FiloSottile

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.

yubikey-agent is a seamless ssh-agent for YubiKeys.

A ssh server that knows who you are. $ ssh whoami.filippo.io

A checker (site and tool) for CVE-2014-0160

A fork of password-store (https://www.passwordstore.org) that uses age (https://age-encryption.org) as backend.

gvt was a minimal go vendoring tool, based on gb-vendor. Today, you want to use modules instead.

Homebrew Formula for static-friendly musl-based GCC macOS-to-Linux cross-compilers

A collection of projects and resources in the age file encryption ecosystem.

A TypeScript implementation of the age file encryption format, available as an npm package or as a bundled .js file.

A dedicated Chrome instance to log into captive portals without messing with DNS settings.

A bag of various unrelated projects with varying levels of serviceability and destructiveness.

A Certificate Transparency log implementation and monitoring API designed for scalability, ease of operation, and reduced cost.

A Go implementation of the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber).

Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

filippo.io/edwards25519 — A safer, faster, and more powerful low-level edwards25519 Go implementation.

Check that all your Go dependencies are properly vendored

Wrapper for curve25519-dalek using rustgo, a technique to directly call Rust code from Go programs with near-zero overhead, meant to replace manually written assembly.

Tools to process Go trace logs into various profiles. Complement for "go tool trace".

A minimal portable Zcash z-address generator for offline / paper wallets

A Go implementation of the BERserk attack against Mozilla NSS ASN.1 parsing of PKCS#1 RSA signatures with e = 3. Complete of a certificate generation tool, works with CAs in the trust store.

Library and tools to interact with and analyze Tor HSDirs.

A long bet between Matthew Green and Filippo Valsorda on what will break first: ML-KEM-768 or X25519. You can join! Money goes to charity.

A brew command to cleanly install binaries from Go modules.

Exploiting ECDSA Failures in the Bitcoin Blockchain

Some code to bruteforce OpenBSD softraid encrypted drives - NOT A READY-TO-USE TOOL

Package filippo.io/intermediates embeds a bundle of known unexpired, unrevoked intermediate certificates chaining to roots in the Mozilla Root Program

This web app allows you to trigger Travis CI builds periodically

Extract the import path of Go binaries and rebuild them. No more stale GOROOT.

NIST P elliptic curves (re-exported from crypto/internal/nistec)