Encryption (17)

• Stratis Storage (stratis-storage.github.io) tool
  local storage pool manager layered on device-mapper, XFS, LUKS and Clevis; online re-encryption
  Block Storage Filesystem #
• cryptsetup / LUKS (GitLab) repo
  Linux disk encryption tooling and the LUKS on-disk format
  Filesystem #
• Restic Documentation — restic 0.19.1 documentation (restic.readthedocs.io) reference
  restic manual: repositories on SFTP, S3, B2, Azure, rclone; snapshots, encryption, pruning, scripted backups
  Backup Object Storage #
• What is Kopia? (kopia.io) reference
  Encrypted, deduplicated, compressed snapshots to cloud, NAS or local repos; CLI and GUI, open source
  Backup Command Line #
• OpenSSL Documentation (docs.openssl.org) reference
  openssl command line, libssl/libcrypto functions, TLS and QUIC client/server guides, FIPS notes
  PKI TLS #
• Kerberos: The Network Authentication Protocol (web.mit.edu) tool
  MIT's free implementation of Kerberos 5 secret-key network authentication, with krb5 source releases
  Authentication Kerberos #
• EJBCA - The Open-Source Certificate Authority (CA) (EJBCA) tool
  open-source certificate authority for internal PKI, IoT and eIDs, with SignServer signing engine
  PKI TLS #
• strongSwan - IPsec VPN for Linux, Android, FreeBSD, macOS, Windows (strongswan.org) tool
  IPsec IKEv2 daemon with MOBIKE, NAT traversal and a plugin system; GPL, Linux through Windows
  Network Routing VPN #
• OpenSSH (openssh.org) tool
  BSD-licensed suite from the OpenBSD project: sshd, scp, sftp, agent, key tools and tunnelling
  Authentication SSH #
• restic · Backups done right! (restic.net) tool
  Single-binary deduplicating backup to local, SFTP or cloud storage, encrypted and restore-verifiable
  Backup Command Line #
• BorgBackup – Deduplicating archiver with compression and authenticated encryption (borgbackup.org) tool
  Content-defined chunking, FUSE-mountable archives, untrusted remote repos; BSD-licensed, Linux/macOS/BSD
  Backup Command Line #
• Syncthing (syncthing.net) tool
  Peer-to-peer continuous sync with no central server; TLS-secured, devices authorised by certificate
  File Synchronization Privacy #
• WireGuard: fast, modern, secure VPN tunnel (wireguard.com) tool
  In-kernel tunnel with modern crypto, leaner than IPsec and OpenVPN; also on Windows, macOS, BSD, mobile
  Network Routing VPN #
• KeePassXC Password Manager (keepassxc.org) tool
  Offline encrypted KDBX vault for Windows, macOS and Linux; no cloud or subscription, ANSSI-certified
  Password Manager Privacy #
• VeraCrypt - Free Open source disk encryption with strong security for the Paranoid (veracrypt.io) tool
  TrueCrypt 7.1a successor with 200k-iteration KDF, hidden volumes and full system-partition setup
  Filesystem Security Hardening #
• The GNU Privacy Guard (gnupg.org) tool
  command-line OpenPGP implementation with key management, S/MIME and ssh support; Gpg4win for Windows
  Command Line Email #
• Signal Messenger: Speak Freely (Signal Messenger) tool
  Encrypted chat, voice and video over mobile data using the Signal Protocol; no ads or tracking
  Privacy #