ungovernable.tech
search 245 entries/ctrl k

Curated outbound links · hand-checked

Directory

747 links to projects, specifications, papers and tools, grouped by pillar. Hand-checked, with dead and superseded links marked. External sites are their own affair — follow with care.

Anonymity Networks51 links

Tor Network

  • Lyrebird — Tor pluggable transport implementation supporting obfs4 and related bridge transports
  • Conjure — Refraction networking pluggable transport for censorship circumvention
  • Tor Project — Free software and decentralized network for anonymous communication
  • Tor Browser — Hardened Firefox browser configured for Tor
  • Onion Services — Hidden services accessible only within the Tor network
  • Tor Pluggable Transports — Censorship circumvention via obfs4, snowflake, and meek bridges
  • Snowflake — WebRTC-based pluggable transport for Tor censorship resistance
  • Snowflake GitHub — Original WebRTC pluggable transport repository with client, proxy, and library code
  • Snowflake 2.0 — Major 2025 update with improved obfuscation and scalability for high-censorship regions
  • WebTunnel — HTTP-based obfuscation transport simulating regular HTTPS traffic
  • Conjure — New pre-alpha pluggable transport available in Tor Browser nightlies
  • Tor2web caution — Access .onion services from a regular browser (trade-off: no anonymity) Tor2web gives no anonymity to the reader; use Tor Browser instead.
  • Onion-Location — HTTP header for revealing .onion sites via regular browsers
  • Tor Network Documentation — Comprehensive manual for using Tor effectively
  • Tor Browser: Unblocking Tor — Official guide to obfs4, meek, Snowflake, WebTunnel, bridges, and Lyrebird
  • Tor daemon bridge setup — torrc examples for obfs4, Snowflake, and WebTunnel pluggable transports

I2P (Invisible Internet Project)

  • I2P — Fully decentralized, self-organizing overlay network for anonymous communication
  • i2p.i2p GitHub — I2P Java implementation
  • I2Pd — Lightweight C++ implementation of I2P client
  • I2P+ — Enhanced Java I2P router distribution with improved console UX and performance tuning
  • I2P+ GitHub — Source repository for the I2P+ soft fork of the Java I2P router
  • I2P Botnet — Community resources and services on I2P
  • StormyCloud I2P Reseed — Public signed reseed server for bootstrapping new I2P routers
  • I2P 2.11.0 Release — Latest release with improved NTCP2 resistance to probing attacks
  • I2P 2.9.0 Release — June 2025 release with thread and performance improvements
  • awesome-i2p — Curated list of I2P implementations, libraries, projects, and resources

Mix Networks

  • Nym — Decentralized noise-generating mixnet providing network-level anonymity
  • Nym GitHub — Rust monorepo for Nym nodes, gateways, clients, SDKs, wallet, explorer, and network services
  • NymVPN — Cross-platform VPN application leveraging Nym's 5-hop mixnet for traffic privacy
  • NymVPN v2026.7 — Split tunneling (beta), post-quantum Lewes protocol, improved macOS authentication (April 2026)
  • NymVPN vs VPNs vs Tor vs I2P vs dVPNs — Detailed comparison of anonymity solutions
  • Nym NEAR Integration — Nym mixnet privacy for NEAR blockchain ecosystem
  • Nym 2026 Roadmap — Plans for enhanced censorship resistance and privacy features
  • NymVPN Censorship Resistance 2026 — Building decentralized VPN network for bypassing censorship
  • NymVPN dApp Mode — Route wallet traffic through mixnet via SOCKS5 proxy for blockchain metadata privacy
  • Katzenpost — Mix network research project and protocol specification
  • Katzenpost documentation — Formal mix network protocol specification
  • Katzenpost GitHub — Open source mix network implementation with post-quantum cryptography
  • Loopix Anonymity System — Piotrowska et al. (2017) — low-latency mixnet with cover traffic and provider-based anonymous messaging
  • Loopix Messaging — Experimental Go implementation of anonymous messaging using mix networks
  • Mixnet and ACN Research — Curated bibliography for mixnets and anonymous communication networks
  • Katzenpost FOSDEM 2025 — Post-quantum mixnet implementation in Go
  • Katzenpost Threat Model — Security assumptions and attack scenarios for the mixnet design
  • HOPR — Decentralized, metadata-private point-to-point data exchange protocol based on an incentivized mixnet

Related Privacy Infrastructure

Oblivious Requests

Anonymous Sharing and Submissions

  • OnionShare — Share or receive files, host static sites and run chat rooms through Tor onion services on your own computer
  • SecureDrop — Freedom of the Press Foundation's newsroom submission system with onion services and an isolated document-viewing workflow

Censorship Circumvention27 links

Tor bridges and pluggable transports

VPN protocols and self-hosting

  • WireGuard — Encrypted IP tunnels over UDP with cryptokey routing
  • WireGuard quick start — Keys, interfaces, peer configuration and connection checks
  • AmneziaWG — WireGuard-Go fork with traffic obfuscation
  • Shadowsocks — Encrypted proxy project and protocol documentation

Circumvention apps and services

  • Outline — Software for running and sharing your own circumvention server
  • Outline setup — Manager installation, access keys and Client downloads
  • Outline Server source — Shadowsocks service and access-key management API
  • Psiphon — Circumvention service with client downloads and documentation
  • Psiphon tunnel core — Open-source client and server for adaptive circumvention tunnels
  • Mullvad — VPN provider's official site and applications
  • Mullvad account and payment policy — Numbered accounts, payment handling and the operator’s stated logging policy

Measurement

  • OONI Probe — Mobile, desktop and command-line network measurement tools
  • OONI test catalogue — Website, messaging and circumvention-tool reachability tests
  • OONI Explorer — Search and compare published network measurements
  • OONI data access — API and bulk-data interfaces for independent analysis
  • OONI Probe risks — Read before testing: visibility, publication and potential legal risks

DNS

Secure Messaging49 links

Signal Protocol

Matrix Protocol

  • vodozemac — Pure Rust implementation of Matrix Olm and Megolm cryptographic ratchets
  • Matrix.org — Open protocol for decentralized, federated real-time communication
  • Olm — Double Ratchet implementation for 1:1 Matrix encryption
  • Megolm — Sender-key ratchet for efficient group encryption in Matrix
  • Matrix E2EE Implementation Guide — Official guide to Matrix's end-to-end encryption architecture
  • Element — Flagship Matrix client for web, desktop, and mobile

Messaging Layer Security (MLS)

  • OpenMLS — Rust implementation of the RFC 9420 Messaging Layer Security protocol
  • Wire Core Crypto — MLS-based end-to-end encryption library used by Wire clients
  • RFC 9420: MLS Protocol — IETF standard for efficient group end-to-end encryption
  • MLS Architecture — Architecture document for MLS deployment
  • TreeKEM — External-Operations TreeKEM and the security of MLS in RFC 9420
  • MLS RFC Overview — Detailed walkthrough of RFC 9420 design and security properties
  • White Noise — Open-source messenger using MLS over Nostr relays (Marmot); no phone number or email, beta
  • Marmot Protocol — Specification for MLS group messaging with Nostr identities and relays
  • MDK (Marmot Development Kit) — Rust implementation of Marmot used by White Noise, with bindings
  • Cordn — MLS group messaging via a self-hostable coordinator reached over Nostr relays (ContextVM); beta
  • ContextVM — Transport for exposing services over Nostr relays without domains or open ports; used by Cordn

Metadata-Resistant Messaging

  • SimpleX Chat — First messaging network operating without user identifiers of any kind
  • SimpleX Messaging Protocol — Transport-agnostic protocol for distributed secure unidirectional messaging
  • SimpleX v6.4.1 — July 2025 release with contact management and group protection features
  • SimpleX Security Audit — Trail of Bits cryptographic design review for v6.1
  • Cwtch — Decentralized, metadata-resistant messaging over Tor v3 onion services
  • Cwtch Implementation — Official peer implementation for asynchronous, metadata-resistant Cwtch applications
  • Briar — Peer-to-peer encrypted messaging via Tor, Bluetooth, and WiFi
  • Briar Desktop 0.6.0-beta — Beta desktop client adding blogs support to secure P2P messaging
  • Briar 1.5.17 — March 2026 Android release with improved connectivity
  • Quiet — Experimental team chat synchronised over Tor; unaudited and explicitly unsuitable for critical privacy or security needs
  • Session — Decentralized private messenger using onion-routed service nodes and account IDs instead of phone numbers
  • Session Desktop — Decentralized onion-routed messenger using service nodes for offline storage and IP protection

Modern Encryption Tools

  • age — Simple, modern file encryption tool (Go) — a GPG replacement
  • minisign — Minimalistic tool for signing files and verifying signatures
  • OpenPGP.js — OpenPGP implementation in JavaScript (maintained by Proton Mail)
  • Sequoia PGP — Modern OpenPGP implementation in Rust
  • Gopenpgp — Go wrapper around GPG for high-performance OpenPGP operations

Privacy Infrastructure

Federated and Distributed Messengers

  • Delta Chat — Chat over email transport; default chatmail relays enforce end-to-end encryption, with documented metadata and forward-secrecy limits
  • XMPP with OMEMO — Double Ratchet encryption for XMPP devices; the specification remains Experimental and excludes metadata protection
  • Jami — Distributed messaging and calls with device-held identities, OpenDHT discovery and swarm conversations

Experimental Messaging

  • Tox — Encrypted peer-to-peer messaging with public-key contacts; friends can see each other's IP addresses
  • Veilid — Peer-to-peer application framework with encrypted private routing; VeilidChat is a separate beta application

Off-Grid and Mesh Networks78 links

LoRa Mesh Networks

  • disaster.radio — Paused solar-powered LoRa disaster recovery mesh network with firmware, hardware, and web app components
  • Meshtastic — open source, off-grid, decentralized mesh network using LoRa
  • MeshCore — Meshtastic's sibling LoRa mesh: same boards, dedicated repeaters and learned direct routes
  • Meshtastic GitHub
  • Meshtastic firmware
  • Meshtastic Android
  • Meshtastic Python — Official Python CLI and API for administering and automating Meshtastic devices
  • Meshtastic 2025 Beginner Guide — Comprehensive guide for building off-grid mesh networks
  • cubeos-app/meshsat — Meshtastic-to-Iridium satellite bridge: one gateway, unlimited mesh nodes, $15/month
  • Yeraze/meshmonitor — Web tool for monitoring Meshtastic node deployments over TCP/HTTP (386 stars)
  • Slofi/overmesh — Self-hosted Meshtastic dashboard with node map, chat, bot, offline maps, and Mesh Sense
  • Meshtastic Home Assistant — Home Assistant custom integration for Meshtastic gateways, sensors, notifications, and automations
  • MESH-API — Experimental API router bridging Meshtastic and MeshCore networks to local services, dashboards, and alerts
  • Akita Meshtastic eMail — Experimental store-and-forward email-like messaging over Meshtastic LoRa meshes
  • Wio Tracker 1110 — Dev kit for Meshtastic with GPS, solar charging
  • Meshtastic Beginner Guide 2025 — Comprehensive beginner's guide for Meshtastic
  • socialmesh — Offline Meshtastic companion app for messaging, node discovery, and mesh exploration over BLE/USB
  • pyMC_core — Python MeshCore library for SPI LoRa radio modules and off-grid field deployments

MeshCore

  • MeshCore firmware — MIT-licensed LoRa mesh firmware and C++ routing library: companions, dedicated repeaters, room servers
  • awesome-meshcore — Curated resources for MeshCore LoRa text communications and supported hardware
  • MeshCore documentation — Official docs: firmware roles, CLI, packet format and companion protocol
  • MeshCore web flasher — Flash companion, repeater or room-server firmware from the browser

Reticulum Stack

Delay-Tolerant Networks (DTN)

Bluetooth Mesh Messaging

  • Bitchat (iOS/macOS source) — Bluetooth LE mesh messenger with a Nostr fallback; public domain
  • Bitchat on Wikipedia — Encyclopedia overview of the Bitchat messenger and its history
  • Bitchat — Project site: phone-only Bluetooth mesh chat with no accounts or servers
  • Bitchat whitepaper — Protocol v2.0: BLE mesh, Noise encryption, couriers, Nostr path and its metadata limits
  • Bitchat for Android — Protocol-compatible Android client with Tor and Wi-Fi Aware support

Overlay Mesh Networks

Decentralized P2P

Hardware & Radios

Resources

Community Wi-Fi

  • LibreMesh — Community mesh architecture with BATMAN-adv and Babel

Amateur packet radio

  • APRS-IS — Internet distribution of APRS reports and radio-gateway guidance

Delay-tolerant networking

Satellite access

  • Starlink direct-to-cell — Official service notice describing LTE-phone messaging with mobile partners
  • Eutelsat OneWeb — LEO connectivity with dedicated user terminals
  • Amazon Leo — Official FAQ for the former Project Kuiper, including rollout status

Sovereign Naming31 links

Nostr & Public-Key DNS

  • nomen — Nostr and Bitcoin based naming system
  • pkdns — pkarr based DNS setup compatible with existing DNS
  • pkarr — Public Key Addressable Resource Records
  • Nuhvi/pkarr — Public-Key Addressable Resource Records using Mainline DHT and BEP44 for sovereign TLDs
  • pkdns-publisher — Rust service that republishes PKARR DNS records to keep them alive on Mainline DHT
  • Pkarr Introduction — Technical overview of public-key addressable DNS records over Mainline DHT
  • Pubky Core — Homeserver and SDK stack for public-key-based censorship-resistant web applications
  • Pubky Nexus — Backend indexing layer connecting Pubky homeservers to social-app APIs
  • Pubky App — Web client for the Pubky social application ecosystem

ENS

  • Ethereum Name Service — Ethereum-based decentralized naming system
  • ENS Documentation — Official protocol, resolution, registrar, resolver, and developer docs
  • ENSIP-1 — Core ENS protocol specification for registry, resolvers, namehash, and registrars
  • ENS Contracts — Core smart contracts for ENS registry, registrars, and public resolvers

Cardano DNS

Handshake

Namecoin

Mesh network naming

  • zhoreeq/meshname — Universal naming system for all IPv6-based mesh networks (CJDNS, Yggdrasil)

Identity, Social and Trust81 links

Nostr: Nostr Protocol

  • nak — Command-line tool for creating, signing, querying, and publishing Nostr events
  • Nostr — Notes and Other Stuff Transmitted by Relays — minimalist decentralized social protocol
  • NIP-01 — Core protocol specification: events, kinds, relays
  • nostr-protocol/nips — Nostr Implementation Possibilities — protocol extension proposals
  • nostr-tools — JavaScript library for building Nostr clients
  • nostr-rs — Rust Nostr library with FFI bindings
  • nostr.how — Comprehensive Chinese documentation on Nostr protocol

Nostr: Nostr Clients

  • Damus — iOS Nostr client (Swift)
  • Amethyst — Android Nostr client - v1.06.0 released early 2026 with NIP-100 support
  • Primal — Cross-platform Nostr client with social feed - v3.0 released early 2026
  • Snort — Web-based Nostr client (React)
  • Gossip — Native desktop Nostr client in Rust
  • Coracle — Web Nostr client with relay management
  • Notedeck — Nostr client v0.8 released early 2026

Nostr: Nostr Relays

  • Bloom — Cross-platform bundled Blossom media server and Nostr relay for self-hosting
  • nostr-rs-relay — Rust-based Nostr relay with SQLite storage
  • strfry — High-performance C++ Nostr relay
  • nostr-ts-relay — TypeScript relay implementation
  • nostrcheck-server — Self-hostable Nostr service server with relay, NIP-96/Blossom file hosting, NIP-05, NWC, and WoT
  • NostrGator — Docker stack for sovereign Nostr relays, file hosting, Lightning wallet integration, and monitoring

Nostr: Nostr Ecosystem

  • nostr-build — Media hosting for Nostr
  • nostr-band — Nostr search engine and analytics
  • nsecbunkerd — Remote key signing for Nostr
  • awesome-nostr — Curated list of Nostr projects and resources
  • NostrHub — NIPs, apps, and repos discovery platform
  • zap.store — Decentralized app distribution for Nostr
  • Blossom — HTTP blob-storage specification using Nostr keys for identity and authorization
  • NIP-96 — HTTP file storage integration for Nostr clients, deprecated in favor of NIP-B7
  • nostr-idb — IndexedDB-backed event store with a relay-like API for local-first Nostr apps

Nostr: Nostr Payments & Compute

  • Cashu NUTs — Protocol specifications for Cashu ecash wallets and mints, including Nostr mint backup
  • Routstr Core — Nostr discovery plus Cashu micropayments for permissionless API/inference routing
  • NIP-47 — Nostr Wallet Connect specification for controlling Lightning wallets over Nostr
  • Nostr Wallet Connect Docs — Official NWC protocol documentation and implementation guidance
  • Alby NWC App — Go application for connecting apps to a Lightning node or wallet over Nostr

Nostr: Nostr & Identity

  • NIP-05 — Mapping Nostr keys to DNS-based identifiers
  • NIP-19 — bech32-encoded entities (nsec, npub, note, nprofile, nevent)
  • NIP-26 — Delegated event signing
  • NIP-46 — Nostr Connect — remote signing for multi-device
  • NIP-98 — HTTP Auth — ephemeral events for authorizing HTTP requests

Nostr: Nostr vs ATProto

Identity: W3C Decentralized Identifiers (DIDs)

  • W3C DID Core v1.0 — Decentralized Identifiers specification — globally unique, self-owned identifiers
  • W3C DID v1.1 — Updated DID specification with improved verification methods
  • did:key Method — Simple DID method based on expanding a cryptographic public key into a DID Document
  • Microsoft ION — Decentralized DID network built on Bitcoin (Sidetree protocol)
  • did:web Method — DID method using web domains for DID Document resolution
  • did:ethr Method — Ethereum-based DID method for blockchain identity

Identity: Verifiable Credentials

Identity: Decentralized PKI

  • DPKI Overview — Decentralized PKI: replacing Certificate Authorities with blockchain-based trust
  • Namecoin — Blockchain-based naming system that can serve as decentralized PKI and TLS certificate anchoring
  • PKARR — Public Key Addressable Resource Records — DNS-like records signed by public keys
  • KERI — Key Event Receipt Infrastructure for decentralized identifier key management

Identity: Identity & Privacy

  • ZK Identity — Polygon ID — zero-knowledge identity protocol for privacy-preserving verification
  • anon-aadhaar — ZK protocol to prove possession of Aadhaar (Indian ID) without revealing identity
  • World ID — Privacy-preserving proof of personhood via iris biometrics with ZK proofs
  • EUDI Wallet — European Digital Identity Wallet under eIDAS 2.0 regulation (2026)

Web of Trust

Web of Trust: Nostr Web of Trust

Web of Trust: GPG Web of Trust

Web of Trust: Modern OpenPGP

  • Sequoia PGP — Modern, safe OpenPGP implementation in Rust
  • OpenPGP.js — JavaScript OpenPGP implementation (maintained by Proton, RFC 9580)
  • Gopenpgp — High-level Go wrapper for OpenPGP encryption and signing
  • rPGP — OpenPGP implementation in pure Rust
  • age — Modern file encryption replacing GPG for most use cases (Go)
  • minisign — Minimalistic file signing and verification tool

Federation

  • ActivityPub — W3C Recommendation for actor inboxes, outboxes and social federation
  • ForgeFed — ActivityPub extension for federation between code collaboration services

Code and Collaboration

  • Radicle protocol — Peer replication of Git repositories and collaborative objects; read the transport-security warning

Replicated identities and feeds

Authorization

  • Biscuit — Public-key authorization tokens with offline attenuation and Datalog policy

Financial Sovereignty109 links

Atomic Swaps

Atomic Swaps: Adaptor Signatures (Scriptless Swaps)

Atomic Swaps: Cross-Chain Infrastructure

  • COMIT Network — COMIT — an open protocol for trustless cross-chain trading
  • DCRDEX / Bison Wallet — Decentralized exchange powered by atomic swaps with no KYC, no fees
  • Thorchain — Cross-chain liquidity protocol (AMM-based, not atomic swap)
  • Lightning Labs Loop — Submarine swaps between on-chain and Lightning
  • xmr-btc-swap — Trustless Monero-Bitcoin atomic swap
  • Farcaster Node — Microservice-based Bitcoin-Monero atomic swap node
  • Serai — DEX architecture for BTC, ETH, DAI, and XMR using threshold multisig and swap cryptography
  • Mintlayer — Bitcoin-compatible chain with native atomic swaps on mainnet (January 2026)

Atomic Swaps: Privacy-Preserving DEXs

  • Bisq — Open-source P2P Bitcoin exchange using Tor, multisig deposits, and decentralized dispute resolution
  • Haveno — Monero-and-Tor-based decentralized P2P exchange for fiat and crypto trades
  • Penumbra — Fully shielded Cosmos zone for private staking, swaps, and market making
  • BasicSwap DEX — Peer-to-peer atomic-swap DEX with decentralized order book and no accounts
  • eigenwallet — Monero-Bitcoin DEX formerly known as UnstoppableSwap, built around atomic swaps
  • RoboSats — Private Lightning-based peer-to-peer Bitcoin exchange using Tor and hold invoices

Atomic Swaps: Privacy Analysis

CoinJoin: CoinJoin Implementations

  • Wasabi Wallet caution — Privacy-focused Bitcoin wallet with Chaumian CoinJoin zkSNACKs ended its CoinJoin coordinator in June 2024; Wasabi now relies on third-party coordinators.
  • Wasabi Wallet GitHub — Open source .NET implementation
  • WabiSabi protocol — Flexible CoinJoin with blind signatures, not just equal-output
  • WalletWasabi/WabiSabi — Anonymous credential scheme and protocol materials for coordinated CoinJoin transactions
  • JoinMarket — Decentralized CoinJoin marketplace — market makers earn fees
  • Jam — Web UI for JoinMarket
  • Whirlpool defunct — Chaumian CoinJoin implementation based on modified ZeroLink theory Whirlpool coordinator went offline with the Samourai seizure in April 2024.

CoinJoin: Payjoin (P2EP)

  • BIP 78: Payjoin — Pay-to-endpoint: receiver contributes inputs to a payment transaction
  • Payjoin Dev Kit — Tools for integrating Payjoin into wallets
  • BIP 77: Async Payjoin — Payjoin v2 using encrypted store-and-forward directory servers and OHTTP
  • Payjoin v2 Guide — Implementation-oriented explanation of asynchronous Payjoin
  • payjoin — Rust library for BIP 78 Payjoin

CoinJoin: Bitcoin Privacy Tools

CoinJoin: Privacy Research

Marketplaces: P2P Exchanges

  • Haveno Reto — Community Haveno network distribution for Monero-and-Tor-based P2P exchange
  • Bisq — Decentralized P2P Bitcoin exchange network using Tor and local payment methods

Marketplaces: Private Marketplaces

  • OpenBazaar caution — Decentralized marketplace project planning a 3.0 relaunch after the original shutdown The original OpenBazaar network shut down in 2021; relaunch plans are unproven.
  • OpenBazaar Haven archived — Mobile app for the original OpenBazaar decentralized marketplace network Client for the original OpenBazaar network, which shut down in 2021.
  • Particl Desktop — GUI for Particl Marketplace and PART wallet focused on private peer-to-peer commerce
  • Particl Core — Privacy coin and platform backend for Particl's decentralized marketplace ecosystem

Lightning: Lightning Network

  • Lightning Network — Bitcoin Layer-2 payment channel network for instant off-chain transactions
  • Lightning Labs — Company building Lightning infrastructure (LND, Loop, Pool, Taproot Assets)
  • LND v0.20 — Latest LND release with sqlite/postgres channel graph, enhanced gossip rate limits (December 2025)
  • Core Lightning (CLN) — Blockstream's Lightning implementation in C
  • LND — Lightning Network Daemon by Lightning Labs
  • Eclair — ACINQ's Scala Lightning implementation
  • LDK — Lightning Development Kit — modular library for building Lightning nodes
  • BOLT Specifications — Basis of Lightning Technology protocol specifications
  • BOLT 2: Peer Protocol — Channel management spec covering v2 channels, dual funding, and splicing
  • Lightning Pool — Marketplace for Lightning channel leases
  • Mutiny Wallet defunct — Tiny Lightning node that runs in the browser via WASM Mutiny announced the shutdown of its hosted wallet and mobile apps; the remaining option is self-hosting.
  • Phoenix — Self-custodial Lightning wallet with BOLT 12 support
  • BOLT 12 Tracker — Track BOLT 12 adoption across wallets and Lightning implementations
  • Twelve Cash — BOLT 12 offers with human-readable usernames via DNS for Core Lightning
  • Lightning Node Comparison — Detailed comparison of LND vs CLN vs LDK vs Eclair

Lightning: Discreet Log Contracts (DLCs)

Lightning: Lightning Privacy

Lightning: Lightning Splicing & Swaps

Liquid: Liquid Network

Liquid: Confidential Transactions

Liquid: Liquid Development Libraries

  • go-elements — Go library for Liquid/Elements transactions and confidential transaction primitives
  • rust-elements — Rust library for Elements transaction and block serialization
  • libwally-core — Cross-platform wallet primitives with Elements support
  • Liquid Wallet Kit — Blockstream Rust toolkit for building Liquid wallets and applications

Liquid: Liquid Wallets & Apps

  • Marina Wallet — Browser extension wallet for Liquid assets
  • AQUA Wallet — Non-custodial Bitcoin and Liquid wallet for bitcoin, L-BTC, and stablecoins
  • SideSwap — Non-custodial Liquid wallet and peer-to-peer asset swap platform

Liquid: Issued Assets on Liquid

Shielded Payments

  • Zcash — Official explanation of transparent and shielded Zcash payments
  • Zcash protocol specification — Shielded pools, notes, viewing keys and transaction rules
  • Orchard (ZIP 224) — Halo 2 shielded protocol without a trusted setup; pool-boundary privacy limits

Federated Ecash

Payment Processing

Silent Payments

Issuer-backed tokens

  • Circle token contracts — USDC EVM contract features including pause, blacklist and upgrade roles
  • Tether terms — Issuer service restrictions, freezing powers and redemption terms

Decentralized Storage27 links

Storage and retention

Sync and collaborative data

  • Syncthing — Folder synchronization between approved devices
  • Automerge — Local-first synchronization with concurrent merging and document history
  • Yjs documentation — Shared CRDT types, editor integrations and network providers
  • CryptPad — Collaborative documents with client-side encryption
  • Local-first software — Ink & Switch essay on local copies, offline work, collaboration and user control
  • CryptPad security model — Client-side encryption, instance trust and visible connection metadata

Offline libraries

  • Kiwix Reader — Read Wikipedia and other ZIM archives without an internet connection
  • Kiwix Server — Serve ZIM archives to browsers on a local network with kiwix-serve

Replication libraries and blob servers

  • Hypercore — Signed Merkle-tree logs with sparse replication and a truncation API
  • Hyperdrive — Distributed filesystem APIs with version checkouts and explicit file downloads
  • Hyperswarm — Topic-based peer discovery through a DHT and encrypted peer connections
  • Blossom specifications — HTTP blob-server protocol using SHA-256 addresses and Nostr identities

BitTorrent specifications

Mutable names

Transfer and archive services

Encrypted file transfers

Decentralized Compute18 links

Existing Projects

Distributed Compute Tooling

  • Lilypad — Decentralized GPU network for running containerized AI workloads with compute-provider payments
  • Lilypad DCN — EVM-coordinated decentralized compute network using Bacalhau and Docker for jobs
  • Fluence — Decentralized compute network for deploying VMs on independently operated infrastructure
  • Bacalhau — Distributed compute-over-data platform used by decentralized compute networks for containerized jobs

Confidential Computing86 links

GPU Confidential Computing

Confidential computing on GPUs

Confidential AI & Private Inference

Confidential computing on CPUs

Oblivious RAM & Encrypted Storage

Azure

AWS

GCP

Alibaba

Library Operating Systems

  • Gramine — Library OS for applications using Intel SGX

Homomorphic encryption libraries

  • OpenFHE — C++ library with integer, approximate and Boolean homomorphic encryption schemes
  • TFHE-rs — Rust TFHE implementation with programmable bootstrapping
  • Microsoft SEAL — C++ homomorphic encryption library implementing BFV, BGV and CKKS
  • Lattigo — Go homomorphic encryption library with CKKS bootstrapping and multiparty protocols
  • HElib — Homomorphic encryption library implementing BGV with bootstrapping and CKKS

Privacy-Enhancing Cryptography78 links

FHE: Research

  • Full Homomorphic Encryption resources — tons of FHE resources
  • Dark market implementation with FHE
  • IBM Research FHE — IBM's comprehensive resource on Fully Homomorphic Encryption, addressing the security gap when processing data. Their implementation provides security and privacy for data at rest, in transit, and during processing. IBM's work builds on Craig Gentry's groundbreaking 2009 research that introduced the first plausible fully homomorphic scheme.
  • Homomorphic Encryption at Scale — Florida Atlantic University's project exploring advancements in FHE, focusing on overcoming computational inefficiency challenges. Their research team has implemented bootstrapping techniques to reduce noise and incorporated parallel processing to enhance function optimization, particularly for linear regression models.
  • CRYPTML — A hybrid machine learning model using homomorphic encryption developed at HES-SO. This project explores a hybrid client-server architecture enabling machine learning computation on encrypted data, addressing the challenges of preserving privacy in AI applications.

FHE: Libraries and Tools

  • google/heir — A compiler for homomorphic encryption from Google, enabling automatic compilation of programs to work on encrypted data
  • OpenFHE — A comprehensive open-source FHE software library incorporating design ideas from prior FHE projects like PALISADE, HElib, and HEAAN. OpenFHE includes features like automatic maintenance operations and hardware acceleration support through a standard Hardware Abstraction Layer (HAL).
  • OpenFHE v2.0 — Major December 2025 update with improved performance and new features (ACM TOPS 2025)
  • TFHE Library by Inpher — One of the world's fastest open-source Fully Homomorphic Encryption libraries, maintained by Inpher's team with contributions from leading universities and privacy-first enterprises worldwide. The library implements the scheme described in the best paper from IACR's Asiacrypt 2016 conference.
  • TenSEAL — A practical FHE library for Python that allows performing both addition and multiplication on encrypted data. Unlike partially homomorphic encryption algorithms like RSA, ElGamal, or Paillier, TenSEAL offers fully homomorphic capabilities for real-world applications.
  • PostgreSQL Fully Homomorphic Encryption
  • The Transparent data encryption in PostgreSQL - Highgo Software Inc.
  • tfhe-rs — TFHE-rs: A Pure Rust implementation of the TFHE Scheme for Boolean and Integer Arithmetics Over Encrypted Data.
  • wgxli/simple-fhe — A dead-simple library for full homomorphic encryption (FHE) in Python
  • hung-ngm/fhe-darkpool — Test implementation of dark pool using Full Homomorphic Encryption (FHE)
  • FeanorTheElf/fheanor — A modular library for designing and optimising homomorphic encryption schemes
  • cipherflow-fhe/latti-ai — Framework for performing AI model inference on encrypted data using FHE
  • danieleschmidt/homomorphic-llm-proxy — GPU-accelerated gateway for FHE of LLM inference — process prompts on untrusted cloud infrastructure while maintaining complete privacy
  • Lattigo — Open-source lattice-based homomorphic encryption library in Go, maintained by Tune Insight (originally EPFL)
  • OpenFHE — Comprehensive open-source FHE library supporting all major schemes (BGV, BFV, CKKS, FHEW, TFHE) with hardware acceleration HAL
  • Fhenix Confidential Contracts — Solidity smart contracts for confidential ERC-20 tokens using FHE on the Fhenix L2 network

FHE: FHE Ecosystem Updates

MPC: MPC Overviews

MPC: MPC Frameworks

  • MP-SPDZ — Versatile framework for benchmarking MPC protocols across honest/dishonest majority and active/passive security models
  • EMP Toolkit — Global-scale secure multi-party computation toolkit in C++
  • CrypTen — PyTorch-based research framework for secure and privacy-preserving machine learning with MPC
  • SCALE-MAMBA — MPC system supporting SPDZ-family protocols and malicious-security settings
  • FRESCO — Java framework for efficient secure computation applications and protocol suites
  • ABY — Mixed-protocol secure two-party computation framework combining arithmetic sharing, Boolean sharing, and Yao circuits
  • MOTION — C++ framework for mixed-protocol MPC with GMW, BMR, arithmetic sharing, and OT-based protocols

MPC: MPC Applications

  • TLSNotary — MPC-based protocol for proving facts about HTTPS sessions without revealing private data
  • PSE MPC Framework — TypeScript framework and demos for MPC-powered applications (sunset but useful reference)
  • Trinity — Two-party computation design combining laconic OT, garbled circuits, and PLONK

PIR: Implementations

  • FastPIR — An efficient computational private information retrieval (CPIR) library in C++
  • SimplePIR — One Server for the Price of Two: Simple and Fast Single-Server Private Information Retrieval
  • private-search — Private Web Search for Local LLMs
  • secretflow/psi — Private Set Intersection (PSI) and Private Information Retrieval (PIR) from SecretFlow
  • vt-asaplab/pirex — Client-Efficient Private Information Retrieval (PETS 2025)
  • ahenzinger/finite-diffs-pir — Reference PIR implementation: two-server PIR in sublinear time and quasilinear space (EUROCRYPT 2026)
  • google/private-retrieval — Google C++ PIR library using SHELL homomorphic encryption components
  • OpenMined/PIR — OpenMined private information retrieval protocol implementations across shared project requirements
  • microsoft/SealPIR — Research implementation of SealPIR with low communication costs using Microsoft SEAL
  • XPIR — Ring-LWE computational PIR library from the POPETS 2016 XPIR paper
  • Onion-PIR — Lattice-based single-server PIR composing two SHE schemes for smaller replies
  • PIR-PIXR/CPIR — Reference code for committed private information retrieval
  • ChalametPIR — Stateful single-server keyword PIR scheme built on top of FrodoPIR

PIR: Academic Papers and Surveys

Access-pattern Privacy

  • Path ORAM — Stefanov and colleagues' oblivious read/write storage construction

Threshold beacons and timed release

  • drand tlock — Timelock encryption using future signatures from a threshold randomness beacon

Zero-Knowledge Proofs51 links

Zero-Knowledge Proof Systems

  • zk-SNARKs — Succinct Non-Interactive Arguments of Knowledge — compact proofs verifiable in milliseconds
  • Bulletproofs — Short proofs for confidential values without trusted setup (Bünz et al., 2018)
  • Circom & SnarkJS — Domain-specific language and toolchain for writing and verifying zk-SNARK circuits
  • Arkworks — Rust ecosystem for programming and composing zk-SNARK protocols
  • Zilch — STARK framework for scalable, transparent zero-knowledge arguments without trusted setup

ZK Rollups & Scaling

  • zkSync Era — ZK rollup on Ethereum supporting smart contracts with native account abstraction
  • Scroll — Bytecode-level compatible ZK rollup for Ethereum using proof of correctness
  • Polygon zkEVM — Open-source ZK rollup offering EVM equivalence
  • Starknet — Layer-2 network using STARK proofs for scalable dApp computation
  • Starknet 2025 Review — BTC staking, BTCFi, and privacy developments
  • Mina Protocol — Minimal-blockchain using recursive SNARKs to maintain a constant 22KB chain
  • Taiko — Fully decentralized Ethereum-equivalent ZK rollup with zero code changes for Ethereum dApps
  • Taiko Shasta Upgrade — April 2026 upgrade with up to 22x lower costs for block proposers
  • Aztec Network — Privacy-first ZK rollup with private smart contracts using Noir language
  • Linea — ConsenSys zkEVM L2 rollup with EVM-equivalence and native ETH yield (September 2025 token)
  • Manta Network — Modular ZK rollup with Universal Circuits for privacy-preserving applications

Privacy-Focused ZK

  • Aztec Documentation — Developer guides for private smart contracts on Ethereum's privacy-first zkRollup
  • Tornado Cash — Non-custodial Ethereum privacy solution using ZK proofs (note: sanctioned by OFAC)
  • Nocturne — Privacy protocol using ZK proofs for shielded Ethereum transactions
  • Zcash — Privacy-preserving cryptocurrency using zk-SNARKs (Halo 2)

ZK Identity & Credentials

  • Polygon ID — ZK identity protocol for privacy-preserving verification on blockchain
  • zkPass — Privacy-preserving identity verification using ZK proofs and TLS
  • anon-aadhaar — ZK protocol to prove possession of Aadhaar (Indian ID) without revealing identity
  • Semaphore — Generic ZK privacy layer for anonymous group membership proofs and signaling
  • MACI — Minimal Anti-Collusion Infrastructure for private, anti-bribery on-chain voting
  • Dock Wallet — Self-sovereign identity platform guide (2026)

ZK Frameworks & Libraries

Zero-Knowledge Virtual Machines (zkVM)

  • RISC Zero — Zero-knowledge verifiable general computing platform emulating RISC-V (17K stars)
  • Jolt — a16z's fast, extensible RISC-V zkVM using sumcheck and lookup arguments
  • Nexus zkVM — Modular, prover-optimized zkVM written in Rust (3.5K stars)
  • SP1 — Succinct's zkVM achieving real-time Ethereum proving (4.5K stars)
  • OpenVM — Modular zkVM framework for custom instructions, Rust frontends, and Ethereum verification
  • Valida zkVM — Archived STARK-based zkVM focused on code reuse, performance, and modularity
  • awesome-zkvm — Curated list of zkVM projects and resources

Ethereum Privacy Tooling

  • Kohaku Wallet — Ethereum Foundation reference wallet embedding on-chain privacy through the Kohaku SDK
  • Kohaku — Ethereum Foundation privacy-first tooling monorepo for Railgun, Privacy Pools, provider abstraction, and PQ accounts
  • Privacy Pools Core — ZK contracts, circuits, relayer, and SDK for approved-set private Ethereum transfers
  • Privacy Pools — Ethereum privacy pool prototype using zero-knowledge proofs and association sets

Resources

General-purpose Proofs

  • RISC Zero receipts — Program image IDs, public journals and proof verification
  • SP1 security model — Program safety, proof assumptions and which proof modes provide zero knowledge

Web Provenance

  • TLSNotary — MPC-TLS, selective disclosure and the trust placed in a notary

Post-Quantum Cryptography29 links

NIST Post-Quantum Standards

  • FIPS 203: ML-KEM — Module-Lattice-Based Key-Encapsulation Mechanism (formerly CRYSTALS-Kyber)
  • FIPS 204: ML-DSA — Module-Lattice-Based Digital Signature Algorithm (formerly CRYSTALS-Dilithium)
  • FIPS 205: SLH-DSA — Stateless Hash-Based Digital Signature Algorithm (formerly SPHINCS+)
  • NIST PQC Standardization — Official NIST post-quantum cryptography project page

Open Source Implementations

  • Cloudflare CIRCL — Go cryptographic library with post-quantum primitives including ML-KEM and ML-DSA
  • oqs-provider — OpenSSL 3 provider enabling liboqs quantum-safe and hybrid algorithms for TLS 1.3
  • liboqs — C library for quantum-safe cryptographic algorithms (Open Quantum Safe project)
  • PQClean — Clean, portable, reference implementations of post-quantum schemes
  • PQ Code Package — Maintained successor to PQClean for NIST-standardized PQC schemes
  • Open Quantum Safe — Project integrating PQC into TLS, SSH, and other protocols via liboqs
  • pqcrystals/kyber — Reference implementation of ML-KEM (Kyber)
  • pqcrystals/dilithium — Reference implementation of ML-DSA (Dilithium)
  • OpenSSL 3.5 PQC — Post-quantum TLS 1.3 integration in OpenSSL (Kyber, Dilithium)
  • OQS-OpenSSH — Prototype OpenSSH fork with liboqs-based quantum-resistant key exchange and authentication
  • OQS Demos — Integration recipes and demos for using liboqs in TLS, SSH, curl, and related software
  • itzmeanjan/ml-kem — C++20 implementation of NIST FIPS 203 ML-KEM

Hybrid Key Exchange

Migration & Compliance

Research & Analysis

Migration planning

Devices and Operational Security32 links

Browser Hardening

  • Arkenfox user.js — Firefox privacy, security, anti-tracking, and fingerprint-resistance configuration template
  • Tor Browser — Hardened Firefox browser routed through Tor for strong anonymity sets
  • LibreWolf — Firefox fork with privacy defaults, telemetry removal, and fingerprinting protections
  • Mullvad Browser — Tor Project and Mullvad privacy browser designed to reduce fingerprinting without Tor routing
  • uBlock Origin — Efficient wide-spectrum blocker for ads, trackers, malware, and coin miners
  • ClearURLs — Browser extension that removes tracking parameters from URLs
  • Privacy Possum — Browser extension that reduces and falsifies data collected by commercial trackers
  • Privacy Guides — Community-maintained recommendations for defending against mass surveillance

Mobile & Device Hardening

  • GrapheneOS — Android privacy and security hardening project for supported Pixel devices
  • Orbot — Tor VPN/proxy app for Android by Guardian Project
  • Rethink DNS + Firewall — Android encrypted DNS, WireGuard proxifier, app firewall, and connection tracker
  • TrackerControl — Android app for monitoring and blocking hidden tracker connections across installed apps
  • Exodus Privacy — Platform for auditing trackers and privacy risks in Android applications

DNS & Network Blocking

  • HaGeZi DNS Blocklists — Maintained DNS blocklists for ads, telemetry, phishing, malware, and tracking domains

Private Search

  • Whoogle Search — Self-hosted, ad-free Google metasearch proxy; final release in 2026 due to Google blocking

Fingerprinting Tests

Passkeys and Security Keys

Document Safety

  • Dangerzone — FPF tool that renders untrusted documents in isolation and rebuilds PDFs from pixels
  • mat2 — Metadata cleanup for supported documents, images and other file formats
  • ExifTool — Read and edit file metadata; PDF edits are reversible and need further sanitization

Incident Response

Router and Boot Firmware

  • OpenWrt — Linux router firmware with package management for supported hardware
  • Heads — Boot firmware with integrity checks; TPM and token protections depend on board configuration
  • fwupd — Firmware-update service for supported devices
  • Linux Vendor Firmware Service — Vendor firmware distribution and metadata used by fwupd clients

Self-Hosting Servers

  • StartOS documentation — Personal-server service installation, networking, backups and system administration
  • YunoHost — Debian-based server administration with packaged applications, users and backups