Safe secrets exchange

Backend for Zap password manager.

🛡️🧩🏷️ Nominal (branded) TypeScript types & helpers for opaque types.

Light LDAP implementation

Zero-knowledge authentication using the OPAQUE protocol

Go implementation of OPAQUE (RFC 9807), the asymmetric password-authenticated key exchange protocol.

A TypeScript library for OPAQUE Asymmetric Password-Authenticated Key Exchange Protocol

A comprehensive Go package for creating and validating both JWT and opaque tokens with support for multiple signing algorithms, automatic key rotation, and enterprise-grade security features.

A zero-knowledge authentication system with OIDC compatibility

Minimal, production-ready authentication starter using Next.js, MongoDB, and opaque (phantom) tokens in secure httpOnly cookies. No PII in tokens — only hashed storage with real-time introspection for safe, revocable sessions.

A decentralized E2EE key recovery protocol.

c implementation of the OPAQUE protocol with bindings for python, php, ruby, lua, zig, java, erlang, golang, js and SASL. also supports a threshold variants based on 2hashdh and 3hashtdh

Privacy-first Authorization Framework

Opinionated bindings for opaque-ke

Secure password based client-server authentication without the server ever obtaining knowledge of the password. Implementation of the OPAQUE protocol.

Easy-to-use library that implements opaque types in TypeScript!

elliptic-curve cryptography

implementation of SPHINX, the password Store which Perfectly Hides from Itself No eXaggeration~

🍷 Nominal typing for TypeScript

DON'T STORE PASSWORDS! This is a .NET 5 / Core implementation of the OPAQUE protocol - a 2021 successor to the Secure Remote Password (SRP) protocol. OPAQUE is an Asymmetric Password Authenticated Key Exchange (aPAKE) protocol that provides password authentication and mutually authenticated key exchange in a client-server setting without relying…