The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →
Top 23 Ecdsa Open-Source Projects
-
swift-crypto
Open-source implementation of a substantial portion of the API of Apple CryptoKit suitable for use on Linux platforms.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
multi-party-ecdsa
Rust implementation of {t,n}-threshold ECDSA (elliptic curve digital signature algorithm).
-
docker-nginx-certbot
Automatically create and renew website certificates for free using the Let's Encrypt certificate authority.
-
RustCrypto Elliptic Curves
Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
GpgFrontend
A free, open-source, robust yet user-friendly, compact and cross-platform tool for OpenPGP encryption. It stands out as an exceptional GUI frontend for the modern GnuPG (gpg).
-
ecdsa-private-key-recovery
A simple library to recover the private key of ECDSA and DSA signatures sharing the same nonce k and therefore having identical signature parameter r
-
Crypt-LE
Crypt::LE - Let's Encrypt / Buypass / ZeroSSL and other ACME-servers client and library in Perl for obtaining free SSL certificates (inc. generating RSA/ECC keys and CSRs). HTTP/DNS verification is supported out of the box, EAB (External Account Binding) supported, easily extended with plugins, easily dockerized.
-
zkp-ecdsa
Proves knowledge of an ECDSA-P256 signature under one of many public keys that are stored in a list.
-
bitcoin-recover-privkey
Proof of concept of bitcoin private key recovery using weak ECDSA signatures
-
flutter-openpgp
OpenPGP for flutter made with golang for fast performance with support for android, ios, macos, linux, windows, web and hover
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
I recommend using PHPSecLib which has a powerful SSH library that is far more versatile than the official PHP SSH extension.
Project mention: Swift for Android: How to use Swift-Crypto with Android Studio | dev.to | 2023-11-14dependencies: [ .package(url: "https://github.com/scade-platform/swift-java.git", branch: "main"), .package(url: "https://github.com/apple/swift-crypto.git", .branch("main")) ]
Project mention: A beginner's guide to constant-time cryptography (2017) | news.ycombinator.com | 2024-02-22I noticed in July of 2022 that Go did exactly the vulnerable example and reported it to the security team.
https://github.com/golang/go/issues/53849
It was fixed as of Go 1.21 https://go.dev/doc/go1.21
---
The article cites JavaScript, which is not constant time. There's no sure way to do constant time operations in JavaScript and thus no secure way to do crypto directly in Javascript. Browsers like Firefox depend on low level calls which should be implemented in languages that are constant time capable.
JavaScript needs something like constant time WASM in order to do crypto securely, but seeing the only constant time WASM project on GitHub has only 16 stars and the last commit was 2 years ago, it doesn't appear to have much interest. https://github.com/WebAssembly/constant-time
However, for JavaScript, I recommend Paul's library Noble which is "hardened to be algorithmically constant time". It is by far the best library available for JavaScript. https://github.com/paulmillr/noble-secp256k1
BlueSky uses @noble/secp256k1 which performs this stuff in Javascript, with about 880* verifications per second on the Apple M2 (a chip with a relatively high IPC, likely higher than your average server).
Verifying those messages will take about a minute of CPU time per user (assuming no impact from cache misses due to threads swapping in and out and processing new data). I think that's quite significant.
* = https://github.com/paulmillr/noble-curves
Project mention: NIST: Personal Identity Verification (PIV) of Federal Employees and Contractors | news.ycombinator.com | 2024-03-23PuTTY-CAC was an interesting, although imperfect solution to using PIV/CAC cards together with SSH. I remember piloting it from 2013-2014 at an agency. Back then, it was maintained by Dan Risacher[0]. Nowadays it is maintained on GitHub[1] and adopted some interesting features like FIDO.
[0] https://risacher.org/putty-cac/
[1] https://github.com/NoMoreFood/putty-cac
Project mention: GpgFrontend: Open-source, Cross-platform GnuPG Front end | news.ycombinator.com | 2024-03-16
Project mention: If I sign multiple messages with the same nonce, my private key can be extracted? | /r/ethdev | 2023-06-27
I wonder if it is possible to make https://github.com/wqweto/VbAsyncSocket compile on Visual Basic 4, then you could target 16 bit.
Ecdsa related posts
- PuTTY vulnerability vuln-p521-bias
- Noble Cryptography
- Swift for Android: How to use Swift-Crypto with Android Studio
- If I sign multiple messages with the same nonce, my private key can be extracted?
- Interacting with the bitcoin network without typical software.
- Covert a seed phrase to Bitcoin address(es) offline
- Can swift be used for web, data science, or cybersecurity?
-
A note from our sponsor - WorkOS
workos.com | 29 Apr 2024
Index
What are some of the best open-source Ecdsa projects? This list will help you:
Project | Stars | |
---|---|---|
1 | PHPSecLib | 5,247 |
2 | swift-crypto | 1,403 |
3 | multi-party-ecdsa | 940 |
4 | python-ecdsa | 890 |
5 | docker-nginx-certbot | 854 |
6 | noble-secp256k1 | 693 |
7 | RustCrypto Elliptic Curves | 602 |
8 | noble-curves | 585 |
9 | putty-cac | 448 |
10 | signatures | 432 |
11 | GpgFrontend | 424 |
12 | ecdsa-private-key-recovery | 383 |
13 | Crypt-LE | 348 |
14 | cryptotools | 198 |
15 | zkp-ecdsa | 192 |
16 | bip32 | 167 |
17 | VbAsyncSocket | 159 |
18 | btclib | 98 |
19 | bitcoin-recover-privkey | 70 |
20 | flutter-openpgp | 60 |
21 | BreakingECDSAwithLLL | 59 |
22 | interesting-keys | 50 |
23 | secp256k1.cr | 48 |
Sponsored