Security

KeePass .kdbx database file parser

Data types and parsers for MalwareDB.

Server data storage logic for MalwareDB.

Rust bindings for GrapheneOS allocator

Client application and library for connecting to MalwareDB.

rock-solid application kernel

A Rust library for representing and deserializing CVSS (Common Vulnerability Scoring System) data.

Global allocator using GrapheneOS allocator

Client library for Hakanai, a secure secret sharing service.

Proteccio HSM PKCS#11 loader

Utimaco HSM PKCS#11 loader

Cosmian KMS Access - handling users permissions

Smart card HSM PKCS#11 loader

Crypt2Pay HSM PKCS#11 loader

Utimaco HSM PKCS#11 loader

Cosmian KMIP Derive Macros

Base PKCS#11 HSM integration implementation

Crate exposing APIs for plugins to the Cosmian KMS

Idiomatic bindings to IDA SDK

Vulnerability research assistant that extracts pseudocode from IDA Hex-Rays decompiler.

DTLS 1.2/1.3 implementation (Sans‑IO, Sync)

A secure filesystem sandbox. Restricts paths to a root directory, preventing traversal attacks.

Cosmian KMS Client Utilities - used in WASM and KMS Client

Static analysis for GitHub Actions

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.

Service for storing malicious, benign, or unknown files and related metadata and relationships.

Rust wrapper for wolfssl C library cryptographic functionality

Cross-platform PKCS#11 module written in rust, originally forked from Google/native_pkcs11

Run a test KMS server for testing purposes

Cosmian KMIP library

Crate containing the database for the Cosmian KMS server and the supported stores

Cosmian KMS REST Client

A sponge-based secure hash function that uses AES-256 as its internal PRF

Rust-based C library for syd interaction via /dev/syd

Simplified PAM module creation in Rust

Idiomatic bindings to IDA SDK

Offline PackageURL validator using a prebuilt FST of known packages.

Detects ambient OIDC credentials in a variety of environments

Cosmian KMS Crypto - cryptographic operations and algorithms

Python client for MalwareDB.

Authzed/SpiceDB gRPC API generated from buf.build/authzed/api via tonic

CVSS v2, v3, and v4 vector string parser and score calculator.

Property-based testing with `derive` macros, aware of mutual induction & instantiability.

Cosmian Key Management Service - A high-performance, FIPS 140-3 compliant Key Management System

Macros for jwtiny

Binary HTTP messages (RFC 9292)

Reverse engineering assistant that extracts strings and related pseudocode from a binary file.

Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.

Tools for CVE managing, exploring and collect some data about their weaknesses and classifications

A cryptographic library that includes big number arithmetic operations, hash algorithms, symmetric-key encryption/decryption algorithms, asymmetric-key (public-key) encryption/decryption algorithms, pseudo random number generators, etc. Hash algorithms includes MD4, MD5, SHA224, SHA256, SHA384, SHA512, SHA3, etc. Symmetric key encryption algorithms include DES, AES, etc. Public key encryption algorithms include RSA, ECC, etc.