Current projects
On this page you find an overview of recent projects which have either been recently completed or are — at this moment — working with NLnet funding. For a complete overview please check the overview of all projects, or use the thematic index to look up projects based on thematic funds and specific themes. Click on the name of the project to find out more about it.
| project | description |
|---|---|
| 0KNOW | Group Theoretic Zero-knowledge Proofs (0KNOW) |
| LibreCellular | Open hardware 4G Mobile Network |
| AI-VPN | Local machine-based learned analysis of VPN trafffic |
| Analog/Mixed-Signal Library | OSHW component library for ASIC design |
| Accessible security | Integration effort of independent security efforts like Qubes, Heads, coreboot, etc |
| Aerogramme | Standards-compliant open-source IMAP server with server-side encryption |
| Alder Lake Desktop | Open firmware for widely used Desktop/Workstation motherboard |
| OCCRP Aleph disambiguation | OCCRP Aleph: disambiguating different people and companies |
| Apicula | Open source tools for working with Gowin FPGAs |
| Arcan-A12 | Explorative p2p protocol for fast and secure remote desktops |
| AREXERA Crawler | C++ based web crawler |
| Armbian | Versatile OS for ARM-based single board computers |
| Atomic Data | Typesafe handling of LinkedData |
| Atomic Tables | Self-hostable tabular structured data solution |
| Authenticated DNSSEC bootstrapping | Secure in-band announcements of DNSSEC parameters |
| Heads-OpenPGP | OpenPGP Authenticated Heads and long-time awaited security improvements |
| Autocrypt for Thunderbird | Make email encryption extremely simple |
| binary-analysis-ng improvements | Integrate Kaitai in binary-analysis-ng |
| BB3-CM4 | CM4 compatible MCU board |
| BBBsecureChat | Add E2EE instant messaging to Big Blue Button meetings |
| Babelia | Search engine and crawler in Scheme |
| Balthazar | One laptop for the new internet age. |
| Balthazar - One laptop for the new internet age. | A secure fully open hardware laptop |
| Bertie | Formally verified TLS 1.3 implementation |
| Betrusted OS | An embedded OS for cryptographic devices |
| Betrusted software | A minimalist and secure OS for embedded communication devices |
| Betrusted Storage | Plausably deniable encrypted storage |
| Blink Qt Messaging | Add modern encryption to SIP softphone |
| Blink RELOAD | Secure P2P real-time communications with RELOAD |
| Bonfire Search & Discovery | Improving search and discoverability in the Fediverse |
| Bonfire federated groups | Create, join and manage federated groups across instances |
| Briar | A secure messaging app with offline capabilities |
| Briar Desktop | E2EE online and offline messaging and discussion |
| Converged Security Suite Improvements | Open source tooling for BIOS configuration |
| Cable | A new wire protocol for cabal (and beyond) |
| Canaille | Zero-knowledge opinionated OpenID Connect (OIDC) server. |
| Canarytail | Warrant canary standardization and automation |
| Castopod | Podcasting in the fediverse |
| Castopod Mobile | Userfriendly mobile podcasting application |
| Libre-SOC Cavatools: Power ISA Simulator | Power ISA Simulator |
| CeroWRT II | Make Wi-Fi routers faster and more reliable |
| Certbot ECDSA support | |
| Charon | Privacy-enabling account management and SSO solution |
| LibrEDA | An integrated development environment for chip design |
| Zerocat Chipflasher Flashrom Interface | Hardware to flash alternative/libre firmware to BIOS chips |
| Chips4Makers ASICs | |
| Discover and move your coins by yourself | A safe way to explore and work with cryptocurrency forks |
| Coko Docs | A modern, open source replacement for Google Docs and Drive |
| Coloquinte | High performance placement of cells inside digital electronic circuitry |
| Condensation Data System | CRDT-driven data store that guarantees data ownership |
| Connect by Name | Library for easy connection setup |
| Conversations | A secure mobile messaging client |
| Conversations 3.0 | Secure and standards-compliant XMPP client for Android |
| Conzept encyclopedia | An alternative encyclopedia |
| Libre-SOC, Coriolis2 ASIC Layout Collaboration | Open tooling for ASIC Layout |
| Record Federation for Corteza Clouds | Data federation over ActivityPub |
| Corteza Discovery | (Geo)search and discovery within federated services |
| Privacy Infrastructure for Corteza Federations | Allow users to locate and browse their private data wherever |
| ArtistHub | Allow creative artists to gain visibility and build reputation on the web |
| CryptPad Auth | Implement external identity mechanisms to E2EE collaborative editor |
| CryptPad Blueprints | Server-side encrypted collaborative editor |
| CryptPad: Project Dialogue | Secure surveys and polls for Cryptpad |
| CryptoLyzer | Cryptographic settings analyzer library |
| CryptPad | Real-time collaboration with client-side encryption |
| CryptPad for communities | Collaborative web editor with client-side encryption |
| GNU Guix - Cuirass | Continuous integration system for GNU Guix/Linux + Hurd |
| DCnets | Implementation of Dining Cryptographers Network |
| Securing Internet protocols with DIDs | Bridge Decentralized Identifiers with standardised authorisation mechanisms |
| Dat Private Network | Private storage in DAT |
| Anonymisation for Data Donations | Facilitate platform scrutinization through anonymised data contributions |
| DATALISP | Universal data interchange format using canonical S-expressions |
| Structuring the System Layer with Dataspaces | Implementing a secure and scalable system layer on mobile |
| DeltaBot | Social discovery over mail-based chat |
| Dino | User-friendly and secure instant messaging |
| Distributed Private Trust | Decentralised trust and reputation system |
| dream2nix | Automate reproducible packaging for various language ecosystems |
| How AdTech works | Improving public awareness of AdTech and privacy |
| EEZ DIB | EEZ DIY Instrument Bus |
| EEZ Studio | Open source tooling for measurement and test equipment |
| Extend EFI support in BSDs | Bring automated firmware update to BSDs |
| EGIL SCIM client | System for Cross-domain Identity Management |
| ELF Linking | Analytic tools for UNIX' Executable and Linkable Format |
| Encoding for Robust Immutable Storage (ERIS) | Encrypted and content-addressable data blocks |
| Earthstar | P2P protocol and APIs for collaborative and social applications |
| Earthstar (Encryption, Safety, and Local Sync) | Improve security, encryption and sync capabilities in Earthstar CRDT |
| Edalize ASIC backend | Create open hardware silicon with a fully free software toolchain |
| EDeA | A forge suitable for open hardware development |
| AEAP | Automated e-mail address porting to a new provider |
| Email for expert news | Keep up to date with a flow of publication |
| Etebase - protocol and encryption enhancements | Redesign EteSync protocol and encryption scheme |
| EteSync - iOS application | Encrypted synchronisation for calendars, addressbook, etc |
| The search for ethical Apps | |
| EventFahrplan | Conference schedule app with strong offline capabilities |
| Tracking the Trackers | Automated scanning for spyware in mobile applications |
| FOSS Code Supply Chain Assurance | Mitigate attacks through software dependencies |
| FairSync | Simplify aggregation and discovery of places and events |
| searx | Federating self-hosted search hubs |
| Federated software forges with Gitea | Add ActivityPub based federation to Gitea |
| Federated Timesheets | Interoperable machine-readable time tracking |
| First Classify Documents | Categorise different types of official documents |
| Fobnail | Remote attestation delivered locally |
| Folksonomy engine for the food ecosystem | Data modelling by the community |
| ForgeFed | Federation for software collaboration tools |
| Fractal | Native client for the Matrix protocol |
| Fix the Pitch Black Attack in Freenet routing | A decentralized distributed platform for private communication |
| Funkwhale | ActivityPub-driven audio streaming and sharing |
| GNU Name System | Authenticated naming system for the internet from GNU project |
| GNS Migration and Zone Management | Registrar tools for adoption of GNU Name System |
| GNU Mes | Help create an operating system we can trust |
| Full-source GNU Mes on ARM and RISC-V | Expand full-source bootstrap to other CPU platforms |
| GNU Mes RISC-V | Bringing the trustworthy bootstrap to RISC-V |
| GNU Mes on ARM | Trustworthy bootstrap for operating systems on ARM ISA |
| GNU Mes: Full Source bootstrap | |
| GNU Mes Tower | GNU Mes with alternative scheme implementations and WASM |
| GNU social | Modernizing the original FOSS Social Network |
| GNU Taler | Advanced electronic payment system for privacy-preserving payments |
| Taler for local currencies. | Free software banking backend for local currencies |
| Layer-2-Overlay | Generalising the GNUnet Layer-2 Overlay for broader usage |
| GNUnet Messenger API | API for decentralized instant messaging using CADET |
| GPG Lacre project | Best effort encryption of mail flows with OpenPGP |
| Tooling to improve security and trust in GNU Guix | Contextual software vulnerability discovery |
| Gash | Port Gash to GNU Mes for auditable bootstrap |
| Geolexica reverse | Reverse Semantic Search and Ontology Discovery via Machine Learning |
| Federated software forges with Gitea | Use W3C ActivityPub to federate amond software forges |
| VerilogAMS in Gnucap | Template-driven VerilogA-to-Spice model translation |
| GoToSocial | Lightweight ActivityPub social network server |
| GoatCounter | Privacy-friendly web analytics for small websites |
| Gosling | Generic Onions Services Library Project |
| Real time graph database search engine | Live filtering on graph database streams |
| The Open Green Web | Ethical meta-search filter on green hosted websites |
| Porting Guix to Riscv64 | Port Guix software collection to Riscv64 architecture |
| TPM 2.0 for HEADS | TPM 2.0 support for open source BIOS replacement firmware |
| Haketilo/Hydrilla | Browser extension for site customisatoin |
| Great scanning and OCR for mobile devices | |
| Haphaestus | Lightweight JavaScript-free browser engine written in Haskell |
| Himalaya | End-to-end encryption capable scriptable email |
| Hubzilla | Federated social networking environment |
| Implement sound support in the Hurd | Add audio capabilities to the multiserver microkernel from GNU |
| Hyper Hyper Space | Cryptographically secure append-only distributed data layer |
| A proof of concept of identity-based encryption | Make encryption simpler |
| IC workspace | Open Source IC Design Management Tool |
| IMSI Pseudonymization | Better privacy protection for 2G-5G |
| IPDL | Equational Proofs for Distributed Cryptographic Protocols |
| ipfs-search.com | Search engine for the Interplanetary File System |
| Telecommunication in HF using the Internet Protocol (IPoHF) | High-throughput software-defined wireless telecommunications |
| IRMA made easy | Usability research into attribute based authentication |
| Icebreaker | Gemini centric viewpoint of coding issues and bug tracking |
| IN COMMON | Public platform to map and act together for the Commons |
| In-document search | Interoperable Rich Text Changes for Search |
| Practical Tools to Build the Context Web | Declarative setup of P2P collaboration |
| Indigenous | Indieweb mobile clients |
| YunoHost and the Internet Cube | Solutions for DIY-ISP's and self-hosters |
| Interpeer | Collaboration infrastructure with near real-time p2p data synchronization |
| Interpeer SDKs | Secure and efficient peer-to-peer networking stack |
| Inventaire | Wikidata-based social sharing of reading experiences |
| Inventaire recommender | Book recommendations in Inventaire |
| Irdest | Llocal P2P mesh discovery of devices and users |
| Threat intelligence sharing | Privacy-Preserving Sharing of Threat Intelligence in Trusted Adversarial Environments |
| JavaScript Restrictor | Increasing Security and Privacy of JavaScript APIs |
| JShelter | Cross-browser extension to make javascript less exploitable |
| JShelter Manifest V3 | Make JShelter compatible with Manifest V3 |
| End-To-End Encryption for Jitsi Meet | Proven strong encryption for open source video conferencing |
| Verified Differential Privacy for Julia | Proving sound privacy guarantees through a type system |
| Standardizing KEMTLS | Post-quantum TLS without handshake signatures |
| Kaidan | Adding encryption to userfriendly cross-platform XMPP client |
| Kaidan A/V | Secure audio and video calls for Kaidan and QXmpp |
| Serialization in Kaitai Struct for Java and Python | Declaratively modify and create complex binary file formats |
| Karrot | Save and share food waste |
| Katzen | Meta-data resistant instant messaging over the Katzenpost mixnet |
| Kazarma | Bridge ActivityPub and Matrix realms |
| Keyoxide | Self-hostable identity proofs with bidirectional linking verification |
| Private Key Operations for Keyoxide | Implement Private Key Store design in Keyoxide |
| Keyoxide v2 | Add cryptographic signature based to Keyoxide |
| KiCad | Professional open source electronics design application |
| KiKit | Tooling for automation of production of PCB designed in KiCAD |
| Kintex-nextpnr | Open toolchain for high performance FPGAs |
| Improve Email Encryption in KMail | Adopt improvements in Email Encryption in KMail |
| ARPA2 LDAP Middleware | Privacy enhancing middleware |
| Collabora Online and LibreOffice | Improved visual document search for cloud service |
| lemmur | A Lemmy mobile client |
| Lemmy | ActivityPub for link aggregation |
| Lemmy | Add private communities to Lemmy federated link aggregator |
| Lemmy | Lemmy Federation and ActivityPub compliance |
| LiberaForms | End tot End Encrypted Forms |
| Liberaforms | Open source form server |
| XMPP-ActivityPub gateway | XMPP, ActivityPub and E2EE Pubsub |
| Libre-SOC | A fully open hardware System-on-a-Chip |
| Libre-SOC HPC | Work on High Performance Compute capabilities for Libre-SOC |
| Libre-SOC OpenPOWER ISA WG | Steward ISA extension proposals through OpenPOWER External RFC Process |
| IndieHosters | System for Cross-domain Identity Management (SCIM) |
| Librecast | E2E encrypted multicast |
| LibreOffice P2P | Encrypted collaborative editing in the browser |
| The Libre-SOC Gigabit Router | Native Open Hardware chip implementation of crypto primitives |
| LibreSilicon | Free/open source semiconductor manufacturing process |
| Libre Silicon compiler | Synthesize, place and route hardware description to silicon |
| Standard Cell Library | Open Standard Cell Library with automated dimensioning of transistors |
| Port of AMDVLK/RADV 3D Driver to the Libre-SOC | Adapt Vulkan Drivers to the Libre-SoC |
| Libre-SOC Formal Correctness Proofs | Mathematical unit tests for open hardware System-on-Chip |
| Libre-SOC Formal Standards Development | Formal Standards for OpenPower extensions from Libre-SoC |
| Libre-SOC Video Acceleration | Optimised video acceleration instructions for Libre RISC-V SoC |
| Librecast Live | Live streaming with multicast |
| Lightmeter | Email server configuration lifecycle management |
| LinkedDataHub | Framework to handle Linked Data at scale |
| Usability of Linux firewall userspace tools | Userspace tooling for Linux kernel Netfilter |
| Local Production of Antennas for LibreRouter (LoPaLiR) | Reliable open hardware Antennas for LibreRouter |
| LumoSQL | Create more reliable, distributed embedded databases |
| LumoSQL at-rest data security | Modern embedded database with encryption and signed data |
| Luna PnR | A versatile and fast new open-source place and route tool |
| MNT Reform | A trustworthy open hardware laptop |
| MaDada | Using LinkedData to improve FOI processes |
| Maemo Leste | An independent mobile operating system focused on trustworthiness |
| Maemo Leste Telepathy | Modernise open source real-time communications stack |
| Mailpile Search Integration | Personal email search engine |
| Mangaki | Advanced group recommendations |
| Manyverse | An off-line capable privacy-centric social messaging app |
| Manyverse Private Groups | Implement SSB Private Groups in Manyverse |
| MapComplete | Thematics OpenStreetMap-viewer and editor. |
| Mastodon - groups, filtering, moderation | Group support with ActivityPub |
| Improving Matrix E2E encryption UX | Better usability of Matrix.org E2E encryption |
| MEGA65 Phone | A phone simple enough to understand in full |
| Mellium | Add OMEMO support to XMPP library |
| Mepo | Lightweight mobile map search |
| Practical Decentralised Search and Discovery | Search and discovery inside mesh/adhoc networks |
| Meta-Press.es | A press search engine in your browser |
| Meta-Press.es | Retrieve news feeds and search locally |
| Misskey | Misskey federation and ActivityPub compliance |
| MobileAtlas | A distributed open hardware test infrastructure to analyse mobile networks |
| Mobile Test Farm | Test farm setup for aftermarket mobile operating systems |
| Mobilizon | Find, create and organize events |
| MoboSearch | Providing an alternative view on the Android App ecosystem |
| Modos | Open-hardware high-refresh-rate electrophoretic display controller |
| Monal IM | Free Jabber/XMPP client for iOS and macOS |
| Mosaic | Trustworthy open hardware design tool for electrical engineers |
| Movim | Add OMEMO encryption to Movim XMPP client |
| Mynij | Portable indexing and search engine for mobile |
| NEFUSI | NEFUSI: A novel NEuroFUzzy approach for semantic SImilarity assessment |
| Naisho | Efficiently combine end-to-end encryption with CRDTs |
| Naja | EDA tool focused on post logic synthesis |
| Namecoin: TLS | Various TLS integrations for Namecoin |
| Namecoin: ZeroNet and Packaging | Make ZeroNet work with Namecoin |
| Namecoin: Core Infrastructure | Alternative domain name system |
| NaxRiscv core improvements | Open hardware out-order Risc-V CPU |
| NeoChat | Native Matrix encrypted instant messaging client |
| Packet classification extensions for Netfilter | High throughput packet classification of tunneled traffic |
| neuropil | Privacy by design P2P search including IoT |
| neuropil | DHT based overlay network |
| Nextcloud | Unified and intelligent search within private cloud data |
| NextGraph | Interlinked data graphs, with privacy, security, data locality, and interoperability in mind |
| Nitrokey | Open hardware for encryption and authentication |
| Securing NixOS services with systemd | |
| UEFI Secure Boot support for NixOS | Add a self-sovereign root of trust as part of supply chain security |
| NoScript Contextual Policies & LAN protection | Application Boundaries Enforcer (ABE) for new generation of browsers |
| Adopting the Noise Key Exchange in Tox | Improved security of Tox instant messaging with NoiseIK |
| Nominatim | Multi-lingual support in address search |
| Nominatim as a library | Self-hostable address/location retrieval for OpenStreetMap |
| Nym Credentials | A decentralised solution for authentication |
| Nyxt Webextensions | Independent implementation of WebExtensions |
| Nyxt | A programmable browser with advanced search integration |
| Nyxt | Browser integration of federated, distributed platforms |
| Open Know-How Search | Search Open Hardware Projects |
| OSF Crawler Cooperation | Support Infrastructure for Open Search initiatives |
| OpenStreetMap Speed Limits | Infer default speed limits for better quality OpenStreetMap-based routing |
| Off-the-Record messaging version 4 | Advanced protocol for secure messaging |
| Offen | Privacy-respecting site analytics |
| Oil Shell | A new dialect of shell that is less error-prone |
| Improve Okular digital signature support | Improve open source tooling for digital signatures |
| Omnom | Self-hosted bookmarking and snapshotting with search |
| OnBaSca | Tor Bandwidth Scanner |
| Opaque Sphinx | Secure password-based authentication with Opaque/Sphinx |
| Opaque Sphinx Server and Clients | Server and tools for modern authentication |
| OpenCryptoHW | CGRA- based reconfigurable open-source cryptographic IP cores |
| OpenCryptoLinux | Make Linux run on OpenCryptoHW |
| OpenCryptoTester | System-on-Chip for hardware/software testing |
| DRTM implementation for AMD processors | Unified framework for dynamic RTM |
| Personal Food Facts | Privacy protecting personalized information about food |
| Open Hospitality Network | Federated hospitality with ActivityPub |
| Openki.net | Make local events and meetups discoverable |
| Open MLS Infrastructure | End-to-end encrypted group messaging |
| OpenPGP Certificate Authority | Managing OpenPGP keys for communities and organisation |
| Improving OpenSSH's Authentication and PKI | Improving SSH Authentication with OpenPGP transitive trust |
| Interoperable Certificate Store for OpenPGP | Standardisation effort for shared OpenPGP certificate storage |
| Hardening OpenPGP CA deployments | HSM support for OpenPGP key infrastructure |
| OpenQRNG | Open source, certified Quantum Random Number Generator |
| 802.11n feature of openwifi | Open Hardware implementation of wifi |
| Ordie | Designing a SoC for Betrusted |
| LTE support in OsmoCBC (Cell Broadcast Centre) | Open source Cell Broadcast Centre for mobile networks |
| GPRS/EGPRS support in Osmocom CNI for Ericsson RBS | |
| Open source ePDG for VoWiFi | Enhanced Packet Data Gateway for mobile infrastructure |
| Owncast | ActivityPub powered Livecasting |
| p2panda | p2p protocol and event-driven data store |
| P2Pcollab | Decentralised social search and discovery |
| PGP4civiCRM | Add email encryption to CRM |
| Adding Web-of-Trust Support to PGPainless | Web-of-Trust specification support for Java |
| Securing PLCs via embedded protocol adapters | Open hardware protocol adapters for industrial automation |
| Post-Quantum Crypto in DNSSEC | Experimental platform for DNSSEC with post-quantum cryptography |
| PRESC Classifier Copies Package | Implementing Machine Learning Copies as a Means for Black Box Model Evaluation and Remediation |
| Statime | Memory-safe high-precision clock synchronization |
| The PeARS app | Building low-resource Web search applications from cognitive models |
| PeerDB Search | Search for semantic and full-text data |
| PeerTube | A decentralised streaming video platform |
| Extending PeerTube | Adding advanced search capabailities to PeerTube |
| peermaps | Peer to peer cartography |
| Peertube plugin livechat | Integrated chat for Peertube live streams |
| PeerTube - Remote Transcoding | Remote Transcoding for distributed video sharing network |
| Peppol for the masses | Hybrid self-hosted e-invoicing with decentralized identities |
| A Distributed Software Stack For Co-operation | Facilitating easy ad hoc cooperation |
| Pion | Network congestion measurement for adaptive real-time applications |
| PixelDroid | Share and browse photos in the fediverse with a mobile app |
| Pixelfed Live | Live streaming and other Pixelfed enhancements |
| Pixelfed | ActivityPub driven decentralised photo sharing platform |
| Plaudit | Make good science discoverable through endorsements |
| Poliscoops | Make political news and online debate accessible |
| Privacy Enhancements for PowerDNS and DNSdist | Make it easier to deploy private DoT/DoH resolvers |
| PrivateRecSys | Privacy-Friendly Recommendation System |
| Private Searx | Add private resources to the open source Searx metasearch engine |
| Probabilistic NAT Traversal | Last resort ad hoc connections for GNUnet |
| Prosody IM | Implement SASL authentication mechanism for XMPP |
| ProveThis | Prove statements about authenticated API resources |
| PyCM | Evaluate the performance of ML algorithms |
| Qubes OS | Bring the security of Qubes OS to people with disabilities |
| R5N-DHT | Formalisation within IETF of R5N Distributed Hash Table design |
| rasn | Safe ASN.1 codec framework for Rust |
| RISC-V Phone | Open hardware RISC-V Phone |
| RNP Confium | Distributed trust store enabling threshold encryption |
| Radio-Meshnet | Self-sustained Community and Emergency Radio Networking |
| RADIUSdesk | Open wifi mesh deployment application |
| Re-isearch | Vectorise text with a flexible unit of retrieval |
| Redwax | Standardisation of client side PKI interfaces |
| Reowolf | Rip and replace for BSD socket insecurity |
| Graphics acceleration on Replicant | Free software graphics drivers for mobile phones |
| Finish porting Replicant to newer Android version | Alternative, free software version of Android |
| Ricochet Refresh | Anonymous, meta-data free secure messaging |
| Ripple | Safer and faster incremental software builds |
| Robotnix | Reproducible Builds of Android with NIX |
| Rosenguard | Post Quantum Security Add-On for WireGuard |
| Rust Threadpool | Improve privacy of Rust threading library |
| Great OCR for SANE | Integrate OCR capabilities into open source scanning tools |
| SASL XMSS | Make SASL work with XMSS protocol |
| SASL Works for the InternetWide Architecture | Integrate new authentication mechanisms into SASL |
| SCION-RAINS | RAINS, Another Internet Naming Service (or, a DNS alternative) |
| SCION-Pathdiscovery | Secure and reliable decentralized storage platform |
| Geographic tagging of Routing and Forwarding | Geographic tagging and discovery of Internet Routing and Forwarding |
| SDCC | Small Device C Compiler compiler for 8-bit microcontrollers |
| SES - SimplyEdit Spaces | SimplyEdit Spaces - collaborative presentations |
| SWH package manager Data Ingestion | Add Package managers to Software Heritage |
| Storing Efficiently Our Software Heritage | Faster retrieval within Software Heritage |
| SpinalHDL, VexRiscv, SaxonSoc | Open Hardware System-on-Chip design framework based on SpinalHDL |
| Adera | Relevant scientific research results |
| SEARXR | Virtual reality for web search |
| searx | A privacy-respecting, hackable metasearch engine |
| Subliminal Messaging | Embedded secure channels within traditional and internet telephony |
| SeedVault | Private backups of mobile applications |
| Dynamic indexing for real time graph database | Provide faster query results through algorithmic preprocessing |
| SensifAI | AI driven image tagging |
| #Seppo! | Portable ActivityPub implementation |
| A Secret Key Store for Sequoia PGP | Standards-compliant private key store for OpenPGP |
| Adding TPM Support to Sequoia PGP | Implement use of TPM 2.0 crypto hardware for OpenPGP |
| Sequoia PGP | Improve interface of Sequoia PGP commandline |
| Sequoia GPG Chameleon | Implement well-known API's for using OpenPGP |
| SignRoom | Zenroom based signature and credential platform |
| Silicon verification | Non-destructive, in-situ inspection of physical chips |
| Simmel | A wearable contact tracing beacon/scanner |
| smoltcp RPL | Implement Routing Protocol for Low-Power and Lossy networks |
| Software Heritage | Collect, preserve and share the source code of all software ever written |
| Peer-to-Peer Access to Our Software Heritage | Access Software Heritage data via IPFS DHT |
| Solid Application Interoperability | |
| Solid-NextCloud app | Bridge Nextcloud to Solid |
| Solid-Search | Queries in a pod |
| Solid Control | Access Control mechanism for data and services within Solid |
| Solid Application Interoperability | |
| Solid Usable App Tools Project | Improve developer experience for W3C Solid |
| Solid Wallet | Authorization reasoning, rule-based controls and fluid integration for Solid |
| Sonar: a modular peer-to-peer search engine | Modular peer-to-peer search engine |
| sourcehut | Graph query support for software development platform |
| Dual-level Specification Inference | Make formal verification more practical with dual-level Specification Inference |
| Spectrum | A security through compartmentalization based operating system |
| Secure User Interfaces (Spritely) | Usability of decentralised social media |
| Spritely | Capability based petname system |
| Spritely (and OCapN) | Enable secure P2P applications with Object Capabilities |
| Statime PTP Master | Statime - Zero-allocation cross-platform Precision Time Protocol |
| ARPA2 Steamworks | ARPA2 Steamworks |
| StreetComplete | Fix open geodata with OpenStreetMap |
| StreetComplete | Collaborative editing in OpenStreetMap |
| StreetComplete UX | Improve usability of StreetComplete |
| Suhosin-NG | Harden PHP 7 and PHP 8 applications |
| Sylk chat | Add instant messaging features to Sylk |
| Sylk Client | Secure multiparty videoconferencing application |
| Sylk Mobile | Secure real-time mobile communications |
| RETETRA | Security Analysis of Proprietary Cryptography in Terrestrial Trunked Radio |
| TLS-KDH mbed | Implement TLS-KDH into mbed |
| TOS;DR OTA backend | Integrate Terms of Service;Didn't Read with Open Terms Archive |
| Great Black Swamp | Decentralized cloud storage with provider-independent security |
| Tantum Search | Context-enhanced search driven by schema.org |
| Tauri Apps | A safer run-time for web technology based apps |
| Servo Webview for Tauri | Integrated portable webview based on Servo engine into Tauri |
| TerosHDL | Assisting hardware developers to deliver safer designs |
| Padding Machines for Tor | Protect metadata in the Tor onion routing network |
| Tracking weasel | Detect privacy violations in mobile apps |
| TrustING | Ultrafast AS-level Public-Key Infrastructure |
| Build Transparency (Trustix) | Towards a decentralized supply chain for software |
| Trustix | Make build logs available as publicly verifiable, tamper-proof Merkle trees |
| Tvix | Alternative Rust-based software build transparency |
| TwPM | Open hardware implementation of Trusted Platform Module |
| TypeCell | CRDT-based collaborative block-based editor |
| ULX3M | A modular open hardware FPGA platform |
| URL Frontier 2.0 | Enterprise features for URLFrontier |
| URL Frontier | Develop a API between web crawler and frontier |
| Universal DID Resolver and Registrar | Tooling for decentralized identifiers |
| LIP6 VLSI Tools | Logical validation of ASIC layouts |
| ValOS Cryptographic Content Security project | Cryptographic Content Security for ValOS |
| variation graph (vgteam) | Privacy enhanced search within e.g. genome data sets |
| Noise Explorer-VerifPal | Automated proofs and code generation for secure protocols |
| Verifpal | Prove soundness of verification in Verifpal |
| Verified Reowolf | Formal protocol verification with Reowolf |
| VFRAME: Visual Defense Tools | Use computer-vision to shield privacy in video |
| video box | Affordable open hardware video-to-network |
| Video chat privacy | Add privacy features to video chats |
| Vula | Encrypted ad hoc local-area networking |
| Free Software Vulnerability Database | A resource to aggregate software updates |
| Waasabi Framework | P2P Live Streaming for events |
| Web Annotation | Building blocks for interoperable annotation systems |
| WebXray Discovery | Expose tracking mechanism in search hubs |
| Web Zero, with m-ld | Multi-collaborator editable pages and data based on m-ld's CRDT |
| Web Shell | Desktop and security environment for web apps |
| XWiki | Bring wiki capabilities into the Fediverse |
| WikiRate: More Sites, More Cites | Persistent citation for Dekko-based open source data collections |
| WikiRate Insights | Transforming WikiRate ESG Platform User Experience to Maximise Reliable Data Insights |
| WikiRate Insights 2 | Dedicated text search architecture for environmental, social and corporate governance platform |
| Winden/Magic Wormhole dilation | Improving Magic-Wormhole by implementing dilation and multiple file support for the web |
| WireGuard | Scale up WireGuard |
| Wireguard Windows client | Native Wireguard protocol client for Windows |
| Wireguard Rust Implementation | Implementation of WireGuard in a type safe language |
| Wishbone Streaming | Add Streaming capabilities to Wishbone |
| Wispwot | Implement generalized scalable protection against disruptive behavior in content discovery |
| WordPress ActivityPub | Bring ActivityPub social networking to the widely used Wordpress |
| XWiki ActivityPub | First class ActivityPub support in XWiki |
| YaCy Grid SaaS | |
| Yrs | Collaborative editing with CRDT written in Rust |
| Yrs Undo | Rust-based CRDT framework for real-time multi-user applications |
| ZSipOs | Open hardware for telephony encryption |
| Quantum-Proof Zenroom | Implementation of Quantum-Proof Cryptography in Zenroom |
| ARPA2 | Working towards a decentralised global internet that offers security and privacy by design. |
| GnuTLS | Implement TLS-KDH in GnuTLS |
| ARPA2 resource ACL and HTTP SASL modules for NGINX | Extend consistent access control to NGINX webserver |
| betrusted | A protected hardware device for your private matters. |
| Bitmask | User-friendly and secure VPN configuration |
| Reinstatement of crypto.signText() | Cryptographic signatures brought back to the browser |
| Democratic SendComm | Easy to use connected open hardware device |
| DIME | A new encrypted, end-to-end email protocol |
| Distributed Mechanism Learning | Privacy preserving ways of distributed data usage |
| Donations | smaller contributions to various activities |
| dweb-search | Index DHT based distributed webs |
| eduVPN app | Add Wireguard protocol to federated VPN suite |
| eduVPN on Apple | eduVPN for Apple devices |
| eduVPN on Apple part II | Improved version of eduVPN for Apple devices |
| eduVPN multi-protocol | Review of the eduVPN multi-protocol project. |
| eduVPN | Making secure VPN network technology available to everyone |
| elRepo.io - Resilient, distributed content sharing | Resilient, human-centered, distributed content sharing and discovery. |
| Explain Direct | Providing effective and efficient access paradigms for open educational material |
| Fashion Freedom | Supporting research, development, and education to bring the fashion industry into the 21st century |
| fediverse.space | Find your way in the Fediverse |
| FileSender | FileSender is a secure and private way to share large files with anyone. |
| fwupd | Automatic Firmware updates for BSD operating systems |
| GetDNS | Deliver DNSSEC as a building block in harsh environments |
| Global Directories | Distributed contact information discovery mechanism |
| Pretty Easy Privacy | At scale simulation over GNUnet with different realistic user behavior scenarios |
| GUN P2P Encryption | A realtime, decentralized, offline-first, graph database engine |
| Hackathons | contributions to various hackathons |
| imap-codec library | Release version 1.0 of the imap-codec library |
| Internet of Coins | Create a decentralized, self-sustaining economy by implementing inter-blockchain connectivity |
| Handling Data from IPv6 Scanning | Scanning tools for scaling up IPv6 scans |
| iuh-openbsc | An open source implementation of 3G |
| Katzenpost | Observation resistant secure messaging layer |
| Key Management | Key Management |
| DNSSEC Key Signing Suite | A best practise for DNSSEC Key Signing |
| lib25519: Secure and efficient computation of X25519 and Ed25519 | |
| libresilient | Create robust web presence with service workers and DHT |
| libspng | A fast and safe implementation of Portable Network Graphics |
| lpnTPM | TPM 2.0 compliant open hardware Trusted Platform Module |
| Securing Decentralised Live Information with m-ld | Collaborative editing of LInked Data based on CRDT |
| mCaptcha | Privacy-friendly Proof of Work (PoW) based CAPTCHA system |
| Minedive | P2P search over webRTC |
| mobile-nixos | NixOS for mobile phones and tablets |
| Namecoin | Decentralized, censorship resist Internet infrastructure for e.g. DNS and identities |
| Faster and configurable datapath/Linux xfrm | Rewriting nftables to optimise for xfrm |
| Nixcloud Mail | Declarative mail server based on NixOS |
| Nixcloud Webservices | Declarative web services based on NixOS |
| Software vulnerability discovery | Automating discovery of software update and vulnerabilities |
| node-Tor | Implementation of Tor protocols for inside webpages |
| offen | Ethical site analytics, controlled by the user |
| openEngiadina | Platform for creating, publishing and using open local knowledge |
| oqsprovider | Post-quantum/quantum-safe cryptographic algorithms for OpenSSL |
| p4-nix | Combine Programming Protocol-independent Packet Processors language with declarative Nix packaging |
| pcb-rnd | Modular printed circuit board editor |
| Pitchfork | Open hardware for compartmentalizing key material and cryptographic operations |
| Pitchfork PKCS#11 | Contribute to OASIS standardisation PKCS#11 v3 |
| PKCS#11 v3 | Contribute to standardisation of PKCS#11 for cryptographic tokens |
| postmarketOS | An independent mobile operating system |
| Privacy Preserving Disease Tracking | Research into contact tracing privacy |
| RaptorJIT | RaptorJIT is a high-performance Lua virtual machine for network dataplanes. |
| Modular CA | Modular infrastructure for building secure internet services |
| Remote PKCS#11 | Remote usage of PKCS#11 |
| SDR PHY | Create a GSM mobile phone consisting of completely open source software and SDR radio |
| x86-64 VM Monitor for seL4 verified microkernel | Very restricted virtualized environment for higher security |
| Search and Displace | Find and redact privacy sensitive information |
| SecuShare | A framework for sufficiently safe social interaction |
| Secushare Box | Operating system extension of Secushare for hardware devices |
| Serval-LR | SERVAL Long-range WiFi Add-on |
| Magic Wormhole/SPAKE2 | Securely send files between two computers with minimum fuss |
| Stubby | A local DNS Privacy stub resolver using DNS-over-TLS |
| TLS-KDH | Combined Kerberos and Diffie-Hellman as an authentication mechanism for TLS |
| TOS;DR | A user rights initiative to rate and label website terms & privacy policies |
| Tracking Exposed | Increase transparency behind personalization algorithms |
| Trusted Boot Module | An open hardware trusted boot manager |
| Vita | A fast IPSEC-based VPN gateway |
| Vita | A high performance IPSEC implementation |
| Free Software Vulnerability Database | A resource to aggregate software updates |
| Nixcloud | Declarative internet services based on NixOS |
| WireGuard | A fast and modern VPN that utilizes state-of-the-art cryptography |
| Wireguard | Take modern network tunnels to the next level |
| WPIA CA Infrastructure | Deployment infrastructure for certificate authorities |
|
NLnet Foundation currently supports the following projects with in-kind contributions: |
|
| The Commons Conservancy | Legal infrastructure for public benefit efforts |
| NLnet Labs | Independent lab for Internet infrastructure development |
