data file is compressed with libdeflate/zlib , then encrypted with XChaCha20-Poly1305 libsodium secretstream under a key deriv...

CESS

CESS — 暗号学的に強化されたシャミアの秘密 これはAIの出鱈目や粗悪品か？ CESSを評価する暗号学者や真剣な実装者は、通常、散文を読む前にvectors/とtestdata/を開きます。テストスイートが成果物です。これは、ナラティブだけでは代替できないドメイン知識をエンコードしています。...

lsPass

lsPass — 本地加密密码管理器 GTK4 / gtkmm-4 · C++23 · CMake · SQLite · libsodium lsPass 将 登录凭据、安全笔记和 API 密钥 存储在本地加密保险库中。无网络、无云、无遥测。任何机密内容都不会以明文形式写入磁盘。 构建与测试 root@kitploit: sudo apt install libgtkmm-4.0-dev libsqlite3-dev libsodium-dev nlohmann-json3-dev cmake -B build cmake --build build -j ctest --test-di...

jdvrif — Updated!

jdvrif jdvrif JPG Data Vehicle , v9.0 is a fast, easy-to-use steganography command-line tool for concealing and extracting any file type via a JPG image. Linux only. Your data file is compressed with libdeflate/zlib , then encrypted with XChaCha20-Poly1305 libsodium secretstream under a key deriv...

CVE-2026-13735

Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wgcrypto.c mishandled keepalive packets. In wgprocessdatamessage, any type-4 transport-data message whose payload was exactly 16 bytes an empty plaintext plus a bare Poly1305 tag, i.e. a keepalive was accepted and returned immediately,...

CVE-2026-13735

Zephyr RTOS WireGuard implementation in subsys/net/lib/wireguard/wg_crypto.c accepted 16-byte keepalive data messages before verifying the Poly1305 authentication tag, allowing a network attacker with a valid receiver index to forge keepalive packets without possessing the session key. The impact...

CVE-2026-13735 WireGuard keepalive transport-data messages accepted without Poly1305 authentication

Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wgcrypto.c mishandled keepalive packets. In wgprocessdatamessage, any type-4 transport-data message whose payload was exactly 16 bytes an empty plaintext plus a bare Poly1305 tag, i.e. a keepalive was accepted and returned immediately,...

CVE-2026-13735 WireGuard keepalive transport-data messages accepted without Poly1305 authentication

Zephyr's WireGuard implementation in subsys/net/lib/wireguard/wgcrypto.c mishandled keepalive packets. In wgprocessdatamessage, any type-4 transport-data message whose payload was exactly 16 bytes an empty plaintext plus a bare Poly1305 tag, i.e. a keepalive was accepted and returned immediately,...

SUSE CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the chacha20poly1305cipher and aesocbcipher implementations under providers/implementations/ciphers/. An attacker can forge messages by supplying an empty ciphertext and a bad tag, then...

AZL-97884 CVE-2026-75803 affecting package edk2 for versions less than 20240524git3e722403cd16-20

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

AZL-97671 CVE-2026-75803 affecting package openssl-fips-provider 3.1.2-2

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

ALPINE-CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

AZL-97935 CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

EUVD-2026-65488

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...