Top 6 key-management Open-Source Projects

Ockam

76 4,341 10.0 Rust

Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.

Project mention: Tunnelmole, an ngrok alternative (open source) | news.ycombinator.com | 2024-03-21

disclosure: I work at Ockam.
The Portals for Mac app is an example of the type of thing you could build using the open source stack of protocols. The README (linked by parent) links out to all of the relevant parts of the protocol documentation to explain how these work together. The NAT Traversal (https://github.com/build-trust/ockam/blob/develop/examples/a...) part of the README is probably the best explanation of why the free relay you get via Ockam Orchestrator is a useful part of this demo.
As for why would anyone trust this: The protocols are designed so you absolutely don't have to trust the relay. Trust is pushed out to the edges that you control and so you're not susceptible to a MITM attack if something like a relay is compromised. The protocol design for all of this is open and documented, and was independently audited by (IMO) some of the best in the business, Trail of Bits: https://docs.ockam.io/reference/protocols.

gpg-tui

13 1,266 8.6 Rust

Manage your GnuPG keys with ease! 🔐
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
confidential-computing-zoo

2 284 7.4 CMake

Confidential Computing Zoo provides confidential computing solutions based on Intel SGX, TDX, HEXL, etc. technologies.
PyKMIP

2 255 7.1 Python

A Python implementation of the KMIP specification.

Project mention: How can i use yubikey for my boot and full disk encryption keys, running Fedora linux | /r/yubikey | 2023-05-28

Here is a python implementation that is open source. https://github.com/OpenKMIP/PyKMIP

shim

2 59 4.4 Python

The Userify Shim (cloud agent) (by userify)

Project mention: S3 Express Is All You Need | news.ycombinator.com | 2023-11-28

That's exactly how Userify[0] used to work. (when it was Python; now that it's a Go app, we do the caching in memory using Ristretto[1]).
0. https://userify.com (team ssh key management/sudo authz)
1. https://github.com/dgraph-io/ristretto

kms

2 38 9.5 Rust

A feature-rich, scalable, Key Management System (by Cosmian)

Project mention: Show HN: Cosmian Opensource, feature-rich, scalable, Key Management System | news.ycombinator.com | 2023-08-23

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2024-03-21.