CloakBin

CloakBin Zero-Knowledge Encrypted Pastebin Your data is encrypted before it leaves your browser. We can't read it. No one can. Live Demo • Report Bug • Request Feature Why Zero-Knowledge? Traditional pastebins store your data in plaintext. Server admins, hackers, or anyone with database access ca...

apm

APM A better local password manager for everyone. APM is a fast, zero-knowledge CLI password manager written in Go and Rust. It stores 25+ structured secret types in a single encrypted vault — from passwords and TOTP codes to SSH keys, medical records, photos, and binary files. Two binaries ship...

sharemylogin

ShareMyLogin Open Source This is the public source code for ShareMyLogin.com. What is ShareMyLogin? ShareMyLogin is a secure tool for sharing sensitive information like passwords, API keys, or config secrets. The Problem Sending a password over Slack, Email, or WhatsApp creates a permanent record...

quantum-zk-proof-poc

PoC for breaking Google's zero-knowledge proof of quantum cryptanalysis This repository contains resources for the Trail of Bits blog post detailing how we beat Google's zero-knowledge proof that they have a high-efficiency quantum circuit for elliptic curve cryptanalysis. It includes our forged...

Pribado

🔐 Pribado Private API Key Management & Zero-Knowledge Infrastructure Pribado is a self-hostable, zero-knowledge platform for managing API keys, encrypted secrets, and private communications. Built on Oasis Sapphire for hardware-backed confidential computing. ✨ Features 🔑 Private API Proxy Store A...

legion

Legion ZK Auth 🛡️ True Zero-Knowledge Authentication with Hardware-Bound Device Ring Signatures 🎯 What is Legion? Legion is a passwordless zero-knowledge authentication system that proves you're authorized without revealing who you are. Authenticate using only your fingerprint + 24-word recovery...

libsignal

Overview libsignal contains platform-agnostic APIs used by the official Signal clients and servers, exposed as a Java, Swift, or TypeScript library. The underlying implementations are written in Rust: libsignal-protocol: Implements the Signal protocol, including the Double Ratchet algorithm. A...

longfellow-zk

Longfellow ZK 概要 Longfellow ライブラリは、ISO MDOC 標準、JWT 標準、W3C Verifiable Credentials などの従来の本人確認標準に関するゼロ知識プロトコルの構築を可能にします。この実装は以下で説明されています： ECDSA からの匿名認証情報 libzk: ゼロ知識証明のための C++ ライブラリ プロジェクトドキュメント 名前は Google ケンブリッジオフィスの外にある橋に由来します。 セキュリティレビュー 現在、このプロジェクトは、学界および業界の専門家からなる2つの独立したセキュリティレビューを受けています。それらの報告...

BHPAI

项目文档：BHPAI 系统版本 ：V1.6 企业版（系统功能全面更新） 作者 ：Rin449 核心语言与技术 ：C++17（MinGW-w64 / MSYS2）、Python 3.9+、PyQt6、MinHook、Capstone Engine、Intel PT（Processor Trace）、PyTorch、LightGBM、OpenSSL 3.x、zlib、Argon2id、Cryptography、Ed25519 主参考文档 ：多格式架构（Multi-Format）详解、递归分析算法、PE 与 PDF 静态分析、Sandbox Stealth Ring-3...

PrivateSphare

PrivateSphare PrivateSphare is a secure, anonymous, zero-knowledge file storage and sharing platform. It allows users to upload files and receive a human-readable 24-word passphrase for retrieval. No accounts, no tracking, and no unencrypted data ever touches the server's persistent storage. 🛡️ Ke...

chpwd

DEPRECATED This is an old version of a CLI password vault. The development has been shifted to vlt: https://codeberg.org/artich0ke/vlt GitHub mirror: https://github.com/b0lbas/vlt. You can still download the utility / use it as a personal password storage, however, neither is recommended. chpwd A...

PublicSafe

PublicSafe Your Browser, Your Safe Space PublicSafe is a free and open-source browser extension focused on privacy, encryption, and user control. It provides client-side encryption tools designed to help users protect sensitive information before it leaves their browser. PublicSafe is built aroun...

reverie

Reverie An efficient implementation of the NIZKPoK outlined in KKW 2018 Reverie is an implementation prover and verifier of the MPC-in-the-head NIZKPoK outlined in Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures. Reverie seeks to offer concrete prover efficien...

Mandating-Honeypots-Project

强制蜜罐项目 随着《父母决定法案》（H.R.8250）和加利福尼亚州《数字年龄保障法案》（议会第1043号法案）等法律在立法机构中推进，隐私、匿名性和数据安全正充斥着系统性威胁，以及带有未经检验攻击面的新安全架构。如果这些立法获得通过，它们将几乎字面意义上地强制要求为坚定的攻击者制造蜜罐，因为任何希望使用计算机的人都必须提供敏感信息（例如政府签发的身份证件）。这不仅危及这些法律声称要保护的未成年人本身，还提供了一个非常明确的攻击面：攻破存储这些数字身份证件的数据库，你就能一下子窃取上千个新身份。...

Malicious code in zkjson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758a19e42db66cf6ae7a08d462278b30e3a154b56613d2d95f8020de3add3816 package.json declares "preinstall": "./.github/scripts/precheck", pointing to a 976 KB Linux ELF executable sha256...

monerochan-stark (>=5.2.2, <=5.2.12), p3-circle (>=0.1.0, <=0.3.3-succinct) +17 more potentially affected by CVE-2026-46654 via p3-challenger (>=0.1.0, <=0.3.3-succinct)

p3-challenger CARGO version =0.1.0, =5.2.2, =0.1.0, =0.1.0, =0.1.0, =0.1.5-succinct, =0.1.0, =0.1.0, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.0.0-beta.1, =6.2.1 and more Source cves: CVE-2026-46654 Source advisory: OSV:GHSA-VJ64-RJF3-W3V7...

midnight-ownpublickey-attack

Bounty 295: Why ownPublicKey Can't Be Trusted for Access...

OrchidMantis

Orchid Mantis A Framework for ZKPoX — Zero-Knowledge Proof...

CVE-2026-40323

SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. In versions 6.0.0 through 6.0.2, a soundness vulnerability in the SP1 V6 recursive shard verifier allows a malicious prover to construct a recursive proof from a shard proof...

SP1 安全漏洞

SP1 is an open-source zero-knowledge virtual machine developed by Succinct. Versions 6.0.0 to 6.0.2 of SP1 contain security vulnerabilities. These vulnerabilities stem from defects in the recursive sharding verifier, which could allow malicious provers to construct invalid proofs...