Top 9 Otr Open-Source Projects

  • end-to-end

    End-To-End is a crypto library to encrypt, decrypt, digital sign, and verify signed messages (implementing OpenPGP)

    Project mention: age and authenticated encryption | reddit.com/r/cryptography | 2022-10-05

    [1] No warning on decrypting Tag 9 (no integrity protection) packets

  • wire-ios

    📱 Wire for iOS (iPhone and iPad)

    Project mention: IamA 22 year old girl in Iran where they killed Mahsa Amini and people are protesting against the regime.AMA! | reddit.com/r/IAmA | 2022-09-25

    A better alternative to Signal is Wire https://wire.com/download

  • InfluxDB

    Build time-series-based applications quickly and at scale.. InfluxDB is the Time Series Data Platform where developers build real-time applications for analytics, IoT and cloud-native services in less time with less code.

  • ChatSecure-iOS

    ChatSecure is a free and open source encrypted chat client for iOS that supports OTR and OMEMO encryption over XMPP.

  • Xabber

    Open-source XMPP client for Android

    Project mention: XMPP: The secure communication protocol that respects privacy | news.ycombinator.com | 2022-01-10

    Depending on when you last tried xmpp you might have experienced the OTR hell, which was never really codified 100% and spawned subtle incompatibilities between clients leading to weird and nondescript errors that never got addressed. Nowadays the popular clients support omemo (https://conversations.im/omemo/), which makes encryption just work™ out of the box and without hassle. The only exception to this is xabber, who are apparently afraid of law enforcement destroying their lifes should they implement proper encryption and also feel no need to support it anyways: https://github.com/redsolution/xabber-android/issues/540

  • session-desktop

    Session Desktop - Onion routing based messenger

    Project mention: Signal impersonation risk? | reddit.com/r/privacy | 2022-10-27

    Session's reasoning seems much more... cagey. Telling people to recreate their identities themselves sounds a little like the Threema stopgap solution, but it's much sloppier (I can't imagine end users WANT to recreate their account and communicate this to all their contacts via a third party). They're talking about implementing this eventually, but the ticket for doing so was closed right after saying this.

  • JSXC

    :speech_balloon: Real-time xmpp chat application with video calls, file transfer and encrypted communication.

    Project mention: Does XMPP support video conferencing? | reddit.com/r/xmpp | 2022-01-20

    https://www.jsxc.org/ they are working a in a multiparty videoconferencing...

  • coyim

    coyim - a safe and secure chat client

  • Zigi

    Close all those tabs. Zigi will handle your updates.. Zigi monitors Jira and GitHub updates, pings you when PRs need approval and lets you take fast actions - all directly from Slack! Plus it reduces cycle time by up to 75%.

  • otrv4

    Off-the-Record Messaging Protocol version 4. -This is a draft- This repository is a mirror of http://bugs.otr.im/otrv4/otrv4

    Project mention: Off-the-Record Messaging | news.ycombinator.com | 2022-02-20

    I may have missed something here, but the write-up seems to be missing the main problem with OTR, which is that both parties need to be online at the same time to do the key-exchange to set up the session - at least in OTRv3 (https://otr.cypherpunks.ca/Protocol-v3-4.0.0.html)

    This is why the Double Ratchet Algorithm was created (back in 2013!) where you prepublish a pool of one-time-keys which can be used to establish sessions without you having to be online - as well as defining how to ratchet the message keys forwards both by new DH exchanges and simple hash ratchets (hence the name Double Ratchet).

    OTRv3 has the sole advantage that you can trivially tunnel it over any existing synchronous transport (e.g. an IRC DM), given it doesn't have the concept of setting up sessions asynchronously. However, this is a bit of a moot point these days, given modern messaging systems like Matrix, XMPP and Signal natively support the Double Ratchet via Olm, OMEMO & libsignalprotocol respectively - so OTRv3 really is a bit of a historical curiosity at this point.

    Meanwhile OTRv4 does introduce the idea of offline conversation initialisation (https://github.com/otrv4/otrv4/blob/master/otrv4.md#offline-...), but it doesn't seem to have got much traction, relative to the fairly ubiquitous Double Ratchet. (Has anyone seen it in the wild? It looks like coy.im might speak it? https://github.com/otrv4 seems fairly dead :/)

    Finally, lots of E2EE research is going into efficient shared ratchets for group communication rather than 1:1 sessions - such as MLS (https://datatracker.ietf.org/wg/mls/about/), DMLS (https://matrix.uhoreg.ca/mls/decentralised.html) and DCGKA (https://www.cylab.cmu.edu/news/2021/11/23-group-messaging.ht...).

  • plugins

    Officially supported Psi plugins (by psi-im)

    Project mention: Do you have an example of Psi++ plugin development? | reddit.com/r/xmpp | 2022-03-02

    u/Wonderful_Aspect_634, u/upofadown: Plugins are here: https://github.com/psi-im/plugins. Reddit: /r/psimessenger and /r/psiplus All sources are here: - https://github.com/psi-im - https://github.com/psi-plus

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2022-10-27.

Otr related posts


What are some of the best open-source Otr projects? This list will help you:

Project Stars
1 end-to-end 4,090
2 wire-ios 3,149
3 ChatSecure-iOS 3,079
4 Xabber 1,790
5 session-desktop 989
6 JSXC 675
7 coyim 566
8 otrv4 183
9 plugins 51
Truly a developer’s best friend
Scout APM is great for developers who want to find and fix performance issues in their applications. With Scout, we'll take care of the bugs so you can focus on building great things 🚀.