Current projects
On this page you find an overview of recent projects which have either been recently completed or are — at this moment — working with NLnet funding. For a complete overview please check the overview of all projects, or use the thematic index to look up projects based on thematic funds and specific themes. Click on the name of the project to find out more about it.
| project | description |
|---|---|
| 0KNOW | Group Theoretic Zero-knowledge Proofs (0KNOW) |
| LibreCellular | Open hardware 4G Mobile Network |
| AALT (Accelerated Analog Layout Tool) | More efficient analog layout generation for chips) |
| AI-VPN | Local machine-based learned analysis of VPN trafffic |
| Analog/Mixed-Signal Library | OSHW component library for ASIC design |
| Accessible security | Integration effort of independent security efforts like Qubes, Heads, coreboot, etc |
| ActivityPods | Framework for fully-decentralized social apps, combining ActivityPub and Solid Pods |
| Aerogramme | Standards-compliant open-source IMAP server with server-side encryption |
| Alder Lake Desktop | Open firmware for widely used Desktop/Workstation motherboard |
| OCCRP Aleph disambiguation | OCCRP Aleph: disambiguating different people and companies |
| Apicula | Open source tools for working with Gowin FPGAs |
| Automating mobile app interception with Frida | Mobile app network introspection for security research |
| Perspectives: Making Models | Generate software from open models for human interaction patterns |
| Arcan-A12 | Explorative p2p protocol for fast and secure remote desktops |
| AREXERA Crawler | C++ based web crawler |
| Ari | Purely functional programming language designed to "type" binary files |
| Armbian | Versatile OS for ARM-based single board computers |
| Atomic Data | Typesafe handling of LinkedData |
| Atomic Tables | Self-hostable tabular structured data solution |
| Authenticated DNSSEC bootstrapping | Secure in-band announcements of DNSSEC parameters |
| Heads-OpenPGP | OpenPGP Authenticated Heads and long-time awaited security improvements |
| Autocrypt for Thunderbird | Make email encryption extremely simple |
| Automated clearing of source code files | More efficient retrieval of security and license compliance contextual information |
| binary-analysis-ng improvements | Integrate Kaitai in binary-analysis-ng |
| BB3-CM4 | CM4 compatible MCU board |
| BBBsecureChat | Add E2EE instant messaging to Big Blue Button meetings |
| Babelia | Search engine and crawler in Scheme |
| Balthazar | One laptop for the new internet age. |
| Balthazar Casing | Open hardware laptop |
| Balthazar - One laptop for the new internet age. | A secure fully open hardware laptop |
| Bana | Personal network oriented ActivityPub powered social networking |
| Bertie | Formally verified TLS 1.3 implementation |
| Betrusted OS | An embedded OS for cryptographic devices |
| Betrusted software | A minimalist and secure OS for embedded communication devices |
| Betrusted Storage | Plausably deniable encrypted storage |
| Blink Qt Messaging | Add modern encryption to SIP softphone |
| Blink RELOAD | Secure P2P real-time communications with RELOAD |
| BlockNote | An modern, open source Block-based editor |
| Bonfire Search & Discovery | Improving search and discoverability in the Fediverse |
| Bonfire federated groups | Create, join and manage federated groups across instances |
| Briar | A secure messaging app with offline capabilities |
| Briar Desktop | E2EE online and offline messaging and discussion |
| CNSPRCY | E2EE connections between trusted devices |
| Converged Security Suite Improvements | Open source tooling for BIOS configuration |
| Cable | A new wire protocol for cabal (and beyond) |
| Canaille | Zero-knowledge opinionated OpenID Connect (OIDC) server. |
| Canarytail | Warrant canary standardization and automation |
| Castopod | Podcasting in the fediverse |
| Castopod Mobile | Userfriendly mobile podcasting application |
| Castopod Plugins | Add plugins to the Castopod podcast server |
| Libre-SOC Cavatools: Power ISA Simulator | Power ISA Simulator |
| CeroWRT II | Make Wi-Fi routers faster and more reliable |
| Certbot ECDSA support | |
| Charon | Privacy-enabling account management and SSO solution |
| LibrEDA | An integrated development environment for chip design |
| Zerocat Chipflasher Flashrom Interface | Hardware to flash alternative/libre firmware to BIOS chips |
| Chips4Makers ASICs | |
| Choreographic Programming: From Theory To Practice | Generating a standard library of core distributed algorithms with formal proofs |
| Anchorboot | Pre-built UEFI replacement firmware for ARM-based ChromeOS devices using coreboot/U-Boot |
| Cloud hosting service portability | Service portability for cloud hosting platforms |
| Discover and move your coins by yourself | A safe way to explore and work with cryptocurrency forks |
| Coko Docs | A modern, open source replacement for Google Docs and Drive |
| CokoDocs | Add ODF, legacy office and PDF capabilities to CokoDocs |
| Coloquinte | High performance placement of cells inside digital electronic circuitry |
| Condensation Data System | CRDT-driven data store that guarantees data ownership |
| Connect by Name | Library for easy connection setup |
| Conversations | A secure mobile messaging client |
| Conversations 3.0 | Secure and standards-compliant XMPP client for Android |
| Conzept encyclopedia | An alternative encyclopedia |
| Libre-SOC, Coriolis2 ASIC Layout Collaboration | Open tooling for ASIC Layout |
| Record Federation for Corteza Clouds | Data federation over ActivityPub |
| Corteza Discovery | (Geo)search and discovery within federated services |
| Privacy Infrastructure for Corteza Federations | Allow users to locate and browse their private data wherever |
| ArtistHub | Allow creative artists to gain visibility and build reputation on the web |
| CryptPad Auth | Implement external identity mechanisms to E2EE collaborative editor |
| CryptPad Blueprints | Server-side encrypted collaborative editor |
| CryptPad: Project Dialogue | Secure surveys and polls for Cryptpad |
| CryptoLyzer | Cryptographic settings analyzer library |
| CryptPad | Real-time collaboration with client-side encryption |
| CryptPad for communities | Collaborative web editor with client-side encryption |
| GNU Guix - Cuirass | Continuous integration system for GNU Guix/Linux + Hurd |
| DANCE4All | Implement DANCE specification in GnuTLS and MbedTLS |
| DAVx⁵ | Share Contacts, Calendars, Tasks, Notes & Journals |
| DCnets | Implementation of Dining Cryptographers Network |
| Securing Internet protocols with DIDs | Bridge Decentralized Identifiers with standardised authorisation mechanisms |
| DMT | Implementation of MOSFET Parameter Extraction Flow for Sky130 into DMT |
| Dat Private Network | Private storage in DAT |
| DATALISP | Universal data interchange format using canonical S-expressions |
| Structuring the System Layer with Dataspaces | Implementing a secure and scalable system layer on mobile |
| DeltaBot | Social discovery over mail-based chat |
| Dino | User-friendly and secure instant messaging |
| Distributed Private Trust | Decentralised trust and reputation system |
| Dolphin authorisation | Avoid privilege escalation in the Dolphin file manager |
| dream2nix | Automate reproducible packaging for various language ecosystems |
| Python supply-chain with dream2nix | Towards a secure, extensible & reproducible Python supply-chain with dream2nix |
| How AdTech works | Improving public awareness of AdTech and privacy |
| EDeA | Repeatable, automated measurement data capture |
| EEZ DIB | EEZ DIY Instrument Bus |
| EEZ Studio | Open source tooling for measurement and test equipment |
| Extend EFI support in BSDs | Bring automated firmware update to BSDs |
| EGIL SCIM client | System for Cross-domain Identity Management |
| ELF Linking | Analytic tools for UNIX' Executable and Linkable Format |
| Encoding for Robust Immutable Storage (ERIS) | Encrypted and content-addressable data blocks |
| Earthstar | P2P protocol and APIs for collaborative and social applications |
| Earthstar (Encryption, Safety, and Local Sync) | Improve security, encryption and sync capabilities in Earthstar CRDT |
| Edalize ASIC backend | Create open hardware silicon with a fully free software toolchain |
| EDeA | A forge suitable for open hardware development |
| AEAP | Automated e-mail address porting to a new provider |
| Email for expert news | Keep up to date with a flow of publication |
| Etebase - protocol and encryption enhancements | Redesign EteSync protocol and encryption scheme |
| EteSync - iOS application | Encrypted synchronisation for calendars, addressbook, etc |
| Ethersync | Real-time co-editing of local text files |
| The search for ethical Apps | Create custom, self-hostable app stores for Android(-like) OS-es |
| EventFahrplan | Conference schedule app with strong offline capabilities |
| Exter | Proxy-based external browser extensions |
| Tracking the Trackers | Automated scanning for spyware in mobile applications |
| Friendly Forge Format (F3) | Proposed Standard for secure communication between software forges |
| FABulous Demo SoC | SoC with open source FPGA based on FABulous |
| FOSS Code Supply Chain Assurance | Mitigate attacks through software dependencies |
| FOSS Code Supply Chain Assurance II | Add approximate matching capabilities to software vulnerability discovery |
| FairSync | Simplify aggregation and discovery of places and events |
| searx | Federating self-hosted search hubs |
| Federated software forges with Gitea | Add ActivityPub based federation to Gitea |
| Software metadata | Decentralized, federated metadata about software applications |
| Federated Task-Tracking with Live Data | Track tasks and issues in a federated way |
| Federated Timesheets | Interoperable machine-readable time tracking |
| Fediverse Test Framework | Test bench for ActivityPub implementations |
| First Classify Documents | Categorise different types of official documents |
| Flarum | Add federation and much more to the extensible forum software Flarum. |
| Fobnail | Remote attestation delivered locally |
| Folksonomy engine for the food ecosystem | Data modelling by the community |
| ForgeFed | Federation for software collaboration tools |
| ForgeFed | Federating software forges with ActivityPub |
| Forgejo | An open source software forge with a focus on federation |
| Fractal | Native client for the Matrix protocol |
| Fix the Pitch Black Attack in Freenet routing | A decentralized distributed platform for private communication |
| Frictionless Standards (v2) | New version of the Frictionless Standards specification + improved tooling |
| Funkwhale | ActivityPub-driven audio streaming and sharing |
| Funkwhale | ActivityPub-driven audio streaming and sharing |
| GNU Name System | Authenticated naming system for the internet from GNU project |
| GNS Migration and Zone Management | Registrar tools for adoption of GNU Name System |
| GNU Mes | Help create an operating system we can trust |
| Full-source GNU Mes on ARM and RISC-V | Expand full-source bootstrap to other CPU platforms |
| GNU Mes RISC-V | Bringing the trustworthy bootstrap to RISC-V |
| RISC-V bootstrapping effort via GNU Mes | Allow bootstrapping Guix on RISC-V via GNU Mes |
| GNU Mes on ARM | Trustworthy bootstrap for operating systems on ARM ISA |
| GNU Mes: Full Source bootstrap | |
| GNU Mes Tower | GNU Mes with alternative scheme implementations and WASM |
| GNU social | Modernizing the original FOSS Social Network |
| GNU Taler | Advanced electronic payment system for privacy-preserving payments |
| GNU Taler KYC | Know-Your-Customer support for GNU Taler |
| Taler for local currencies. | Free software banking backend for local currencies |
| GNUnet CONG | Modernise the network stack of GNUnet |
| Layer-2-Overlay | Generalising the GNUnet Layer-2 Overlay for broader usage |
| GNUnet Messenger API | API for decentralized instant messaging using CADET |
| GPG Lacre project | Best effort encryption of mail flows with OpenPGP |
| Tooling to improve security and trust in GNU Guix | Contextual software vulnerability discovery |
| Garage | Lightweight geo-distributed data store compatible with Amazon S3 |
| Gash | Port Gash to GNU Mes for auditable bootstrap |
| Genealogos | Nix to SBOM generator targeting the CycloneDX format |
| Geolexica reverse | Reverse Semantic Search and Ontology Discovery via Machine Learning |
| Federated software forges with Gitea | Use W3C ActivityPub to federate amond software forges |
| Verilog-AMS in Gnucap | Mixed-signal modelling and simulation with Verilog-AMS |
| GoToSocial | Lightweight ActivityPub social network server |
| GoatCounter | Privacy-friendly web analytics for small websites |
| Gorgon CI | Continuous integration testing for PRs against software dependencies |
| Gosling | Generic Onions Services Library Project |
| Real time graph database search engine | Live filtering on graph database streams |
| The Open Green Web | Ethical meta-search filter on green hosted websites |
| Guix Peer-to-Peer substitutes | |
| Porting Guix to Riscv64 | Port Guix software collection to Riscv64 architecture |
| Guix-Daemon | Transition to a Guile implementation of the guix-daemon |
| TPM 2.0 for HEADS | TPM 2.0 support for open source BIOS replacement firmware |
| Haketilo/Hydrilla | Browser extension for site customisatoin |
| Great scanning and OCR for mobile devices | |
| Haphaestus | Lightweight JavaScript-free browser engine written in Haskell |
| Hardware accelerated 2D graphics | Design hardware accelerated 2D graphics using C to Verilog |
| Open Hardware Manuals | Automatically generate user-friendly documentation for open hardware elements |
| OCap layer for Haskell actor library | Implement OCapN and Syndicate in Haskell's troupe |
| SCE, DelTiC and Antler | High-Fidelity Congestion Control |
| Himalaya | End-to-end encryption capable scriptable email |
| Hubzilla | Federated social networking environment |
| Implement sound support in the Hurd | Add audio capabilities to the multiserver microkernel from GNU |
| Hyper Hyper Space | Cryptographically secure append-only distributed data layer |
| A proof of concept of identity-based encryption | Make encryption simpler |
| IC workspace | Open Source IC Design Management Tool |
| IMSI Pseudonymization | Better privacy protection for 2G-5G |
| IPDL | Equational Proofs for Distributed Cryptographic Protocols |
| ipfs-search.com | Search engine for the Interplanetary File System |
| Telecommunication in HF using the Internet Protocol (IPoHF) | High-throughput software-defined wireless telecommunications |
| IRMA made easy | Usability research into attribute based authentication |
| Icebreaker | Gemini centric viewpoint of coding issues and bug tracking |
| Icosa Gallery | Open, decentralised platform for 3D assets |
| IN COMMON | Public platform to map and act together for the Commons |
| In-document search | Interoperable Rich Text Changes for Search |
| Practical Tools to Build the Context Web | Declarative setup of P2P collaboration |
| Indigenous | Indieweb mobile clients |
| Inko | Programming language with deterministic automatic memory management |
| YunoHost and the Internet Cube | Solutions for DIY-ISP's and self-hosters |
| Interpeer | Collaboration infrastructure with near real-time p2p data synchronization |
| Interpeer SDKs | Secure and efficient peer-to-peer networking stack |
| Inventaire | Wikidata-based social sharing of reading experiences |
| Inventaire recommender | Book recommendations in Inventaire |
| IotECC | Lightweight Elliptic Curve Cryptography for small chips |
| Irdest | Local P2P mesh discovery of devices and users |
| Irdest - OpenWRT Image and Bluetooth LE | Add Bluetooth LE connections to Irdest |
| Irdest spec, db, route scoring | Route scoring and other routing improvements for Irdest meshnets |
| Threat intelligence sharing | Privacy-Preserving Sharing of Threat Intelligence in Trusted Adversarial Environments |
| json-joy | JSON data structure as a CRDT |
| JavaScript Restrictor | Increasing Security and Privacy of JavaScript APIs |
| JShelter | Cross-browser extension to make javascript less exploitable |
| JShelter Manifest V3 | Make JShelter compatible with Manifest V3 |
| JellyfishOPP | Open Hardware device for power profiling |
| End-To-End Encryption for Jitsi Meet | Proven strong encryption for open source video conferencing |
| Verified Differential Privacy for Julia | Proving sound privacy guarantees through a type system |
| K-Gen | From datasets in DCAT catalogs to knowledge graphs |
| KDE Connect | KDE Connect discovery and transport protocol improvements |
| Standardizing KEMTLS | Post-quantum TLS without handshake signatures |
| Kaidan | Adding encryption to userfriendly cross-platform XMPP client |
| Kaidan A/V | Secure audio and video calls for Kaidan and QXmpp |
| Kaidan Auth + portability | Account portability and Client/Server Authentication for the Kaidan XMPP client |
| Kaidan | Encrypted A/V calls, group chat messaging |
| Improving and extending Kaitai Struct | Rust parsing for binary analysis tool Kaitai Struct |
| Serialization in Kaitai Struct for Java and Python | Declaratively modify and create complex binary file formats |
| Karrot | Save and share food waste |
| Katzen | Meta-data resistant instant messaging over the Katzenpost mixnet |
| Kazarma | Bridge ActivityPub and Matrix realms |
| Kazarma Release | Bridge between ActivityPub and Matrix protocol |
| Kbin | ActivityPub based link sharing and microblogging |
| Keyoxide | Self-hostable identity proofs with bidirectional linking verification |
| Keyoxide Mobile | Mobile client for identity magement tool Keyoxide |
| Private Key Operations for Keyoxide | Implement Private Key Store design in Keyoxide |
| Keyoxide v2 | Add cryptographic signature based to Keyoxide |
| KiCad | Professional open source electronics design application |
| KiKit | Tooling for automation of production of PCB designed in KiCAD |
| Kintex-nextpnr | Open toolchain for high performance FPGAs |
| Improve Email Encryption in KMail | Adopt improvements in Email Encryption in KMail |
| Improve Krill (RPKI) BGP integration | Real-time routing for Krill RPKI daemon |
| ARPA2 LDAP Middleware | Privacy enhancing middleware |
| Collabora Online/LibreOffice Accessibility | Private and accessible collaborative editing with Collabora Online/LibreOffice |
| Collabora Online and LibreOffice | Improved visual document search for cloud service |
| LibreOffice/Collabora Online typography | Add interoperability and state-of-the-art web typography to LibreOffice/Collabora Online line break |
| lemmur | A Lemmy mobile client |
| Lemmy | ActivityPub for link aggregation |
| Lemmy private communities | Add private communities to Lemmy federated link aggregator |
| Lemmy Federation | Lemmy Federation and ActivityPub compliance |
| Let's Connect! Client-Server to P2P | Add P2P features to Let's Connect! |
| Letswifi/Geteduroam | Make federated wifi access provisioning safer and more convenient |
| LiberaForms | End tot End Encrypted Forms |
| Liberaforms | Open source form server |
| XMPP-ActivityPub gateway | XMPP, ActivityPub and E2EE Pubsub |
| Audio/Video Calls in Libervia | Encrypted Audio/Video Calls in multi-frontend XMPP client |
| Libre-SOC | A fully open hardware System-on-a-Chip |
| Libre-SOC HPC | Work on High Performance Compute capabilities for Libre-SOC |
| Libre-SOC OpenPOWER ISA WG | Steward ISA extension proposals through OpenPOWER External RFC Process |
| IndieHosters | System for Cross-domain Identity Management (SCIM) |
| Libre Car Control | Automotive development platform, protocol analyzer and hacking multi-tool |
| Librecast | E2E encrypted multicast |
| LibreCellular | FOSS technology stack for 4G networks |
| LibreOffice CRDT | Real-time collaboration between several, distributed LibreOffice instances |
| LibreOffice P2P | Encrypted collaborative editing in the browser |
| LibrePCB | EDA software suite to develop printed circuit boards |
| LibreQoS | Improve congestion control for wifi networks |
| The Libre-SOC Gigabit Router | Native Open Hardware chip implementation of crypto primitives |
| LibreSilicon | Free/open source semiconductor manufacturing process |
| Libre Silicon compiler | Synthesize, place and route hardware description to silicon |
| Standard Cell Library | Open Standard Cell Library with automated dimensioning of transistors |
| Port of AMDVLK/RADV 3D Driver to the Libre-SOC | Adapt Vulkan Drivers to the Libre-SoC |
| Libre-SOC Formal Correctness Proofs | Mathematical unit tests for open hardware System-on-Chip |
| Libre-SOC Formal Standards Development | Formal Standards for OpenPower extensions from Libre-SoC |
| Libre-SOC Video Acceleration | Optimised video acceleration instructions for Libre RISC-V SoC |
| Librecast Live | Live streaming with multicast |
| Lightmeter | Email server configuration lifecycle management |
| Liminix | Nix-based OS for domestic WiFi routers, access points etc |
| LinkedDataHub | Framework to handle Linked Data at scale |
| Usability of Linux firewall userspace tools | Userspace tooling for Linux kernel Netfilter |
| LiteX | Developer framework for FPGA and ASIC designs |
| Local Production of Antennas for LibreRouter (LoPaLiR) | Reliable open hardware Antennas for LibreRouter |
| LumoSQL | Create more reliable, distributed embedded databases |
| LumoSQL at-rest data security | Modern embedded database with encryption and signed data |
| Luna PnR | A versatile and fast new open-source place and route tool |
| LunaPnR Phase 2 | A versatile and fast new open-source place and route tool |
| Mainstreaming Anonymity for Developers (MAD) | Add Onion Services to interactive internet applications |
| MNT Reform | A trustworthy open hardware laptop |
| MNT Reform Next | New iteration of the MNT open hardware laptop |
| Improving the deployability of Multipath TCP | Better Multipath TCP support in the Linux kernel |
| MaDada | Using LinkedData to improve FOI processes |
| Machdyne | Modular open compute hardware |
| Maemo Leste | An independent mobile operating system focused on trustworthiness |
| Maemo Leste Telepathy | Modernise open source real-time communications stack |
| Mailpile Search Integration | Personal email search engine |
| Mailpile 2 (moggie) | Building a secure, modern e-mail client for self-hosting |
| Makatea | An x86, 64-bit Virtual Machine Monitor for the seL4, verified microkernel |
| Mangaki | Advanced group recommendations |
| Manyverse | An off-line capable privacy-centric social messaging app |
| Manyverse Private Groups | Implement SSB Private Groups in Manyverse |
| MapComplete | Thematics OpenStreetMap-viewer and editor. |
| Marginalia Search | A fresh take on search |
| Mastodon - groups, filtering, moderation | Group support with ActivityPub |
| Improving Matrix E2E encryption UX | Better usability of Matrix.org E2E encryption |
| MEGA65 Phone | A phone simple enough to understand in full |
| Mellium | Add OMEMO support to XMPP library |
| Mepo | Lightweight mobile map search |
| Practical Decentralised Search and Discovery | Search and discovery inside mesh/adhoc networks |
| Modular Meta-Press.es | Reusable decentralised meta-search engine |
| Meta-Press.es | A press search engine in your browser |
| Meta-Press.es | Retrieve news feeds and search locally |
| MirageVPN | Robust OpenVPN client and server, and QubesOS client |
| Misskey | Misskey federation and ActivityPub compliance |
| MobileAtlas | A distributed open hardware test infrastructure to analyse mobile networks |
| MobileAtlas | Taking roaming measurements to the next levelMobileAtlas |
| postmarketOS/phosh-mobile-settings integration | Consolidate functionality of FOSS mobile settings applications |
| Mobile Test Farm | Test farm setup for aftermarket mobile operating systems |
| Mobilizon | Find, create and organize events |
| MoboSearch | Providing an alternative view on the Android App ecosystem |
| Mobroute | A minimalist FOSS public-transportation router/tool suite |
| Caster | Open-hardware high-refresh-rate electrophoretic display controller |
| Monal IM | Free Jabber/XMPP client for iOS and macOS |
| Mosaic | Trustworthy open hardware design tool for electrical engineers |
| Movim | Add OMEMO encryption to Movim XMPP client |
| Mox | Modern full-featured open source secure mail server |
| Mynij | Portable indexing and search engine for mobile |
| NEFUSI | NEFUSI: A novel NEuroFUzzy approach for semantic SImilarity assessment |
| Naisho | Efficiently combine end-to-end encryption with CRDTs |
| Naja | EDA tool focused on post logic synthesis |
| Namecoin: Electrum-NMC | Security hardening and futureproofing Namecoin and Electrum-NMC |
| Namecoin: TLS | Various TLS integrations for Namecoin |
| Namecoin: ZeroNet and Packaging | Make ZeroNet work with Namecoin |
| Namecoin: Core Infrastructure | Alternative domain name system |
| NaxRiscv core improvements | Open hardware out-order Risc-V CPU |
| NeoChat | Native Matrix encrypted instant messaging client |
| Packet classification extensions for Netfilter | High throughput packet classification of tunneled traffic |
| neuropil | Privacy by design P2P search including IoT |
| neuropil | DHT based overlay network |
| Nextcloud | Unified and intelligent search within private cloud data |
| NextGraph | Interlinked data graphs, with privacy, security, data locality, and interoperability in mind |
| Nitrokey | Open hardware for encryption and authentication |
| Nitrokey 3 | PIV/FIPS 201-3 and extended hardware support for Trussed/Nitrokey |
| Nitter | Alternative privacy-preserving FOSS UI for Twitter |
| Type Inference for Nix | Adding static typing and type inference to Nix |
| Debug Adapter with Nix | Implement the Debug Adaptor Protocol for Nix |
| NixOS/Clevis | Unattented disk decryption with Clevis on NixOS |
| Securing NixOS services with systemd | |
| UEFI Secure Boot support for NixOS | Add a self-sovereign root of trust as part of supply chain security |
| NoScript Contextual Policies & LAN protection | Application Boundaries Enforcer (ABE) for new generation of browsers |
| Adopting the Noise Key Exchange in Tox | Improved security of Tox instant messaging with NoiseIK |
| Nominatim | Multi-lingual support in address search |
| Nominatim as a library | Self-hostable address/location retrieval for OpenStreetMap |
| Nym Credentials | A decentralised solution for authentication |
| Nyxt Webextensions | Independent implementation of WebExtensions |
| Nyxt | A programmable browser with advanced search integration |
| Nyxt | Browser integration of federated, distributed platforms |
| Open Know-How Search | Search Open Hardware Projects |
| OSF Crawler Cooperation | Support Infrastructure for Open Search initiatives |
| OpenStreetMap Speed Limits | Infer default speed limits for better quality OpenStreetMap-based routing |
| Off-the-Record messaging version 4 | Advanced protocol for secure messaging |
| Offen | Privacy-respecting site analytics |
| Oil Shell | A new dialect of shell that is less error-prone |
| Oil Shell | Modern shell language and runtime |
| Oku | A browser and encrypted data vault based on IPFS |
| Improve Okular digital signature support | Improve open source tooling for digital signatures |
| Omnom | Self-hosted bookmarking and snapshotting with search |
| OnBaSca | Tor Bandwidth Scanner |
| Opaque Sphinx | Secure password-based authentication with Opaque/Sphinx |
| Opaque Sphinx Server and Clients | Server and tools for modern authentication |
| Open Cloud Mesh | Improved specs and test suite for Open Cloud Mesh protocol |
| OpenCryptoHW | CGRA- based reconfigurable open-source cryptographic IP cores |
| OpenCryptoLinux | Make Linux run on OpenCryptoHW |
| OpenCryptoTester | System-on-Chip for hardware/software testing |
| DRTM implementation for AMD processors | Unified framework for dynamic RTM |
| Open Energy Profiler Toolset | Modular open hardware Energy Profiling |
| Personal Food Facts | Privacy protecting personalized information about food |
| Open Hospitality Network | Federated hospitality with ActivityPub |
| Openki.net | Make local events and meetups discoverable |
| Open MLS Infrastructure | End-to-end encrypted group messaging |
| OpenPGP Certificate Authority | Managing OpenPGP keys for communities and organisation |
| Improving OpenSSH's Authentication and PKI | Improving SSH Authentication with OpenPGP transitive trust |
| Interoperable Certificate Store for OpenPGP | Standardisation effort for shared OpenPGP certificate storage |
| Hardening OpenPGP CA deployments | HSM support for OpenPGP key infrastructure |
| OpenQRNG | Open source, certified Quantum Random Number Generator |
| 802.11n feature of openwifi | Open Hardware implementation of wifi |
| Ordie | Designing a SoC for Betrusted |
| Organic Maps | Privacy-focused Android & iOS offline maps application |
| LTE support in OsmoCBC (Cell Broadcast Centre) | Open source Cell Broadcast Centre for mobile networks |
| GPRS/EGPRS support in Osmocom CNI for Ericsson RBS | |
| Open source ePDG for VoWiFi | Enhanced Packet Data Gateway for mobile infrastructure |
| Owncast | ActivityPub powered Livecasting |
| p2panda | p2p protocol and event-driven data store |
| P2Pcollab | Decentralised social search and discovery |
| PGP4civiCRM | Add email encryption to CRM |
| Adding Web-of-Trust Support to PGPainless | Web-of-Trust specification support for Java |
| Securing PLCs via embedded protocol adapters | Open hardware protocol adapters for industrial automation |
| Post-Quantum Crypto in DNSSEC | Experimental platform for DNSSEC with post-quantum cryptography |
| PRESC Classifier Copies Package | Implementing Machine Learning Copies as a Means for Black Box Model Evaluation and Remediation |
| Statime | Memory-safe high-precision clock synchronization |
| Passthrough Authentication | Authentication proxy using Kerberos and SPNEGO |
| The PeARS app | Building low-resource Web search applications from cognitive models |
| PeerDB Search | Search for semantic and full-text data |
| PeerTube | A decentralised streaming video platform |
| Extending PeerTube | Adding advanced search capabailities to PeerTube |
| peermaps | Peer to peer cartography |
| Peertube plugin livechat | Integrated chat for Peertube live streams |
| PeerTube - Remote Transcoding | Remote Transcoding for distributed video sharing network |
| Peppol for the masses | Hybrid self-hosted e-invoicing with decentralized identities |
| A Distributed Software Stack For Co-operation | Facilitating easy ad hoc cooperation |
| Pimalaya | Open source personal information management |
| Pion | Network congestion measurement for adaptive real-time applications |
| PixelDroid | Share and browse photos in the fediverse with a mobile app |
| PixelDroid/Media editor | Native PixelFed/ActivityPub image sharing app |
| Pixelfed Live | Live streaming and other Pixelfed enhancements |
| Pixelfed | ActivityPub driven decentralised photo sharing platform |
| Pixelfed | Open source, federated photo sharing platform using ActivityPub |
| Plaudit | Make good science discoverable through endorsements |
| Pleroma | Scalable ActivityPub server written in Elixir |
| Poliscoops | Make political news and online debate accessible |
| Privacy Enhancements for PowerDNS and DNSdist | Make it easier to deploy private DoT/DoH resolvers |
| pretalx | Open source tooling for events and conferences |
| PrivateRecSys | Privacy-Friendly Recommendation System |
| Private Searx | Add private resources to the open source Searx metasearch engine |
| Probabilistic NAT Traversal | Last resort ad hoc connections for GNUnet |
| Prosody IM | Implement SASL authentication mechanism for XMPP |
| ProveThis | Prove statements about authenticated API resources |
| PyCM | Evaluate the performance of ML algorithms |
| Pythonic Slint | Add a full-blown Python API to Slint |
| Qubes OS | Bring the security of Qubes OS to people with disabilities |
| R5N-DHT | Formalisation within IETF of R5N Distributed Hash Table design |
| RA-Sentinel | A smart geiger teller for wifi network traffic |
| RAIJIN | Open Hardware brain meeasurements with near-infrared spectroscopy |
| rasn | Safe ASN.1 codec framework for Rust |
| RISC-V Phone | Open hardware RISC-V Phone |
| RNP Confium | Distributed trust store enabling threshold encryption |
| Fast RSA + PQ Blind Signatures | Fast multiprecision integers for blind RSA and Post-Quantum signatures |
| Radio-Meshnet | Self-sustained Community and Emergency Radio Networking |
| RADIUSdesk | Open wifi mesh deployment application |
| Raptor Lake Desktop | Implement open-source firmware for modern mainboards and chipsets |
| Re-isearch | Vectorise text with a flexible unit of retrieval |
| Redwax | Standardisation of client side PKI interfaces |
| Reowolf | Rip and replace for BSD socket insecurity |
| Replicant on Pinephone 1.2 | Add basic support for the Pinephone 1.2 to Replicant |
| Graphics acceleration on Replicant | Free software graphics drivers for mobile phones |
| Finish porting Replicant to newer Android version | Alternative, free software version of Android |
| Reproducible F-Droid | Building a trusted app ecosystem with F-Droid |
| Ricochet Refresh | Anonymous, meta-data free secure messaging |
| pcb-rnd, sch-rnd | Open source EDA suite |
| Ripple | Safer and faster incremental software builds |
| Robotnix | Reproducible Builds of Android with NIX |
| Rosenpass | Post Quantum Security Add-On for WireGuard |
| Rotonda Secure Extensions | Implement BGPSec in Rust and integrate into Rotonda |
| Rust Threadpool | Improve privacy of Rust threading library |
| Great OCR for SANE | Integrate OCR capabilities into open source scanning tools |
| SASL XMSS | Make SASL work with XMSS protocol |
| SASL Works for the InternetWide Architecture | Integrate new authentication mechanisms into SASL |
| SCION-enabled IPFS and libp2p | Enhancing IPFS Performance and Resilience through SCION's Path-Aware Networking |
| SCION-RAINS | RAINS, Another Internet Naming Service (or, a DNS alternative) |
| SCION-Pathdiscovery | Secure and reliable decentralized storage platform |
| Geographic tagging of Routing and Forwarding | Geographic tagging and discovery of Internet Routing and Forwarding |
| SDCC | Small Device C Compiler compiler for 8-bit microcontrollers |
| SES - SimplyEdit Spaces | SimplyEdit Spaces - collaborative presentations |
| SIP RELOAD | REsource LOcation And Discovery, a peer-to-peer (P2P) signaling protocol |
| Software Heritage listers + tooling | Performance improvements and new listers/tooling for Software Heritage |
| SWH package manager Data Ingestion | Add Package managers to Software Heritage |
| Storing Efficiently Our Software Heritage | Faster retrieval within Software Heritage |
| SpinalHDL, VexRiscv, SaxonSoc | Open Hardware System-on-Chip design framework based on SpinalHDL |
| Adera | Relevant scientific research results |
| SEARXR | Virtual reality for web search |
| searx | A privacy-respecting, hackable metasearch engine |
| Subliminal Messaging | Embedded secure channels within traditional and internet telephony |
| SeedVault Integrity | Add integrity checking and WebDAV support to SeedVault Android backups |
| SeedVault | Private backups of mobile applications |
| SelfPrivacy | Reproducible self-hosting stack based on NixOS |
| Dynamic indexing for real time graph database | Provide faster query results through algorithmic preprocessing |
| SensifAI | AI driven image tagging |
| #Seppo! | Portable ActivityPub implementation |
| A Secret Key Store for Sequoia PGP | Standards-compliant private key store for OpenPGP |
| Adding TPM Support to Sequoia PGP | Implement use of TPM 2.0 crypto hardware for OpenPGP |
| Sequoia PGP | Improve interface of Sequoia PGP commandline |
| Sequoia GPG Chameleon | Implement well-known API's for using OpenPGP |
| Servo | Independent Rust-based browser engine |
| SiCl4 | Tool for interactive reverse engineering of digital logic. |
| Signature PDF | Self-hosted tool to add signature to PDFs |
| SignRoom | Zenroom based signature and credential platform |
| Silicon verification | Non-destructive, in-situ inspection of physical chips |
| Simmel | A wearable contact tracing beacon/scanner |
| Slint port for Android | Port the Rust-based Slint UI toolkit to Android |
| smoltcp RPL | Implement Routing Protocol for Low-Power and Lossy networks |
| Software Heritage | Collect, preserve and share the source code of all software ever written |
| Peer-to-Peer Access to Our Software Heritage | Access Software Heritage data via IPFS DHT |
| Solid Application Interoperability | |
| Solid-NextCloud app | Bridge Nextcloud to Solid |
| Solid-Search | Queries in a pod |
| Solid Compound | A software library/framework to simplify designing for W3C Solid |
| Solid Control | Access Control mechanism for data and services within Solid |
| Solid Data Modules | Improve data accessibility and prevent data corruption in Solid Pods |
| Solid Application Interoperability | |
| Solid Application Interoperability | Interoperable Data sharing flows and discovery for Solid |
| Solid Usable App Tools Project | Improve developer experience for W3C Solid |
| Solid Wallet | Authorization reasoning, rule-based controls and fluid integration for Solid |
| Sonar: a modular peer-to-peer search engine | Modular peer-to-peer search engine |
| sourcehut | Graph query support for software development platform |
| Space Tube | Group-to-group instant messaging |
| Dual-level Specification Inference | Make formal verification more practical with dual-level Specification Inference |
| Spectrum | A security through compartmentalization based operating system |
| Spectrum Applications | Add running graphical applications to the compartmentalized desktop OS Spectrum |
| Secure User Interfaces (Spritely) | Usability of decentralised social media |
| Spritely | Capability based petname system |
| Spritely (and OCapN) | Enable secure P2P applications with Object Capabilities |
| Stalwart Mail Server | Robust full featured mail infrastructure in Rust |
| Statime PTP Master | Statime - Zero-allocation cross-platform Precision Time Protocol |
| ARPA2 Steamworks | ARPA2 Steamworks |
| Stencila v2 for ERA and EPP | Add editable, runnable code to scientific publications |
| StreetComplete | Fix open geodata with OpenStreetMap |
| StreetComplete | Collaborative editing in OpenStreetMap |
| StreetComplete UX | Improve usability of StreetComplete |
| Structured Email for Roundcube | Add schema.org metadata awareness to open source email |
| Suhosin-NG | Harden PHP 7 and PHP 8 applications |
| Sustainable web apps with m-ld | Empower users and developers with distributed interlinked data using local-first principles |
| Sylk chat | Add instant messaging features to Sylk |
| Sylk Client | Secure multiparty videoconferencing application |
| Sylk Mobile | Secure real-time mobile communications |
| RETETRA | Security Analysis of Proprietary Cryptography in Terrestrial Trunked Radio |
| TLS-KDH mbed | Implement TLS-KDH into mbed |
| TOS;DR OTA backend | Integrate Terms of Service;Didn't Read with Open Terms Archive |
| Great Black Swamp | Decentralized cloud storage with provider-independent security |
| GNU Taler wallet app for iOS | Mobile GNU Taler payments for portable Apple devices |
| Tantum Search | Context-enhanced search driven by schema.org |
| Tasteweb | Develop new web of trust mechanisms |
| Tauri Apps | A safer run-time for web technology based apps |
| Servo Webview for Tauri | Integrated portable webview based on Servo engine into Tauri |
| TerosHDL | Assisting hardware developers to deliver safer designs |
| Threshold OPRFs | Bringing the power of Threshold OPRFs to the people |
| Padding Machines for Tor | Protect metadata in the Tor onion routing network |
| Tracking weasel | Detect privacy violations in mobile apps |
| Trenchboot as Anti Evil Maid | Integrate Trenchboot into Qubes OS as defense mechanism against physical compromise |
| TrustING | Ultrafast AS-level Public-Key Infrastructure |
| Trust semantic learning and monitoring | Measure on-going trust between interacting agents |
| Build Transparency (Trustix) | Towards a decentralized supply chain for software |
| Trustix | Make build logs available as publicly verifiable, tamper-proof Merkle trees |
| Tvix | Alternative Rust-based software build transparency |
| TwPM | Open hardware implementation of Trusted Platform Module |
| TypeCell | CRDT-based collaborative block-based editor |
| UEFI isolation in VM from non UEFI firmware | Safer booting into UEFI-compliant operating system |
| ULX3M | A modular open hardware FPGA platform |
| URL Frontier 2.0 | Enterprise features for URLFrontier |
| URL Frontier | Develop a API between web crawler and frontier |
| Reverse Engineering Toolkit | Reducing e-waste through Reverse Engineering |
| Universal DID Resolver and Registrar | Tooling for decentralized identifiers |
| LIP6 VLSI Tools | Logical validation of ASIC layouts |
| ValOS Cryptographic Content Security project | Cryptographic Content Security for ValOS |
| variation graph (vgteam) | Privacy enhanced search within e.g. genome data sets |
| Noise Explorer-VerifPal | Automated proofs and code generation for secure protocols |
| Verifpal | Prove soundness of verification in Verifpal |
| Verified Reowolf | Formal protocol verification with Reowolf |
| VFRAME: Visual Defense Tools | Use computer-vision to shield privacy in video |
| video box | Affordable open hardware video-to-network |
| Video chat privacy | Add privacy features to video chats |
| Vula | Encrypted ad hoc local-area networking |
| Free Software Vulnerability Database | A resource to aggregate software updates |
| WPE Android | Embedded-friendly Webview based on WebKit |
| Waasabi Framework | P2P Live Streaming for events |
| Web Annotation | Building blocks for interoperable annotation systems |
| DeltaChat/WebXDC | Portable private apps that can be shared in e.g. chat |
| WebXray Discovery | Expose tracking mechanism in search hubs |
| Web Shell | Desktop and security environment for web apps |
| Whisperfish | Cross-platform mobile client for Signal and derivatives |
| XWiki | Bring wiki capabilities into the Fediverse |
| WikiRate: More Sites, More Cites | Persistent citation for Dekko-based open source data collections |
| WikiRate Insights | Transforming WikiRate ESG Platform User Experience to Maximise Reliable Data Insights |
| WikiRate Insights 2 | Dedicated text search architecture for environmental, social and corporate governance platform |
| Winden/Magic Wormhole dilation | Improving Magic-Wormhole by implementing dilation and multiple file support for the web |
| WireGuard | Scale up WireGuard |
| Wireguard Windows client | Native Wireguard protocol client for Windows |
| Wireguard Rust Implementation | Implementation of WireGuard in a type safe language |
| Wishbone Streaming | Add Streaming capabilities to Wishbone |
| Wispwot | Implement generalized scalable protection against disruptive behavior in content discovery |
| Wolvic | Web browser designed for use in XR devices |
| Event Federation Plugin for WordPress | Add ActivityPub to events created with most common WordPress event plugins |
| WordPress ActivityPub | Bring ActivityPub social networking to the widely used Wordpress |
| MLS for XMPP | Add Message Layer Security to XMPP |
| XR Fragments | Discover, reference, navigate and query 3D online content |
| XWiki ActivityPub | First class ActivityPub support in XWiki |
| YaCy Grid SaaS | |
| Yrs | Collaborative editing with CRDT written in Rust |
| Yrs Undo | Rust-based CRDT framework for real-time multi-user applications |
| Yrs weak links | More efficient CRDT by interconnecting and synchronising data structures inside documents |
| ZIP file format description | Documenting the ZIP file format for reverse engineers and developers |
| ZSipOs | Open hardware for telephony encryption |
| Quantum-Proof Zenroom | Implementation of Quantum-Proof Cryptography in Zenroom |
| Zero-allocation web servers in roc | Web server framework with constant memory usage |
| ARPA2 | Working towards a decentralised global internet that offers security and privacy by design. |
| GnuTLS | Implement TLS-KDH in GnuTLS |
| ARPA2 resource ACL and HTTP SASL modules for NGINX | Extend consistent access control to NGINX webserver |
| betrusted | A protected hardware device for your private matters. |
| Bitmask | User-friendly and secure VPN configuration |
| choreo-rs | Choreography programming language integrated with the Rust ecosystem |
| Reinstatement of crypto.signText() | Cryptographic signatures brought back to the browser |
| Democratic SendComm | Easy to use connected open hardware device |
| DIME | A new encrypted, end-to-end email protocol |
| Distributed Mechanism Learning | Privacy preserving ways of distributed data usage |
| Donations | smaller contributions to various activities |
| dweb-search | Index DHT based distributed webs |
| eduVPN app | Add Wireguard protocol to federated VPN suite |
| eduVPN on Apple | eduVPN for Apple devices |
| eduVPN on Apple part II | Improved version of eduVPN for Apple devices |
| eduVPN multi-protocol | Review of the eduVPN multi-protocol project. |
| eduVPN | Making secure VPN network technology available to everyone |
| elRepo.io - Resilient, distributed content sharing | Resilient, human-centered, distributed content sharing and discovery. |
| Explain Direct | Providing effective and efficient access paradigms for open educational material |
| Fashion Freedom | Supporting research, development, and education to bring the fashion industry into the 21st century |
| fediverse.space | Find your way in the Fediverse |
| FileSender | FileSender is a secure and private way to share large files with anyone. |
| fwupd | Automatic Firmware updates for BSD operating systems |
| GetDNS | Deliver DNSSEC as a building block in harsh environments |
| Global Directories | Distributed contact information discovery mechanism |
| Pretty Easy Privacy | At scale simulation over GNUnet with different realistic user behavior scenarios |
| GUN P2P Encryption | A realtime, decentralized, offline-first, graph database engine |
| Hackathons | contributions to various hackathons |
| imap-codec library | Release version 1.0 of the imap-codec library |
| Internet of Coins | Create a decentralized, self-sustaining economy by implementing inter-blockchain connectivity |
| Handling Data from IPv6 Scanning | Scanning tools for scaling up IPv6 scans |
| it | Radically decentralised version control with CRDTs |
| iuh-openbsc | An open source implementation of 3G |
| Katzenpost | Observation resistant secure messaging layer |
| Key Management | Key Management |
| DNSSEC Key Signing Suite | A best practise for DNSSEC Key Signing |
| lib25519: Secure and efficient computation of X25519 and Ed25519 | |
| libresilient | Create robust web presence with service workers and DHT |
| libspng | A fast and safe implementation of Portable Network Graphics |
| libspng APNG | Add Animated PNG (APNG) image read- and write support to libspng |
| lpnTPM | TPM 2.0 compliant open hardware Trusted Platform Module |
| Securing Decentralised Live Information with m-ld | Collaborative editing of LInked Data based on CRDT |
| mCaptcha | Privacy-friendly Proof of Work (PoW) based CAPTCHA system |
| Minedive | P2P search over webRTC |
| mitmproxy | HTTP/3 Support and OS Proxy Mode for intercepting local proxy |
| mobile-nixos | NixOS for mobile phones and tablets |
| Namecoin | Decentralized, censorship resist Internet infrastructure for e.g. DNS and identities |
| Faster and configurable datapath/Linux xfrm | Rewriting nftables to optimise for xfrm |
| Nixcloud Mail | Declarative mail server based on NixOS |
| Nixcloud Webservices | Declarative web services based on NixOS |
| Software vulnerability discovery | Automating discovery of software update and vulnerabilities |
| node-Tor | Implementation of Tor protocols for inside webpages |
| Strengthening NTP and NTS in ntpd-rs | Memory-safe implementation of IETF time standards including NTPv5 and NTS |
| offen | Ethical site analytics, controlled by the user |
| openEngiadina | Platform for creating, publishing and using open local knowledge |
| openXC7 | Improve hardware support for open source FPGA tooling |
| oqsprovider | Post-quantum/quantum-safe cryptographic algorithms for OpenSSL |
| p3pch4t | Decentralized chat platform built on i2p |
| p4-nix | Combine Programming Protocol-independent Packet Processors language with declarative Nix packaging |
| pcb-rnd | Modular printed circuit board editor |
| Pitchfork | Open hardware for compartmentalizing key material and cryptographic operations |
| Pitchfork PKCS#11 | Contribute to OASIS standardisation PKCS#11 v3 |
| PKCS#11 v3 | Contribute to standardisation of PKCS#11 for cryptographic tokens |
| postmarketOS: v23.12 and v24.06 Releases | New versions of the mobile operating system postmarketOS |
| postmarketOS | An independent mobile operating system |
| Privacy Preserving Disease Tracking | Research into contact tracing privacy |
| purl2all | Discover metadata for software packages |
| RaptorJIT | RaptorJIT is a high-performance Lua virtual machine for network dataplanes. |
| Modular CA | Modular infrastructure for building secure internet services |
| Remote PKCS#11 | Remote usage of PKCS#11 |
| SDR PHY | Create a GSM mobile phone consisting of completely open source software and SDR radio |
| x86-64 VM Monitor for seL4 verified microkernel | Very restricted virtualized environment for higher security |
| Search and Displace | Find and redact privacy sensitive information |
| SecuShare | A framework for sufficiently safe social interaction |
| Secushare Box | Operating system extension of Secushare for hardware devices |
| Serval-LR | SERVAL Long-range WiFi Add-on |
| Magic Wormhole/SPAKE2 | Securely send files between two computers with minimum fuss |
| Stubby | A local DNS Privacy stub resolver using DNS-over-TLS |
| TLS-KDH | Combined Kerberos and Diffie-Hellman as an authentication mechanism for TLS |
| TOS;DR | A user rights initiative to rate and label website terms & privacy policies |
| Tracking Exposed | Increase transparency behind personalization algorithms |
| Trusted Boot Module | An open hardware trusted boot manager |
| uFork | A memory-safe pure-actor virtual machine |
| vdirsyncer | Synchronise calendars and contacts |
| Vita | A fast IPSEC-based VPN gateway |
| Vita | A high performance IPSEC implementation |
| Free Software Vulnerability Database | A resource to aggregate software updates |
| Nixcloud | Declarative internet services based on NixOS |
| WireGuard | A fast and modern VPN that utilizes state-of-the-art cryptography |
| Wireguard | Take modern network tunnels to the next level |
| WPIA CA Infrastructure | Deployment infrastructure for certificate authorities |
|
NLnet Foundation currently supports the following projects with in-kind contributions: |
|
| The Commons Conservancy | Legal infrastructure for public benefit efforts |
| NLnet Labs | Independent lab for Internet infrastructure development |
