occlum
occlum/occlumMemory-safe, multi-process library OS for Intel SGX that runs legacy applications inside enclaves with encrypted filesystems and lightweight…
cloud-infrastructure-securitycloud-securitycryptography+5
1.5k
occlum/occlumMemory-safe, multi-process library OS for Intel SGX that runs legacy applications inside enclaves with encrypted filesystems and lightweight…
jschauma/emudhraExample programs in Go, Java, Node, Perl, Python, Ruby, Rust, and curl that test whether a TLS trust store rejects connections to known-bad eMudhra…
project-oak/oakMeaningful control of data in distributed systems.
tinfoilsh/cvmimageBuilds a hermetic, reproducible confidential VM image for secure inference and custom compute on AMD SEV-SNP and Intel TDX, with auditable…
0xajstrike/emsign-trust-scanOffline scanner for the October 2026 eMudhra/emSign CA key compromise, finds affected certificates across OS trust stores, CA bundles, Java cacerts,…
cdxgen/cdxgenCreates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…
oscerd/cve-2026-85300Runnable Spring Boot and Quarkus reproducer for CVE-2026-85300, demonstrating camel-pqc writing private keys with permissive umask-derived file…
iana-org/get-trust-anchorTool for fetching/refreshing DNS Root Zone trust anchors
slowmist/knowledge-baseCurated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…
soufianecyber/quantum-safe-migrationEnterprise-grade toolkit to audit and migrate legacy infrastructure to hybrid post-quantum cryptography (PQC).
nationwide-group-oss/cryptopticCodeQL-based scanner that inventories cryptographic function calls across repositories and GitHub organizations, producing a Cryptographic Bill of…
philippeabraxas-jpg/responsible-alliance-protocolSafety cannot be a prompt instruction. TBP provides an external execution-layer boundary for autonomous agents, enforcing hard F/I/W invariants via…
nicmx/fort-validatorRPKI Relying Party and RTR server that validates BGP route origin authorizations and serves validated data to routers over the RTR protocol.
owasp/openshieldOpen source CSPM for Azure - scan for misconfigurations and quantum-unsafe cryptography, map findings to CIS/NIST/ISO27001/SOC2, and fix them with…
nserser/lr-webpkiReference implementation of LR+ post-quantum authentication over WebPKI CA context, with corpus pipeline, reconstruction, evaluation, and provenance…
noxxi/p5-ssl-toolsPerl scripts for SSL/TLS analysis: check protocol and cipher support, verify certificates, test OCSP, and detect Heartbleed across SMTP, HTTPS, and…
v-jfanca/cve-2026-20833-rc4-kerberosKerberos RC4 deprecation: detection, remediation and guidance (CVE-2026-20833)
scriptzteam/paranoid-copy-fail-cve-2026-31431Paranoid disable whole AF_ALG + algif_* modules - Copy Fail (CVE-2026-31431)