pkcs
Cr!ptAES 1.2
Cr!ptAES is an AES encryption tool for Window with a easy to use interface more>>
All AES key sizes 128, 192, and 256 bits are supported. Cr!ptAES can encrypt, decrypt, finger print, compare, and safely wipe files.
The complete source code of all deployed encryption algorithms is provided. Absolutely free.
System requirements:
- .NET Framework
PKIBlackbox (VCL) 3.3
PKIBlackbox is a comprehensive component collection that adds Public Key Infrastructure (PKI) support to your Delphi, C++Builder or Kylix application. PKI includes X.509 certificates, certificate requ more>>
Main PKIBlackbox functions are:
* generate and validate certificates
* create and process certificate requests
* manage Certificate Revokation Lists
* import and export certificates in DER, PFX and PEM formats
* encrypt/sign and decrypt/verify files in PKCS#7 format
PKIBlackbox supports Windows Certificates and Windows Certificate Storages. PKIBlackbox lets you manage certificates, stored on CryptoCards and USB CryptoTokens.
This is VCL edition, which can be used with Delphi 4-7 and 2005/Win32, C++Builder 4-6 and Kylix 2-3.
License:Freeware
License:Freeware
MyPassMan 0.5.1
MyPassMan is a password management program that securely encrypts all your passwords using a master pass phrase more>>
MyPassMan takes advantage of capabilities introduced in Java 6 such as web browser launching and the ability to minimize to the System Tray.
MyPassMan uses the powerful out-of-the-box encryption capabilities offered by the Java Runtime Environment.
MyPassManuses a minimum of 128 bit encryption and can utilize stronger encryption if the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files from Sun Microsystems are installed.
MyPassMans pass phrase is used to encrypt a different random key every time the password file is saved using the PBKDF2 algorithm specified in RSA labs PKCS #5: Password-Based Cryptography Standard.
System requirements:
- Java Runtime Environment
Cert Viewer Plus 1.2
ACert Viewer Plus is a free Firefox extension that adds two options to the certificate viewer in Firefox or Thunderbird more>>
Additionally, the Tools menu is extended by an entry for direct access to the certificate manager (including a keyboard shortcut).
As of release 1.0 , the XPI file of this extension is signed. Its signature will successfully verify under Firefox or Thunderbird if the "Builtin Roots Module" is available in its standard configuration. If you get an error like "could not install the file ... because: Signing could not be verified", its either due to the fact that somebody tampered with the file (let me know where exactly you got it from, in this case) - or that you tweaked the trust settings of the built-in certification authorities.
In the latter case, I assume that youre also savvy enough to figure out what trust anchor needs to be re-enabled in order to make the verification succeed again... (or how to rip the signature out of the file, otherwise) ;-)
System requirements:
- Firefox: 1.5.0.4 ? 3.0.0.*

Aloaha PDF Crypter 2.1
Aloaha PDF Crypter seals your PDF with the public key of the recipient. Non PDF files are beeing compressed and PKCS#7 enveloped. No special decryption client needed. Adobe Reader 6 or 7 is enough. Se more>>
No special decryption client needed. Adobe Reader 6 or 7 is enough.
Seal PDF Documents secure that they can only be displayed with the right private key.
Ideal solution to sell documents/ebooks online or prohibit re-distribution of confidential documents!
Encryption of non PDF files is FREEWARE
XCA 0.6.4
XCA will allow you to create and manage X.509 certificates, certificate requests, RSA and DSA private keys and CRLs more>>
Everything that is needed for a CA is implemented. All CAs can sign sub-CAs recursively. These certificate chains are shown clearly.
For an easy company-wide use there are customiseable templates that can be used for certificate or request generation. All crypto data is stored in a local and portable file format.
Xca supports next to the usual PEM and DER format of certificates the import and export of PKCS#12 (aka *.pfx) files and the Certificate import from PKCS#7 files.
Certificates can be created by self signing it, by signing it by an other (usually CA) certificate or by signing a PKCS#10 request. Netscape SPKAC is supported since version 0.4.6.
The validity dates and x509.v3 extensions can be adjusted to fit ones needs. The use of multiple certificates in CA chains is supported and a tree view of the certificates reflects the dependencies.
The application takes care to not create duplicate certificates by checking the serial number(s) on import and creation of certificates.
Certificate Templates can be used to preset the input dialog with reasonable values and to simplify the process of creating certificates and requests.
Issued certificates can be revoked and the revokation list can be created and exported. External revokation lists can be imported and examined.
yaSSL 1.9.6
yaSSL is an SSL/TLS Library for programmers building embedded security functionality into their applications and devices. yaSSL employs the dual licensing model, like MySQL, so it is available under GPL and commercial licenses. more>>
yaSSL 1.9.6 offers you an ideal SSL/TLS Library for programmers building embedded security functionality into their applications and devices. yaSSL employs the dual licensing model, like MySQL, so it is available under GPL and commercial licenses. yaSSL also includes an OpenSSL compatibility interface. There is also an extremely small and fast implementation of yaSSL known as CyaSSL.
Major Features:
- SSL version 3 and TLS versions 1 and 1.1 (client and server)
- OpenSSL compatibility layer
- MySQL integration
- libcurl support
- zlib compression support
- embedded support with CyaSSL
- Initial stunnel integration
- MD2, MD4, MD5, SHA-1, RIPEMD, HMAC, DES, 3DES, AES, ARC4, TWOFISH, BLOWFISH, RSA, DSS, DH, and PKCS#5 PBKDF2
- ia32 assembly for AES, 3DES, BLOWFISH, TWOFISH, ARC4, MD5, SHA, and RIPEMD
- SSE2 instructions for Large Integers
- Simple API
- Interchangeable crypto and certificate libraries
- PEM and DER certificate support
- Very fast
- Multiple OS support: Win32/64, Linux, Solaris, FreeBSD, NetBSD, OpenBSD, Mac OS X, and contact us for help with embedded systems like QNX, VxWorks, and MontaVista
Javasign 1.2
Javasign is a software written in java able to produce a digital signature and a timestamp on a document, using a smart card more>>
Javasign works with ISO 7816-4 compliant smart cards. It uses encryption and decryption functions based on PKCS #15 compliant cards.
Javasign has two modes of operation:
1) smart card: performs digital signature/verification operations using the functions on the card.
It can be configured to use the cryptoki library given by the card vendor, or an internal java driver that performs low level apdu commands.
2) p12 file: uses an external file in standard p12 format to keep private keys and certificates
Javasign can verify the associated certificate and check if its been released by a trusted CA.
Moreover the certificate is checked against the CRL, by downloading it from the CA site, using http protocol or ldap protocol.
Javasign is based on Italian CNS specification for identity card (Carta Nazionale dei Servizi).
cryptlib 3.1
A security toolkit providing strong encryption and authentication for apps more>>
The library attempts to hide the low-level details of encryption/decryption and authentication from programmers, allowing them to quickly make their projects more secure.
Some of the symmetric encryption (private key) and authentication algorithms that cryptlib supports include the following:
- AES (Rijndael)
- Blowfish
- DES, 3DES
- RC2, RC4, RC5
The following hash algorithms are available in the library:
- MD2, MD4, MD5
- RIPEMD-160
- SHA
It offers services such as:
- S/MIME
- SSL/TLS
- ssh
It features various hashed message authentication code algorithms:
- HMAC-MD5, HMAC-SHA, HMAC-RIPEMD-160
Finally, asymmetric (public/private key) encryption algorithms such as the following are available:
- Diffie-Hellman, DSA, RSA
cryptlib can also be used with a variety of crypto devices (for example, Fortezza cards and Smart cards).
cryptlib contains as core components implementations of the most popular encryption and authentication algorithms, AES, Blowfish, CAST, DES, triple DES, IDEA, RC2, RC4, RC5, and Skipjack conventional encryption, MD2, MD4, MD5, RIPEMD-160 and SHA hash algorithms, HMAC-MD5, HMAC-SHA, and HMAC-RIPEMD-160 MAC algorithms, and Diffie-Hellman, DSA, Elgamal, and RSA public-key encryption.
In addition to these built-in capabilities, cryptlib can make use of the crypto capabilities of a variety of external crypto devices such as hardware security modules (HSMs), Fortezza cards, PKCS #11 devices, and crypto smart cards. The crypto device interface also provides a convenient general-purpose plug-in capability for adding new functionality which will be automatically used by cryptlib.
The library is free if used in personal, freeware, or shareware projects. The library is written in C. ActiveX and C++ wrappers are provided. The project is OSI Certified Open Source Software.
Enhancements:
- The final release contains mostly minor tweaks based on user feedback from the 3.1 final betas, with no noticeable external changes. Internally, the HTTP engine has been significantly improved, TLS 1.1 is now supported (although at release time there were no other known implementations of this to test against), the BeOS port has been re-done to handle the current state of the OS
using GNU development tools instead of the original Be ones (thanks to Simon Taylor for providing access to his system to do the work on), and the perpetual tweaking of the networking subsystem to handle OS-specific quirks has continued.

CryptoTerm 1.11
CryptoTerm is an innovative and versatile package consisting of following programs: Terminal Emulator, FTP (SFTP) Client and Batch FTP (SFTP) Client. more>>
CryptoTerm 1.11 is an innovative and versatile package consisting of following programs: Terminal Emulator, FTP (SFTP) Client and Batch FTP (SFTP) Client.
CryptoTerm package allows you to obtain a uniform, unified and intuitive access to diversified system environments - starting from Windows, through Unix environments, up to the IBM Mainframe systems. CryptoTerm provides connections through: Telnet, Serial RS-232, Modem and safe, encrypted SSH (1, 2), SSL 3.0 and TLS 1.0 protocols.
It guarantees unambiguous end-user authentication with the help of: certificates, public/private keys, PKCS#11 devices, NTLM and Kerberos protocols. CryptoTerm provides accurate terminal emulations: XTERM, ANSI, SCOANSI, VT100, VT220, VT220-8, VT320, VT320-8, WYSE60 (WYSE60 COLOR), LINUX, HP and TN3270 (3278-2, 3278-3, 3278-4, 3278-5, printer 3287-1 and IND$FILE transfer protocol).
with the help of: certificates, public/private keys, PKCS#11 devices, NTLM and Kerberos protocols. Major Features: CryptoTerm provides accurate terminal emulations: XTERM, ANSI, SCOANSICryptonit 0.9.7
A freely available encryption tool based on the same Open Source model as IDX-PKI more>>
Cryptonit, IDEALX?s encryption and signature solution, aims to become the standard for confidential document protection.
With Cryptonit, everyone can have access to a simple, reliable and free electronic signature and encryption solution.
Main features:
- Encryption/decryption based on the following algorithms: DES, Triple DES (DES3), DESX, RC2 40/64/128 bits, RC4, RC5, Blowfish , CAST, IDEA, AES 128/192/256 bits
- Self-encryption : encrypt your documents using a password
- Address book: save and organize your contacts for easy and secure communications
- Multi-user: Cryptonit can manage multiple user accounts
- Multi-lingual: Cryptonit is available in English, French, Dutch, German, Portuguese, Arabic and Swedish
- CRL downloads: the CRL are downloaded automatically in order to verify the validity the certificates in use
- Support for standards: Cryptonit is based on international industrial standards (X509, PKCS, RFC IETF). Unlike similar proprietary products, Cryptonit uses standard exchange formats (PKCS)
- Unicode administration
BCArchive 1.08.8
BCArchive creates encrypted archive and allows you to e-mail it to your friend more>>
to an encrypted archive (i.e. single file).
With BCArchive you may store all you confidential files in archives that will allow you to access them whenever you need. All of your files are being encrypted and therefore protected against unauthorized access.
You may create self-extracted program containing encrypted archive and e-mail it to your friend. He/she will receive this archive and can read your files, either via knowing correct password or via using public/secret key technology.
All already generated public and secret keys used in other programs can be also used in BCArchive to create encrypted archive and e-mail it to desired recipient.
BCArchive uses strong symmetric encryption algorithms such as Blowfish, IDEA, Triple-DES, CAST5; secure hash algorithms: SHA-1, MD5, RIPEMD-160; asymmetric (public/secret key) algorithms such as RSA, ELGamal/Diffie-Hellman; conforms to specifications PKCS #5, PKCS #12, X.509.
BCArchive is convenient software product providing you with strongest encryption technology and ability for efficient management of sensitive data.
Main function of the BCArchive is to provide the user with a tool for compressing and encrypting files and/or folders to a single archive file.
From one hand, BCArchive provides a number of ways to create such an archive file and put sensitive data into it, including Windows shell extension commands and support of drag-and-drop operations. From the other hand, BCArchive utilizes strong and proven encryption algorithms and standards to provide high security level for the data stored inside the compressed files.
BCArchive utilizes the following encryption algorithms, standards and specifications:
- Symmetric algorithms: Blowfish, IDEA, Triple-DES and CAST5.
- Secure Hash Algorithms: SHA-1, MD5 and RIPEMD-160.
- Asymmetric (public/secret key pair) algorithms: RSA, ElGamal / Diffie-Hellman.
- Specifications for public/secret key pair format: PKCS #12, X.509.
- PKCS #5 (recommendations for the implementation of password-based cryptography).
- RFC 2440 specifications for session keys encrypted by symmetric or public key encryption algorithms.
Main features:
- Create compressed and encrypted archive file protected by password.
- Create compressed and encrypted archive file encrypted by public key of another user.
- Add a number of passwords to existing archive file.
- Add a number of public keys to existing archive file so that a number of users can decrypt the archive.
- Generate new or use existing secret/public key pairs in PKCS-12/X.509 format.
- Compress and encrypt data to self-extracted executable program. The user can run the program on computer where BCArchive is not installed and get the data extracted.
System requirements:
- Minimum 7 MBytes of free HDD space to install and run the BCArchive software.
Version restrictions:
- Compressed and encrypted archive file created by the BCArchive software can store up to 2 Terabytes not compressed data.
- Self-extracted archive file contains all executable code necessary to extract data stored inside the archive. The code includes correspondent symmetric encryption algorithm, public/secret key algorithm, secure hash algorithm implementations as well as the code to uncompress data. Size of the code is about 130 Kbytes, hence minimum size of self-extracted archive is about 130 Kbytes. The limitation does not concern regular (not self-extracted) archive files.
*Generate new or use existing secret/public key pairs in PKCS-12/X.509 format. *Compress and encrypt data to a self-extracted executable program. The user can run the program and extract theAloaha Sign 3.9.117
Aloaha Sign is an application to validate PDF, p7m, d2d, xmldsig, or PKCS 7 signatures. more>>
Aloaha Sign 3.9.117 is an application to validate PDF, p7m, d2d, xmldsig, or PKCS 7 signatures. Furthermore it is possible to digitally sign virtually any file type with any native supported smartcard.
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
License:Freeware
is an excellent tool to validate PDF, d2d, p7m, xmldsig and PKCS #7 signatures. Furthermore it is possible to digitally sign virtually any filetype with any native supported smartcard. FreewareKittyXplorer 1.0
Store images and other files in encrypted archives and view them conveniently. more>>
KittyXplorer combines the safety of strong encryption with an interface similar to the Windows Explorer and with a build-in image viewer. Files can be encrypted individually, or placed inside encrypted archives that safely hide any file information, such as names, size, and data.
Main features:
Strong Symmetric Encryption
- Encryption types: AES with 128, 192, and 256 bit keys; Blowfish with 128, 192, 256, and 448 bit keys; Serpent with 128, 192, and 256 bit keys.
- Encryption is done in CBC mode per entry file (not per sector), removing any casual patterns.
- Zip deflate compression of data before encryption.
- Encrypts files individually, or in strong encrypted A2R archives where the file paths and sizes cannot be seen.
- Each archive entry is encrypted with its own key, and with its own initialization vector.
- Keys are generated from the password based on PKCS #5, with SHA256 (and SHA512 for 448 bit keys). The iteration count (1024) is configurable.
- Secure random generator for salt and initialization vector based on Young and Yung (2004) method using AES, and various random seed data, including the user mouse movements.
- Archive directory and directory offset are encrypted with different keys in CBC mode.
- All file data, such as, names (archive directory) are encrypted.
- No tags, or any marking in the encrypted files, or encrypted archives. No one can tell if the encrypted files are really encrypted or that are really related to this application (plausible deniability).
- Hints about the entered password quality are provided live, and a mouse-only keyboard helps to enter the passwords in unsafe environments.
- Passwords are kept encrypted in memory with session keys.
- The encrypted files timestamps are set to random values.
- No .NET, or Windows Crypto API encryption functionality is used, but custom standard compatible implementations (AES is fully compatible with .NET Rijndael).
- Encrypted internal clipboard provided, so that data copied between the application windows never leaves the application.
- No backdoors.
Explorer Interface
- Can be used like Windows Explorer to browse the file system and launch (run / open) documents and programs.
- Shows all files, including the system and hidden files.
- Directly reports NTFS secondary streams (alternative data streams).
- Colored file and folder paths based on system file attributes (EFS, hidden, etc.).
- Direct preview strong encrypted A2R archives, including thumbnail views.
- Direct preview of ZIP files, or encrypted ZIP files, including thumbnails.
- Encryption capabilities are seamlessly integrated in the interface.
- Tree view for archives, directory and file thumbnails.
- Automatic keyboard browsing to the next / previous file no matter the folder.
- Various way to sort files, including logical sort of related file names.
- Unlike Windows Explorer, leaves no traces in system about the user history.
Build-in Viewer
- The build-in image viewer can directly preview disk file images, or images inside ZIP or encrypted A2R archives.
- Decryption of images is done in RAM. No data are ever written to hard-disk.
- Detects images based on magic numbers, the file extenssion does not matter.
- Easy maximize of image preview, by double-click on images.
- Reports image metadata and embedded thumbnails.
- Thumbnail previews for files and folders.
- Resizable (large) Windows Vista like image thumbnails, up to 256 pixels.
- Full screen slideshows.
- Integrated text viewer to directly edit encrypted text files (ASCII / UNICODE / RTF). Ideal to store passwords, links, paths, etc.
- The integrated text viewer can preview also the system locked history index.dat files.
- Easy support for multiple screen monitors, including synchronized multi-monitor views.
History Cleaner
- The integrated system history and evidence cleaner can safely wipe the history of Internet Explorer, Mozilla / Firefox, Windows Explorer, Recycle Bin, etc.
- Secure file wiper to shred and delete the files and folders unrecoverably.
- Clean swap file at shutdown (optional).
- Has been optimized to leave a minimum of traces in the system.
- The history and evidence cleaner can be fully customized with new clean units that support folders, files and Windows Registry.
- The custom clean units can be exported and imported to safely share security tips with others.
Other Features
- Support to unzip files and a massive unzip tool.
- Easy manipulate A2R archives modify: append / extract, delete, verify integrity.
- A2R directory backup / restore.
- Directly change wallpaper.
- File search (including inside ZIP and encrypted A2R archives).
- User configurable automatic exit timer to close the application.
- Customizable icon, so that no one can figure casually what application your are using.
- Configurable integration in Windows Explorer context-menu, and drag and drop from Windows Explorer.
- Add / remove / wipe the NTFS secondary streams.
- And many more! Download now to try it yourself!
Version restrictions:
- The images are censured with the program logo.
- Registration pop-ups show regularly while browsing, or when you close, or open windows.
- Registration pop-up will show on application close. The registered version closes up immediately.
- After some registration pop-ups the application will be closed.
- Run / Open on images saves them only as censured PNG files and some registration pop-up shows.
- Slideshows are interrupted.
- File wipe does not work (is interrupted), registration pop-up shows on close.
- Append / Delete for A2R archives do not work.
- Extract is limited to one file at a time.
- The Quick Text Editor truncates files bigger than 1KB.
- No support.
Note:If you want to unlock this limitations you will need to buy a licence for here
LINK
abylon SELFCERT 6.3
abylon SELFCERT - Create self-signed X.509 v3 certificates (PKCS / RSA) for private use more>>
Functional range: 1. Generation of self-signed X.509 v3 test certificates - 2. Automatic installation after the certificate generation - 3. Fields: Owner, Email, Country, City, Organisation and Department - 4. Key size 512 until 4096 Bits - 5. Runtime up to 9999 days (~ 27 years)
System requirements: Pentium; 64MB RAM
- Page: 1 of 2
- 1
- 2