John the Ripper is a fast password cracker, currently available for many
flavors of Unix (eleven are officially supported, not counting different
architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to
detect weak Unix passwords. Besides several crypt(3) password hash types
most commonly found on various Unix flavors, supported out of the box are
Kerberos AFS and Windows NT/2000/XP/2003 LM hashes, plus several more with
contributed patches (over 40 of additional hash and cipher types).
BSDsfv is a flexible and highly compatible SFV checksum utility.
Features:
- create SFV files, verify downloaded single files or whole releases
- add banners to your SFV files
- very flexible and compatible with all other SFV tools currently known,
including SFVNIX compatibility mode concerning SFV files created
- easy to console application
- plug & play support for glFTPd and other demons including
count-missing-files feature for race scripts
The SHA module allows you to use the NIST SHA message digest algorithm
from within Perl programs.
The final message digest value is returned by the digest operation as
a 20-byte binary string. This operation delivers the result of
operations since the last new or reset operation. Once the operation
has been performed, the context must be reset before being used to
calculate another digest value.
M2Crypto is the most complete Python wrapper for OpenSSL featuring RSA, DSA, DH,
HMACs, message digests, symmetric ciphers (including AES); SSL functionality to
implement clients and servers; HTTPS extensions to Python's httplib, urllib, and
xmlrpclib; unforgeable HMAC'ing AuthCookies for web session management; FTP/TLS
client and server; S/MIME; ZServerSSL: A HTTPS server for Zope and ZSmime: An
S/MIME messenger for Zope.
Duo provides simple two-factor authentication as a service via:
1. Phone callback
2. SMS-delivered one-time passcodes
3. Duo mobile app to generate one-time passcodes
4. Duo mobile app for smartphone push authentication
5. Duo hardware token to generate one-time passcodes
This package allows an admin (or ordinary user) to quickly add Duo
authentication to any Unix login without setting up secondary user
accounts, directory synchronization, servers, or hardware.
This is a small command-line utility for encryption and decryption
using the principle of one-time pads (OTPs). One or more data files
given to pad are XORd with each other and with RNG output, resulting
in two or more output files. The output files are indistinguishable
from random noise, except that when the pad utility is used to XOR
them together again, the original data files may be recovered.
Jason Harris <jharris@widomaker.com>
Not all web applications are built in the same ways, and hence, many
must be analyzed individually. SPIKE Proxy is a professional-grade
tool for looking for application-level vulnerabilities in web
applications. SPIKE Proxy covers the basics, such as SQL Injection and
cross-site-scripting, but it's completely open Python infrastructure
allows advanced users to customize it for web applications that other
tools fall apart on.
This library is used to gain direct access to the functions exposed by Daniel
J. Bernstein's nacl library via libsodium or tweetnacl. It has been constructed
to maintain extensive documentation on how to use nacl as well as being
completely portable. The file in libnacl/__init__.py can be pulled out and
placed directly in any project to give a single file binding to all of nacl.
"... sslwrap is a simple Unix service that sits over any simple TCP service
such as POP3, IMAP, SMTP, and encrypts all of the data on the
connection using TLS/SSL. It uses ssleay to support SSL version 2 and
3. It can run out of inetd. It can also encrypt data for services
located on another computer.
It works with the servers you already have, and does not require any
modifications to your existing servers. ..."
Of course, it works with OpenSSL, too.
The Apache-XML-Security-J supports XML-Signature Syntax and Processing,
W3C Recommendation 12 February 2002 and XML Encryption Syntax and
Processing, W3C Recommendation 10 December 2002.
The Java library supports the standard Java API JSR-105: XML Digital
Signature APIs for creating and validating XML Signatures. A standard
Java API for XML Encryption JSR-106: XML Digital Encryption APIs is
in progress and is not final, so this API is not yet supported.