zeroize

Secure memory handling primitives for Rust — zeroization on drop, mlock-protected regions, constant-time comparison, and compile-time enforced memory safety boundaries

Run sensitive operations without leaving secrets around.

Marrow is an experimental, zero-trust desktop messenger designed for high-performance and future-proof privacy. Powered by Rust, Tauri v2, and Preact, it combines hybrid post-quantum cryptography (ML-KEM-768 + X25519) with Double Ratchet E2EE and libp2p networking.

Secure types for handling sensitive data in Rust

A portable, cross-platform encrypted container. Secure workspace with zero-trace memory management.

Secrets that live only as long as you do — a session-bound, memory-zeroizing dead-man's-switch. Locks secrets in non-swappable RAM and wipes + SIGKILLs the instant your session dies. Hardened Rust, seccomp-confined, with an MCP adapter for agents.

Secure, pooled buffers with aggressive memory management

Encrypted Vault for your needs, information, personality, work etc.

LAN security with physical QR verification + cryptographic defense-in-depth. Rust implementation of 7-layer defense architecture. 局域网安全方案：物理二维码验证 + 密码学纵深防御，Rust七层防御架构实现。

secure, offline-first hd wallet generator for solana and ethereum. built in rust with strict memory zeroization and owner-only file permissions

Cross-platform encrypted & compressed USB Virtual Filesystem in Go & Rust (XChaCha20-Poly1305, Argon2id, Zstd). Features Plausible Deniability (Shadow Vault), BLAKE3 deduplication, Reed-Solomon ECC bit-rot healing, O(1) video streaming & FUSE/WinFsp mount.

Best-effort secret memory zeroing, constant-time operations, and secure containers for pure Dart.

A dependency-free, no_std Rust crate for secure in-memory secret handling, constant-time checks, and automated clear-on-drop zeroization.

Post-quantum-oriented file encryption CLI in pure Rust — AES-256-GCM + HKDF-SHA256, Argon2id passphrases, symmetric-only by design 🔒

The small, network-free Rust crate that implements the cryptographic operations used by Buddy Password Manager vaults.

W3C WebAuthn PRF 및 Windows Hello TPM 2.0 하이브리드 파이프라인 기반 클라이언트 완결형 볼트 (Rust Wasm)

Systems-hardened BLAKE3 fork with C11 pthread worker pool, cgroup CPU quota awareness, and automatic key zeroization

Local security primitives providing page-locked memory, anti-dump guarantees, envelope vault encryption and replay-resistant TOTP.

Run a command with secrets fetched just-in-time, injected leak-tight, and gone on exit — plus a safe, scoped direnv. Rust.

Userspace WireGuard® Implementation in Rust