Filippo Valsorda

mkcert. A simple zero-config tool to make locally trusted development certificates with any names you'd like.

age. A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

yubikey-agent. yubikey-agent is a seamless ssh-agent for YubiKeys.

Heartbleed. A checker (site and tool) for CVE-2014-0160

whoami.filippo.io. A ssh server that knows who you are. $ ssh whoami.filippo.io

passage. A fork of password-store (https://www.passwordstore.org) that uses age (https://age-encryption.org) as backend.

gvt. gvt was a minimal go vendoring tool, based on gb-vendor. Today, you want to use modules instead.

homebrew-musl-cross. Homebrew Formula for static-friendly musl-based GCC macOS-to-Linux cross-compilers

awesome-age. A collection of projects and resources in the age file encryption ecosystem.

captive-browser. A dedicated Chrome instance to log into captive portals without messing with DNS settings.

typage. A TypeScript implementation of the age file encryption format, available as an npm package or as a bundled .js file.

mostly-harmless. A bag of various unrelated projects with varying levels of serviceability and destructiveness.

sunlight. A Certificate Transparency log implementation and monitoring API designed for scalability, ease of operation, and reduced cost.

CVE-2016-2107. Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

mlkem768. A Go implementation of the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber).

edwards25519. filippo.io/edwards25519 — A safer, faster, and more powerful low-level edwards25519 Go implementation.

vendorcheck. Check that all your Go dependencies are properly vendored

ed25519-dalek-rustgo. Wrapper for curve25519-dalek using rustgo, a technique to directly call Rust code from Go programs with near-zero overhead, meant to replace manually written assembly.

tracetools. Tools to process Go trace logs into various profiles. Complement for "go tool trace".

zcash-mini. A minimal portable Zcash z-address generator for offline / paper wallets

BERserk. A Go implementation of the BERserk attack against Mozilla NSS ASN.1 parsing of PKCS#1 RSA signatures with e = 3. Complete of a certificate generation tool, works with CAs in the trust store.

hstools. Library and tools to interact with and analyze Tor HSDirs.

homebrew-gomod. A brew command to cleanly install binaries from Go modules.

blockchainr. Exploiting ECDSA Failures in the Bitcoin Blockchain

intermediates. Package filippo.io/intermediates embeds a bundle of known unexpired, unrevoked intermediate certificates chaining to roots in the Mozilla Root Program

openbsd-fde-crack. Some code to bruteforce OpenBSD softraid encrypted drives - NOT A READY-TO-USE TOOL

travis-cron. This web app allows you to trigger Travis CI builds periodically

gorebuild. Extract the import path of Go binaries and rebuild them. No more stale GOROOT.

nistec. NIST P elliptic curves (re-exported from crypto/internal/nistec)

bsky-backup-template. Template repository for setting up a new ATProto repository backup using GitHub Actions.

csrf. Go

otherport. LD_PRELOAD hack to redirect connections to other ports

powersoftau. An independent implementation of the Powers of Tau MPC ceremony.

youtube-dl. Small command-line program to download videos from YouTube.com and other video sites

HNTitles. Tweet probabilistically generated HN post titles.

cpace. An EXPERIMENTAL Go implementation of the CPace PAKE, instantiated with the ristretto255 group.

keygen. Deterministic key generation for Go.

xaes256gcm. Package xaes256gcm implements the XAES-256-GCM extended-nonce AEAD.

alum. A forwarding mail server inspired by @alum.mit.edu

FiloSottile.

hpke. Go

rage. A simple, secure and modern encryption tool (and Rust library) with small explicit keys, no config options, and UNIX-style composability.

go. Go fork with personal experimental branches—probably nothing works. Not kidding.

Pendolo-OpenCV. C++

Griffith. Media collection manager [MIRROR]

age-plugin-tpm. :key: TPM 2.0 plugin for age

homebrew-lite. Modified homebrew-core formula with fewer dependencies.