CryptoGotchas
A collection of common (interesting) cryptographic mistakes and learning resources. (by SalusaSecondus)
portable-secret
Better privacy without special software (by mprimi)
CryptoGotchas | portable-secret | |
---|---|---|
4 | 11 | |
308 | 1,666 | |
- | - | |
2.3 | 3.1 | |
2 months ago | 8 months ago | |
HTML | HTML | |
GNU General Public License v3.0 or later | MIT License |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
CryptoGotchas
Posts with mentions or reviews of CryptoGotchas.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-10-10.
- Study found that developers (still) have a distinct lack of knowledge in understanding the fundamental concepts of cryptography - call for dedicated studies to investigate the usability of crypto APIs
-
I know the mantra is “don’t roll your own crypto”. What are the common pitfalls that people fall into when making their own cryptography programs? For example, why shouldn’t I use the Chacha program that I just wrote?
I present the list of Crypto Gotchas that I've seen in real world code. All of these mistakes have happily many times and broken systems. (They also generally assume that your underlying cryptography is properly built but you still get things wrong.)
-
How to learn cryptography?
My Crypto Gotchas: Getting Started page is a list of resources designed to get people into cryptography. I hope that it is helpful.
- Advice on self-learning crypto
portable-secret
Posts with mentions or reviews of portable-secret.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-09-26.
-
Ask HN: Best practices for safeguarding master password in organization?
Something like [0] maybe?
[0]: https://mprimi.github.io/portable-secret/
-
Ask HN: What is the best password manager available today?
I like portable-secret which uses the built-in browser cryptographic functions, no external software.
https://github.com/mprimi/portable-secret
- Password protect a static HTML page
-
Encrypting Data in the Browser Using WebAuthn
My own in-browser encryption project/POC: https://mprimi.github.io/portable-secret/
Discussed here: https://news.ycombinator.com/item?id=34083366
- Ask HN: End-of-life planning while young?
-
Native zip encryption on Fedora
I saw someone recommend Portable Secret recently, albeit I’ve not used it but thought I’d throw it into the mix in case someone else has and can comment.
- Can this be implemented
-
Show HN: I store my critical secrets and document, and communicate privately
Interesting... on 2022-12-13 the bounty has been claimed! Just a few hours after mprime1 shared the project in a comment on HackerNews, someone managed to drain the BTC.
https://github.com/mprimi/portable-secret/commit/3b22d2b42ba...
I'd love to hear more about this.
- PortableSecret: Better privacy with the tools you already have
What are some alternatives?
When comparing CryptoGotchas and portable-secret you can also consider the following projects:
Top10 - Official OWASP Top 10 Document Repository
isomorphic-webcrypto - :game_die: webcrypto library for Node, React Native and IE11+