zeroize

Secure memory handling primitives for Rust — zeroization on drop, mlock-protected regions, constant-time comparison, and compile-time enforced memory safety boundaries

Run sensitive operations without leaving secrets around.

Marrow is an experimental, zero-trust desktop messenger designed for high-performance and future-proof privacy. Powered by Rust, Tauri v2, and Preact, it combines hybrid post-quantum cryptography (ML-KEM-768 + X25519) with Double Ratchet E2EE and libp2p networking.

Secure types for handling sensitive data in Rust

A portable, cross-platform encrypted container. Secure workspace with zero-trace memory management.

Secrets that live only as long as you do — a session-bound, memory-zeroizing dead-man's-switch. Locks secrets in non-swappable RAM and wipes + SIGKILLs the instant your session dies. Hardened Rust, seccomp-confined, with an MCP adapter for agents.

Secure, pooled buffers with aggressive memory management

Encrypted Vault for your needs, information, personality, work etc.

LAN security with physical QR verification + cryptographic defense-in-depth. Rust implementation of 7-layer defense architecture. 局域网安全方案：物理二维码验证 + 密码学纵深防御，Rust七层防御架构实现。

secure, offline-first hd wallet generator for solana and ethereum. built in rust with strict memory zeroization and owner-only file permissions

A dependency-free, no_std Rust crate for secure in-memory secret handling, constant-time checks, and automated clear-on-drop zeroization.

Best-effort secret memory zeroing, constant-time operations, and secure containers for pure Dart.

Post-quantum-oriented file encryption CLI in pure Rust — AES-256-GCM + HKDF-SHA256, Argon2id passphrases, symmetric-only by design 🔒

Encrypt & compress folders with YubiKey hardware security — AES-256-GCM, touch-to-decrypt, cross-platform Rust GUI

W3C WebAuthn PRF 및 Windows Hello TPM 2.0 하이브리드 파이프라인 기반 클라이언트 완결형 볼트 (Rust Wasm)

Deterministic cryptographic signing model based on episodes, audit consistency, Shamir reconstruction and secure zeroize. Phase I–III implementation with full documentation and deterministic test suite.

Run a command with secrets fetched just-in-time, injected leak-tight, and gone on exit — plus a safe, scoped direnv. Rust.

Userspace WireGuard® Implementation in Rust

krypto — secret handling library

Typed secret materialization — generate and seed secrets into SOPS / Akeyless / pluggable backends without ever exposing plaintext to the operator. Two-crate workspace (cofre-types lib + cofre bin).