High performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.

Proof of Concept Chrome extension for RSA signing using an OpenPGP-compatible smart card

Fill in login forms using an OpenPGP-enabled smart card

Smart Card Connector App for Chrome OS

Coverage-guided, in-process fuzzing for the JVM

Edit Notes like in Notion.so. Full-Stack App using React/Express.

Decrypt Signal encrypted backups outside the app

A Common Criteria (CC) and FIDO certified FIDO U2F javacard applet.

Reproducer for Autofill issues in Chrome on Android 10+

The DREAM decompiler

Use your Wear OS watch as a FIDO2 security key via Bluetooth and NFC.

BigBlueButton versions lower than 2.2.4 have a LFI vulnerability allowing access to sensitive files. 🚨

Open source Java Card applet that allows you to unlock, start, or lock a Tesla Model 3 just like the official key card

SmartCard U2F Adapter for macOS

OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards.

Source code for experiments and evaluation of five zero-interaction security schemes, for our Ubicomp 2019 paper "Perils of Zero-Interaction Security in the Internet of Things"

Yubico Mobile Android SDK - YubiKit

A gradle plugin that merge dependencies into the final aar file works with AGP 3.+

Tools for using PIV tokens (like Yubikeys) as an SSH agent, for encrypting data at rest, and more

Rust library to interact with Security Keys, used by Firefox

Python based U2F Validation Server

Extract PGP secret keys from Gnuk / Nitrokey Start firmwares

Gradle plugin to help embed dependencies in generated AAR artifact

Open-source FIDO server, featuring the FIDO2 standard.

PIV applet for JavaCard 2.2.2 and 3.0.4+ with full ECDSA/ECDH support

WebAuthn (U2F) helper for CLI operations (e.g. SSH Log in)

A portable Java library for WebAuthn(Passkeys) server side verification

Creating AARs with private dependencies