A simple, fast, and efficient Go implementation of NanoID, a tiny, secure, URL-friendly, unique string ID generator.

Tool for analysis of security certificates and their security targets (Common Criteria, NIST FIPS140-2...).

Multi-algorithm password hashing for Rust — typed Policy, PHC/MCF storage, auto-rehash on drift across Argon2id/bcrypt/scrypt/PBKDF2, KMS-backed pepper with key versioning, FIPS 140-3 fail-closed contract, hsh CLI, hsh-digest companion (SHA-2/SHA-3/BLAKE3). #![forbid(unsafe_code)] workspace.

DIY PKI server: RK3328 ARM64 (Linux) + STM32 hardware TRNG via USB HID. CA ceremony, X.509 certs, FIPS 140-2 KAT, SDD contracts, REST API. Deployed on real hardware. Educational

A Deterministic Random Bit Generator based on AES in Counter mode (AES-CTR-DRBG) as specified in NIST SP 800-90A written in Go.

Implementation of core cryptographic primitives and protocols: BigInt arithmetic, SHA-1, FIPS 140 testing, ECC (secp256k1), ECDSA, and ElGamal cryptosystem. Developed in C# (.NET 8/10) and Python.

Application-level field encryption for PostgreSQL. AES-256-GCM, searchable encryption, blind indexes, key rotation, cloud KMS, FIPS-140, crypto-shredding, SQL firewall. Written in Rust.

Browser-based NIST SP 800-90A demo — HMAC_DRBG, CTR_DRBG, and Hash_DRBG with state visualizers, seeding, reseeding, and live NIST SP 800-22 statistical tests. The correct-case companion to Corrupted Oracle.

Encrypt PostgreSQL fields at the application layer in Rust to protect data from DB access, leaked creds, and exposed backups