Opt-in Kestrel extension: a zero-knowledge encrypted gallery (images + folder names encrypted client-side with a password; the server only ever stores ciphertext).

Config-driven, plug-and-play OTA distributor for React Native (dash-ota). Mounts into Express/Connect via one middleware or runs standalone. Serves pre-signed manifests + ciphertext; never holds the signing key.

Low level bindings for libsodium

Core utilities for the Ciphertext Ecosystem.

On-host OpenClaw connector for Paxter Connect E2E. Runs as a service on the user's own machine and speaks the OpenClaw operator protocol over localhost, so the paxter-gateway becomes a blind relay that only ever sees ciphertext. Install with `npx @usepaxt

The ctxfile relay: an always-on MCP endpoint over an encrypted vault. Hosted it is Sync; self-hosted it is the Team/Enterprise hub. Stores ciphertext, serves the five ctxfile tools, issues grants, keeps an append-only audit log.

crypto; from kruptein to hide or conceal

Sovereign encrypted-brain crypto core for Nfinit Monkeys clans — client-held X25519 keys, AES-256-GCM envelope encryption, per-recipient DEK wrapping, human-escrow recovery. Node built-in 'crypto' only; zero third-party deps. The Jungle stores ciphertext

Zero-knowledge engine for p00f: client-side AES-GCM + HKDF crypto, Link build/parse, and a ciphertext-only protocol client. Web Crypto only, so it runs in browsers, Node 20+, and Cloudflare Workers (workerd).

An implementation of the Double Ratchet cryptographic ratchet

A node.js module that identifies cryptographic hash algorithms from ciphertext.

Create encrypted PrivateNote links from the terminal. Plaintext is encrypted locally; only ciphertext reaches the server.

Opt-in Kestrel extension: client proofing (Lightroom-style colour flags + comments) on top of kestrel-galleries-secure. Customer marks are encrypted client-side; a public back-channel stores only ciphertext. Requires a running server (not pure-static).

This is the library used in dokojs to decrypt the ciphertext(private input/outputs) in dokojs. <b>Initial Implementation Reference:</b> https://github.com/AleoHQ/snarkVM/blob/testnet3/console/program/src/request/sign.rs

Pure Javascript implementation of Blowfish block cipher.

Alphanumeric ciphertext via bit-rotation cipher

Drizzle ORM bytea column builders for @ctrlback/crypta: a raw bytea column and a sealedBytea column branded with the core Ciphertext type.

Card fields for a checkout you draw yourself: the buyer types into the vault's frame, you get ciphertext shaped for the tor.io API — no card number ever touches your page.

Share an HTML file privately from the command line. Encrypted with AES-256-GCM before upload — the server stores only ciphertext. No account.

UUAID Agent Memory Vault envelope — client-side encryption (AES-256-GCM) with hybrid post-quantum recipient mode (X25519 + ML-KEM-768). Ciphertext-only leaves the client.