Pointers to Cryptographic Software

This page contains a catalog of software packages related to cryptography.

• E-Mail Encryption
• Voice Encryption
• Secure Communications and Authentication
• File Encryption
• Disk or File System Ecryption
• Steganography
• Electronic Cash
• Cryptographic Libraries
• Support Libraries
• Cryptanalysis

E-Mail Encryption

• PGP (Pretty Good Privacy): E-mail and file encryption program.It also supports digital signatures. It is generally considered to be very secure (usesRSA and IDEA for encryption). It is available at least for Amiga, Atari, Mac, PC, Unix,and VMS. A goodselection of implementations for various platforms is in ftp.funet.fi:/pub/crypt/cryptography/pgp.

  PGP is supported in emacs, pine, and many other mailers. A whereto get document tells where to get it and contains a lot of other useful information.A good source is The International PGP home page.Other useful pointers about PGP:

  • PGP home page
  • PGP tutorial
  • PGP key servers
  • Instructions on using the key servers. There is also a WWW interface for the keyservers.
  • FTP site for PGP utilities
  • GNU Emacs utilities
  • Mailcrypt, a good Emacs interface to PGP.It is available in ftp.funet.fi:/pub/crypt/cryptography/pgp/utils/emacs.
  • Privtool, a PGP-aware graphicalmail tool for Unix (available in ftp.ox.ac.uk:/pub/crypto/pgp/utils).
  • Private Idaho, a PGP/anonymous remailerutility for Windows e-mail software. Available in ftp.ox.ac.uk:/pub/crypto/pgp/pc/windows3.
  • PGPTools is a set of functionswhich allows you to easily write PGP compatible encryption programs. It is available e.g.in ftp.funet.fi:/pub/crypt/cryptography/pgp/utils.
• PEM (Privacy Enhanced Mail) is another system for encrypting mail and makingdigital signatures. It has been made a standard, but not many people use it. PGP is muchmore widely used. There are several implementations of PEM available: see rpem and ripem. Another locationis ftp.funet.fi:/pub/crypt/cryptography/rpem.

Voice Encryption

• Speek Freely for Windows and Netfone itscounterpart for Unix (Sun, SGI). A public domain program that permits encryptedconversations over Internet or modem connections. See the releasenotes for more information. It is available from ftp.fourmilab.ch:/pub/kelvin/netfone.The software also has a WWW page.
• Nautilus: A voice encryption program. Its home page is athttp://www.lila.com/nautilus. Some versionsare available at ftp.funet.fi:/pub/crypt/utilities/phone.
• PGPFone (Pretty Good Privacy Phone): A software packagethat turns your desktop or notebook computer into a secure telephone. It uses speechcompression and strong cryptography protocols to give you the ability to have a real-timesecure telephone conversation.

  A beta test version is currently being distributed inthe US and Canada. The ftp address is net-dist.mit.edu:/pub/PGPfone.A WWW page is available at http://web.mit.edu/network/pgpfone.

  The beta version is freely available outside the United States in ftp.hacktic.nl:/pub/replay/pub/voice,ftp.ox.ac.uk:/pub/crypto/pgp/utils,and ftp.funet.fi:/pub/crypt/utilities/phone.

  A Windows95 version of PGPfone is available at ftp://ftp.ifi.uio.no/pub/pgp/pc/windows/pgpf*.zipand ftp://ftp.funet.fi/pub/crypt/utilities/phone/pgpf*.zip.

Secure Communications and Authentication

• SSH (Secure Shell) provides secure remote login and securefile transfer between machines on an untrusted network. X11 connections and arbitraryTCP/IP ports can also be forwarded over the secure channel. SSH is intended to replacerlogin, rsh, telnet, rcp, and rdist. It is being used by tens thousands of sites in atleast 55 countries. Its users include top universities, research institutes, and majorcorporations.

  SSH if freely available for UNIX; commercial versions exist for Windows(3.1, 95, NT) and Macintosh. The UNIX version can be obtained from ftp.cs.hut.fi:/pub/ssh or any of the other FTPsites in about 15 countries (see the SSH Home Page fora full list). Commercial versions are available from DataFellows.

  The distribution also contains RSA, IDEA, 3DES, DES, RC4, MD5, and a number of othercryptographic algorithms.

• Kerberos: Software for centrally managing access rights,encryption keys, and permissions. Used in many places in the United States; less outside.A copy is available in ftp.funet.fi:/pub/unix/security/login/kerberos/(including Kerberos5).
• S/Key allows login using one-time passwords. It works on mostunix systems. It is available in ftp.funet.fi:/pub/unix/security/login/skey.
• NRL OPIE is an newer one-time password software based onS/Key that works on most unix systems. Available in ftp.funet.fi:/pub/unix/security/login/nrl-opie.The official OPIE archive site is ftp://ftp.nrl.navy.mil/pub/security/opie.The contrib subdirectorycontains a number of S/Key, OTP, and OPIE compatible one-time password calculators forMac, PC, etc.
• SRA telnet is a version of telnet that supports SRAauthentication and DES encryption. Available in ftp.funet.fi:/pub/unix/security/login/telnet.
• STEL (Secure Telnet) is an encrypting telnet. Its home pageis at http://idea.sec.dsi.unimi.it/stel.html.
• SPX is an authentication service that enhances the security inopen networks by using public key technology. It also implements GSSAPI. It is available in ftp.funet.fi:/pub/unix/security/login/SPX/.
• Deslogin is an encrypting remote login program. Availablein ftp.hacktic.nl:/pub/replay/pub/crypto/CRYPTOappsand ftp.funet.fi:/pub/unix/security/login/deslogin.Note: A serious security problem was recently found in deslogin (it sent the key in cleartext). Be sure that you are not using a version with this bug.
• SSLtelnet Secure telnet based on the Secure Socket Layerprotocol. It is available in ftp.psy.uq.oz.au:/pub/Crypto/SSLapps.There is a mirror for SSL stuff in ftp.funet.fi:/pub/unix/security/login/SSL.
• SSL-MZtelnet is another SSL based secure telnet. Itis available in ftp.uni-mainz.de:/pub/internet/security/ssl/SSL-MZapps.
• SSLftp Secure ftp based on the Secure Socket Layerprotocol. It is available in ftp.psy.uq.oz.au:/pub/Crypto/SSLapps.
• Apache-SSL: A package for adapting the Apache WWW server tosupport SSL. SSLeay is also needed. Available at ftp.hacktic.nl:/pub/replay/pub/apache.
• ctcp is an encrypting tcp/ip package, available in ftp.hacktic.nl:/pub/replay/pub/crypto/CRYPTOapps/ctcp.0.9.tar.gzand ftp.funet.fi:/pub/unix/security/login/ctcp.
• For information about the IP Security protocols, see the protocolspage.

File Encryption

• PGP can be used as a good file encryption program. See above.
• des(1) is a standard unix tool which can be used to encryptfiles with DES. However, it is not present in many international Unix distributions. Freeimplementations can be found e.g. in the libdes and alodes libraries.
• If you only need to encrypt individual files and don't need the key management offeredby PGP and similar public key encryption software, you may try ATBASH and Diamond Lock by Michael Paul Johnsen. Diamond Lock is a Data LOCK programthat uses the Diamond2 Block Cipher. It also tests the correct implementation of theDiamond2 and Diamond2 Lite encryption algorithms:
  • Diamond Lockfor MS-DOS

  ATBASH2 is a simple, efficient file encryption program that can also be used to convertany binary file to a format that can be transmitted by Morse Code or other similartechniques.

  • ATBASH2 forMS-DOS
• Macintosh users may use CurveEncrypt Version 2.2.
• Warning: crypt(1) that is available on many Unix systemsshould not be used. The encryption used by it is very weak, and can be broken even byamateurs. A tool for this (Crypt Breaker's Workbench) is freelyavailable.

Disk or File System Encryption

• Secure Drive is an encrypting device driver for MSDOS,and is available in ftp://ftp.hacktic.nl/pub/replay/pub/disk/secdr14a.zipand ftp://ftp.ox.ac.uk/pub/crypto/misc/secdr14a.zip.
• SFS (Secure File System) is another disk encryption system forMSDOS. It is available in ftp://ftp.ox.ac.uk/pub/crypto/misc/sfs117.zip.
• CryptDisk is an encryption program for Macintosh. It isavailable e.g. in ftp://idea.sec.dsi.unimi.it/pub/crypt/code/CryptDisk121.sit.hqxand ftp://ftp.hacktic.nl/pub/replay/pub/disk/CryptDisk121.sit.hqx.
• CFS is an encrypted file system for Unix. It runs as auser-mode NFS server on the local machine, and passes any requests to the remote machineover an encrypted channel. It can be obtained from idea.sec.dsi.unimi.it:/pub/security/crypt/codeor ftp.ox.ac.uk/pub/crypto/misc .See also ftp.hacktic.nl:/pub/replay/pub/crypto/CRYPTOapps.

Steganography

• Stealth is a simple filter for PGP which strips of allidentifying header information to leave only the encrypted data in a format suitable forsteganographic use. It is available in http://dcs.ex.ac.uk/~aba/stealth/.
• Stego converts a binary file into nonsense text. http://www.fourmilab.ch/stego/.
• Stegodos is a set of DOS programs that encodes binaries into captured images. Itis available in ftp.funet.fi:/pub/crypt/steganography.
• MandelSteg and GIFExtract hide data in Mandelbrot GIFs. There is a home page, and it is available in idea.sec.dsi.unimi.it:/pub/security/crypt/code.
• Hide and Seek is a stego program for dos. It is available in ftp://ftp.funet.fi/pub/crypt/steganography/hdsk41.zip.
• jpeg-jsteg hides data inside a JPEG file. It is available in ftp.funet.fi:/pub/crypt/steganographyas a diff to the standard jpeg-v4 distribution.
• Steganography Tools 4 encrypts the data with IDEA, MPJ2 (up to 512bits key), DES,3DES and NSEA in CBC, ECB, CFB, OFB and PCBC modes and hides it inside graphics (BMPfiles), digital audio (WAV files) or unused sectors of HD floppies. ftp://idea.sec.dsi.unimi.it/pub/security/crypt/code/s-tools4.zip

Electronic Cash

• MagicMoney is an implementation of digital cash that uses PGP for the encryption.See http://www.c2.org/~mark/pgp/mm-readme.htmlfor more information. It is available at least in ftp.funet.fi:/pub/crypt/ecash.
• -lucre is a library for ecash. It is available in ftp://csclub.uwaterloo.ca/pub/-lucre.

Cryptographic Libraries

• libdes: Library containing very fast DES implementation.Written written in Australia by Eric Young. Freely available for any use (includingcommercial). The official distribution location is ftp.psy.uq.oz.au:/pub/Crypto/DES/libdes-x.xx.tar.gz.I am not sure if newer versions are released independently; the SSLeay library (see below)may contain newer versions of libdes along with other encryption algorithms.
• alodes: Library containing a fast DES implementation. Italso contains a multiple precision integer arithmetic library. Written in Finland by AnttiLouko. Freely available for non-commercial use. Official distribution is in kampi.hut.fi:/alo/des-dist.tar.Z.
• SSLeay: Library implementing the SSL (Secure Socket Layer)protocol. Also includes a very fast DES implementation and implementations of many otheralgorithms such as DES, IDEA, RC4, RSA, and MD5. The official distribution location is ftp.psy.uq.oz.au:/pub/Crypto/SSL. Itworks under Unix, and is also available as a Windows DLL. There is a mirror for SSL stuffin ftp.funet.fi:/pub/unix/security/login/SSL.
• Crypto++ is a cryptographic C++ library for MSDOS,Windows NT, and Unix. It supports MD5, SHS, DES, IDEA, WAKE, RC4, RC5, Blowfish, Diamond,Diamond Lite, Sapphire, Luby-Rackoff, MDC, various modes, Diffie-Hellman, RSA, DSA,ElGamal, BBS, gzip compression, Shamir's secret sharing scheme, Rabin's informationdispersal scheme, and zero-knowledge prover and verifier for graph isomorphism. There arealso various miscellaneous modules such as base 64 coding and 32-bit CRC. Several peoplehave been talking favorably about its design.

  The home page for Crypto++ is http://www.eskimo.com/~weidai/cryptlib.html.It is also available in ftp.funet.fi:/pub/crypt/cryptography/libs/crypto11.zipand ftp.hacktic.nl:/pub/replay/pub/crypto/LIBS/cryptolib/crypto11.zip.

• CryptoLib is a cryptographic library developed atAT&T. It runs under Unix, Windows, Windows NT, Windows-95. It is available in idea.sec.dsi.unimi.it:/pub/security/crypt/math.
• Cryptix for Java - A cryptographic library for Java, partly implemented as nativecode for performance, including BigInteger, MD5, SHA, DES, IDEA, Blowfish, RSA (includingkey generation), CSPRSG and CFB algorithms. It is available at http://www.systemics.com/software/
• Cryptix for Perl - A cryptographic library for Perl, including BigInteger, MD5,SHA, DES, IDEA, Blowfish, RSA (including key generation), CSPRSG, CFB and CBC algorithms,along with some PGP compatible routines. It is available at http://www.systemics.com/software/
• Wincrdll is a collection of Windows DLL libraries, withsource dode, that implements popular strong cryptographic algorithms. It is available in ftp.ox.ac.uk:/pub/crypto/misc/wincrdll.zip.A readme file are also available.
• Cryptlib is a Windows DLL that supports DES, 3DES, IDEA,RC4, and MDC/SHS in several modes. It is freely available for any use, and comes withsource code. It can be obtained from ftp.ox.ac.uk:/pub/crypto/misc,and we have a local copy.
• RSAREF: The reference implementation of RSA and DES for usein PEM (Privacy Enhanced Mail) from RSA Data Security, Inc. Can be freely used fornon-commercial use, at least in the United States. This is the only legal way to use RSAin the United States without a license. In other countries it is not necessary to resortto such madness. Other implementations of RSA and DES are available that are faster, moreportable, and more flexible.

  There are two versions of RSAREF, called RSAREF andRSAREF2. They have minor differences and slightly different licensing conditions. Both areavailable e.g. from ftp.funet.fi:/pub/crypt/cryptography/asymmetric/rsa.

• RSAEURO: An European implementation of RSAREF. Its homepage is at http://www.sourcery.demon.co.uk/rsaann.html.Available e.g. from idea.sec.dsi.unimi.it:/pub/security/crypt/code/rsaeuro-*.tar.gzand ftp.funet.fi:/pub/crypt/cryptography/asymmetric/rsa.
• Elliptic is a public domain implementation of ellipticcurves public key cryptography. It is not known to be patented (except for the claimeduniversal public key cryptography patent which will expire in an year or two anyway). Itis available in idea.sec.dsi.unimi.it:/pub/security/crypt/cypherpunks/ciphersand ftp.funet.fi:/pub/crypt/cryptography/asymmetric/elliptic.
• desCore is a plain DES implementation. It is available in ftp.ox.ac.uk:/pub/crypto/DES.
• Chalmers DES library contains a plain DESimplementation. It is available in ftp.funet.fi:/pub/crypt/cryptography/symmetric/des.
• Destoo is yet another plain DES implementation. It isavailable in ftp.funet.fi:/pub/crypt/cryptography/symmetric/des.The same directory contains a zillion other DES implementations and various variants for anumber of platforms.
• idea86 is a 80x86 assembler implementation of IDEA. It isavailable in ftp.ox.ac.uk:/pub/crypto/miscand ftp.funet.fi:/pub/crypt/cryptography/symmetric/idea.
• Safer is an implementation of the safer cipher. It is available in ftp.funet.fi:/pub/crypt/cryptography/symmetric/safer.
• Python Cryptographic Toolkit. A cryptographic toolkit for the Python programming language. Includes hash functions(Haval, MD2, MD4, MD5, SHA), private-key encryption (Blowfish, DES, DES3, Diamond, IDEA,RC4, 32-bit RC5, Redoc III), public-key encryption (DSS, ElGamal, RSA). It is available atftp.cwi.nl:/pub/pct/pycrypt100.tgz. It is mostly inthe public domain (some parts under GPL).
• Wei Dai's cryptolib version 2.1 is available at ftp.funet.fi:/pub/crypt/cryptography/libs/crypto21.zip.
• cryptlib 2.00, a portable encryption library (copyrighted by Peter Gutmann, EricYoung, and Colin Plumb) is available at ftp://ftp.funet.fi/pub/crypt/cryptography/libs/.
• Phil Karn's DES386 is available at ftp://idea.sec.dsi.unimi.it/pub/security/crypt/code/des386.zip.
• A lot of assorted cryptographic algorithms, programs, and information can be found in ftp.ox.ac.uk:/pub/crypto/misc, idea.sec.dsi.unimi.it:/pub/crypt/applied-crypto,ftp.hacktic.nl:/pub/replay/pub/crypto,and ftp.funet.fi:/pub/crypt.

Support Libraries

• GNU Multiple Precision Library (library to perform arbitraryprecision integer arithmetic). This is not cryptographic software, but can be very usefulfor implementing RSA and other public key methods. It is fast and quite portable. Itshould be available from any ftp site carrying GNU software (e.g., ftp.funet.fi:/pub/gnu/prep). A local copy ofgmp-1.3.2.tar.gz is here.
• Freelip is the multiple precision integer library that wasused in breaking RSA-129. It is freely available for non-commercial use. A local copy isin freelip_1.0.tar.gz.
• Noiz - a simple package for accumulating and dispensingcryptographically strong noise, using MD5 as a stirring function. In ftp.funet.fi:/pub/crypt/random.
• Socks is a generic socket library designed to work well in afirewalled environment. It is available in ftp.funet.fi:/pub/unix/security/firewalls/socks.

Cryptanalysis

• Crypt Breaker's Workbench. A tool to break Unix crypt(1)encryption (i.e., the German Enigma cipher). Available e.g. in ftp.funet.fi:/pub/crypt/analysis.
• PKZip Cracker. Cracks the key of encrypted PKZip files. Available e.g. in ftp.funet.fi:/pub/crypt/analysis.For an analysis on the PKZIP encryption algorithm, see the paper by Eli Biham and Paul Kocher.
• Zip Crack. Cracks encrypted ZIP files. ftp.funet.fi:/pub/crypt/analysis/zipcrk20.zipe.For an analysis on the PKZIP encryption algorithm, see the paper by Eli Biham and Paul Kocher.
• Solve-Vigenere. Solves the historical Vigenerecipher. ftp.funet.fi:/pub/crypt/analysis/solve-vigenere.tar.gz
• Wincrack. Decrypts files encrypted with the WINCRYPT utility. ftp.funet.fi:/pub/crypt/analysis/wincrack.zip
• Word Cracker. Cracks files encrypted by Word. ftp.funet.fi:/pub/crypt/analysis/wordunp.zip
• WordPerfect Cracker. Cracks files encrypted with WordPerfect (wpcrack_a and wpcrack_b in ftp.funet.fi:/pub/crypt/analysis.
• Unix password cracking programs are available in ftp.funet.fi:/pub/networking/security/CERT/tools.
• Other programs and information is available in ftp.funet.fi:/pub/crypt/analysis and ftp.ox.ac.uk:/pub/crypto/cryptanalysis.
• There are many joint efforts by interested people to break various ciphers, such as RC4 (see DamienDoligez's SSL cracking page or PieteBrooks's brute forcing page), RSA (see how RSA-129 was broken), and DES.

Disclaimer: All information here is provided as is, and there is no warranty of anykind, including but not limited to the accuracy of the information or the legality of thereferenced software in any particular country. All evaluations are subjective. The authorof this page has not tested most of the packages.