Current projects
Listed on this page are programs and projects which are - at this moment - working with NLnet funding.
| project | description |
|---|---|
| LibreCellular | Open hardware 4G Mobile Network |
| AI-VPN | Local machine-based learned analysis of VPN trafffic |
| Accessible security | Integration effort of independent security efforts like Qubes, Heads, coreboot, etc |
| OCCRP Aleph disambiguation | OCCRP Aleph: disambiguating different people and companies |
| Autocrypt for Thunderbird | Make email encryption extremely simple |
| BBBsecureChat | Add E2EE instant messaging to Big Blue Button meetings |
| Babelia | Search engine and crawler in Scheme |
| Balthazar | One laptop for the new internet age. |
| Balthazar - One laptop for the new internet age. | A secure fully open hardware laptop |
| Betrusted OS | An embedded OS for cryptographic devices |
| Betrusted software | A minimalist and secure OS for embedded communication devices |
| Betrusted Storage | Plausably deniable encrypted storage |
| Blink RELOAD | Secure P2P real-time communications with RELOAD |
| Bonfire Search & Discovery | Improving search and discoverability in the Fediverse |
| Briar | A secure messaging app with offline capabilities |
| Castopod | Podcasting in the fediverse |
| Castopod Mobile | Userfriendly mobile podcasting application |
| Certbot ECDSA support | |
| LibrEDA | An integrated development environment for chip design |
| Zerocat Chipflasher Flashrom Interface | Hardware to flash alternative/libre firmware to BIOS chips |
| Chips4Makers ASICs | |
| Supersizing the Gun | Chipwhisperer open hardware for side channel analysis |
| Discover and move your coins by yourself | A safe way to explore and work with cryptocurrency forks |
| Connect by Name | Library for easy connection setup |
| Conversations | A secure mobile messaging client |
| Libre-SOC, Coriolis2 ASIC Layout Collaboration | Open tooling for ASIC Layout |
| Record Federation for Corteza Clouds | Data federation over ActivityPub |
| Corteza Discovery | (Geo)search and discovery within federated services |
| Privacy Infrastructure for Corteza Federations | Allow users to locate and browse their private data wherever |
| ArtistHub | Allow creative artists to gain visibility and build reputation on the web |
| CryptPad: Project Dialogue | Secure surveys and polls for Cryptpad |
| CryptPad | Real-time collaboration with client-side encryption |
| CryptPad for communities | Collaborative web editor with client-side encryption |
| GNU Guix - Cuirass | Continuous integration system for GNU Guix/Linux + Hurd |
| DCnets | Implementation of Dining Cryptographers Network |
| Redash | Predictive text entry without a keyboard |
| Dat Private Network | Private storage in DAT |
| Structuring the System Layer with Dataspaces | Implementing a secure and scalable system layer on mobile |
| DeltaBot | Social discovery over mail-based chat |
| Dino | User-friendly and secure instant messaging |
| Distributed Private Trust | Decentralised trust and reputation system |
| How AdTech works | Improving public awareness of AdTech and privacy |
| EEZ DIB | EEZ DIY Instrument Bus |
| EGIL SCIM client | System for Cross-domain Identity Management |
| ELF Linking | Analytic tools for UNIX' Executable and Linkable Format |
| Edalize ASIC backend | Create open hardware silicon with a fully free software toolchain |
| EDeA | A forge suitable for open hardware development |
| AEAP | Automated e-mail address porting to a new provider |
| Thunderbird - native EteSync integration using TbSync | Add encrypted sync to Thunderbird |
| Etebase (EteSync) - protocol and encryption scheme enhancements | Redesign EteSync protocol and encryption scheme |
| EteSync - iOS application | Encrypted synchronisation for calendars, addressbook, etc |
| Tracking the Trackers | Automated scanning for spyware in mobile applications |
| FairSync | Simplify aggregation and discovery of places and events |
| searx | Federating self-hosted search hubs |
| FemtoStar Project | Open Hardware Communications Satellite |
| Fobnail | Remote attestation delivered locally |
| Folksonomy engine for the food ecosystem | Data modelling by the community |
| ForgeFed | Federation for software collaboration tools |
| Fractal | Native client for the Matrix protocol |
| Fix the Pitch Black Attack in Freenet friend-to-friend routing | A decentralized distributed platform for private communication |
| Funkwhale | ActivityPub-driven audio streaming and sharing |
| Libre/OpenCores FuseSoc backend | Discovery and use of open hardware gateware through LibreCores and OpenCores |
| GNU Name System | Authenticated naming system for the internet from GNU project |
| GNU Mes | Help create an operating system we can trust |
| GNU Mes on ARM | Trustworthy bootstrap for operating systems on ARM ISA |
| GNU Mes: Full Source bootstrap | |
| GNU social | Modernizing the original FOSS Social Network |
| GNU Taler | Advanced electronic payment system for privacy-preserving payments |
| Layer-2-Overlay | Generalising the GNUnet Layer-2 Overlay for broader usage |
| GNUnet Messenger API | API for decentralized instant messaging using CADET |
| GPG Lacre project | Best effort encryption of mail flows with OpenPGP |
| GNU Guix | Discovery of service configurations in a declarative setup |
| Tooling to improve security and trust in GNU Guix | Contextual software vulnerability discovery |
| Genodepkgs | When Genode and Nixpkgs meet |
| Geolexica reverse | Reverse Semantic Search and Ontology Discovery via Machine Learning |
| GoatCounter | Privacy-friendly web analytics for small websites |
| The Open Green Web | Ethical meta-search filter on green hosted websites |
| Hubzilla | Federated social networking environment |
| Implement sound support in the Hurd | Add audio capabilities to the multiserver microkernel from GNU |
| A proof of concept of identity-based encryption | Make encryption simpler |
| IMSI Pseudonymization | Better privacy protection for 2G-5G |
| ipfs-search.com | Search engine for the Interplanetary File System |
| IRMA made easy | Usability research into attribute based authentication |
| IN COMMON | Public platform to map and act together for the Commons |
| In-document search | Interoperable Rich Text Changes for Search |
| Practical Tools to Build the Context Web | Declarative setup of P2P collaboration |
| Indigenous | Indieweb mobile clients |
| YunoHost and the Internet Cube | Solutions for DIY-ISP's and self-hosters |
| Interpeer | Collaboration infrastructure with near real-time p2p data synchronization |
| Inventaire | Wikidata-based social sharing of reading experiences |
| Irdest | Llocal P2P mesh discovery of devices and users |
| JavaScript Restrictor | Increasing Security and Privacy of JavaScript APIs |
| JavaScript Shield | Cross-browser extension to make javascript less exploitable |
| End-To-End Encryption for Jitsi Meet | Proven strong encryption for open source video conferencing |
| Verified Differential Privacy for Julia | Proving sound privacy guarantees through a type system |
| Standardizing KEMTLS | Post-quantum TLS without handshake signatures |
| Kaidan | Adding crypto to userfriendly Cross-platform XMPP client |
| Kazarma | Bridge ActivityPub and Matrix realms |
| Keyoxide | Self-hostable identity proofs with bidirectional linking verification |
| Adopt improvements in Email Encryption in KMail | |
| ARPA2 LDAP Middleware | Privacy enhancing middleware |
| Collabora Online and LibreOffice | Improved visual document search for cloud service |
| Langsec in Pectore | A secure pacemaker created from formal grammars |
| Lemmy | ActivityPub for link aggregation |
| Lemmy | Lemmy Federation and ActivityPub compliance |
| Liberaforms | Open source form server |
| XMPP-ActivityPub gateway | XMPP, ActivityPub and E2EE Pubsub |
| Libre-SOC | A fully open hardware System-on-a-Chip |
| LibreOffice P2P | Encrypted collaborative editing in the browser |
| The Libre-SOC Gigabit Router | Native Open Hardware chip implementation of crypto primitives |
| LibreSilicon | Free/open source semiconductor manufacturing process |
| Libre Silicon compiler | Synthesize, place and route hardware description to silicon |
| Standard Cell Library | Open Standard Cell Library with automated dimensioning of transistors |
| Port of AMDVLK/RADV 3D Driver to the Libre-SOC | Adapt Vulkan Drivers to the Libre-SoC |
| Libre-SOC Formal Correctness Proofs | Mathematical unit tests for open hardware System-on-Chip |
| Libre-SOC Formal Standards Development | Formal Standards for OpenPower extensions from Libre-SoC |
| Libre-SOC Video Acceleration | Optimised video acceleration instructions for Libre RISC-V SoC |
| Librecast Live | Live streaming with multicast |
| Lightmeter | Email server configuration lifecycle management |
| Improve usability of Linux firewall userspace tools | Userspace tooling for Linux kernel Netfilter |
| LumoSQL | Create more reliable, distributed embedded databases |
| LumoSQL at-rest data security | Modern embedded database with encryption and signed data |
| Luna | A versatile and fast new open-source place and route tool |
| Distributed Trust for Web Servers | Establishing a Distributed Trust Authority |
| MNT Reform | A trustworthy open hardware laptop |
| MPTCP | MultiPath TCP |
| Maemo Leste | An independent mobile operating system focused on trustworthiness |
| Mailpile Search Integration | Personal email search engine |
| Mangaki | Advanced group recommendations |
| Manyverse | An off-line capable privacy-centric social messaging app |
| Improving Matrix E2E encryption UX | Better usability of Matrix.org E2E encryption |
| MEGA65 Phone | A phone simple enough to understand in full |
| MeiliSearch | Modern and responsive search |
| Practical Decentralised Search and Discovery | Search and discovery inside mesh/adhoc networks |
| Meta-Press.es | A press search engine in your browser |
| Meta-Press.es | Retrieve news feeds and search locally |
| Misskey | Misskey federation and ActivityPub compliance |
| MobileAtlas | A distributed open hardware test infrastructure to analyse mobile networks |
| MoboSearch | Providing an alternative view on the Android App ecosystem |
| Mosaic | Trustworthy open hardware design tool for electrical engineers |
| Movim | Add OMEMO encryption to Movim XMPP client |
| Mynij | Portable indexing and search engine for mobile |
| NEFUSI: A novel NEuroFUzzy approach for semantic SImilarity assessment | |
| Namecoin: TLS | Various TLS integrations for Namecoin |
| Namecoin: ZeroNet and Packaging | Make ZeroNet work with Namecoin |
| Namecoin: Core Infrastructure | Alternative domain name system |
| NeoChat | Native Matrix encrypted instant messaging client |
| neuropil | Privacy by design P2P search including IoT |
| Nextcloud | Unified and intelligent search within private cloud data |
| Nitrokey | Open hardware for encryption and authentication |
| NoScript Contextual Policies & LAN protection (ABE Quantum) | Application Boundaries Enforcer (ABE) for new generation of browsers |
| Adopting the Noise Key Exchange in Tox | Improved security of Tox instant messaging with NoiseIK |
| Nominatim | Multi-lingual support in address search |
| Nym Credentials | A decentralised solution for authentication |
| Nyxt | A programmable browser with advanced search integration |
| OSF Crawler Cooperation | Support Infrastructure for Open Search initiatives |
| Off-the-Record messaging version 4 | Advanced protocol for secure messaging |
| Offen | Privacy-respecting site analytics |
| OnBaSca | Tor Bandwidth Scanner |
| Opaque Sphinx | Secure password-based authentication with Opaque/Sphinx |
| Opaque Sphinx Server and Clients | Server and tools for modern authentication |
| OpenCryptoHW | CGRA- based reconfigurable open-source cryptographic IP cores |
| Open Source DRTM implementation with TrenchBoot for AMD processors | Unified framework for dynamic RTM |
| Personal Food Facts | Privacy protecting personalized information about food |
| Openki.net | Make local events and meetups discoverable |
| OpenPGP Certificate Authority | Managing OpenPGP keys for communities and organisation |
| Improving OpenSSH's Authentication and PKI through OpenPGP | Improving SSH Authentication with OpenPGP transitive trust |
| 802.11n feature of openwifi | Open Hardware implementation of wifi |
| Owncast | ActivityPub powered Livecasting |
| P2Pcollab | Decentralised social search and discovery |
| PGP4civiCRM | Add email encryption to CRM |
| Securing PLCs via embedded Open-Source protocol adapters | Open hardware protocol adapters for industrial automation |
| PRESC Classifier Copies Package | Implementing Machine Learning Copies as a Means for Black Box Model Evaluation and Remediation |
| The PeARS app | Building low-resource Web search applications from cognitive models |
| PeerDB | Search for semantic and full-text data |
| PeerTube | A decentralised streaming video platform |
| Peertube-Desktop | Enjoy and share federated videos |
| Extending PeerTube | Adding advanced search capabailities to PeerTube |
| A Distributed Software Stack For Co-operation | Facilitating easy ad hoc cooperation |
| PixelDroid | Share and browse photos in the fediverse with a mobile app |
| Pixelfed Live | Live streaming and other Pixelfed enhancements |
| Pixelfed | ActivityPub driven decentralised photo sharing platform |
| Plaudit | Make good science discoverable through endorsements |
| Poliscoops | Make political news and online debate accessible |
| Privacy Enhancements for PowerDNS and DNSdist | Make it easier to deploy private DoT/DoH resolvers |
| PrivateRecSys | Privacy-Friendly Recommendation System |
| Private Searx | Add private resources to the open source Searx metasearch engine |
| Qubes OS | Bring the security of Qubes OS to people with disabilities |
| GNUnet | Formalisation within IETF of R5N Distributed Hash Table design |
| RISC-V Phone | Open hardware RISC-V Phone |
| RNP Confium | Distributed trust store enabling threshold encryption |
| Re-isearch | Vectorise text with a flexible unit of retrieval |
| Redwax | Standardisation of client side PKI interfaces |
| Reowolf | Rip and replace for BSD socket insecurity |
| Graphics acceleration on Replicant | Free software graphics drivers for mobile phones |
| Finish porting Replicant to a newer Android version | Alternative, free software version of Android |
| Ricochet Refresh | Anonymous, meta-data free secure messaging |
| Ripple | Safer and faster incremental software builds |
| Robotnix | Reproducible Builds of Android with NIX |
| Robur privacy-enhanced DNS resolver and DHCP server | Secure network configuration and DNS resolution |
| Rust Threadpool | Improve privacy of Rust threading library |
| Great OCR for SANE | Integrate OCR capabilities into open source scanning tools |
| SASL XMSS | Make SASL work with XMSS protocol |
| SASL Works for the InternetWide Architecture | Integrate new authentication mechanisms into SASL |
| SCION-RAINS | RAINS, Another Internet Naming Service (or, a DNS alternative) |
| SCION-Pathdiscovery | Secure and reliable decentralized storage platform |
| Geographic tagging and discovery of Internet Routing and Forwarding | |
| SOLID Data Workers | Toolkit to ingest data into SOLID |
| SpinalHDL, VexRiscv, SaxonSoc | Open Hardware System-on-Chip design framework based on SpinalHDL |
| SEARXR | Virtual reality for web search |
| searx | A privacy-respecting, hackable metasearch engine |
| SeedVault | Private backups of mobile applications |
| Adding TPM Support to Sequoia PGP | Implement use of TPM 2.0 crypto hardware for OpenPGP |
| Simmel | A wearable contact tracing beacon/scanner |
| Software Heritage | Collect, preserve and share the source code of all software ever written |
| Peer-to-Peer Access to Our Software Heritage | Access Software Heritage data via IPFS DHT |
| Solid Application Interoperability | |
| Solid-NextCloud app | Bridge Nextcloud to Solid |
| Solid-Search | Queries in a pod |
| Solid Control | Access Control mechanism for data and services within Solid |
| Sonar: a modular peer-to-peer search engine for the next-generation web | Modular peer-to-peer search engine |
| Spectrum | A security through compartmentalization based operating system |
| Secure User Interfaces (Spritely) | Usability of decentralised social media |
| ARPA2 Steamworks | ARPA2 Steamworks |
| StreetComplete | Fix open geodata with OpenStreetMap |
| StreetComplete | Collaborative editing in OpenStreetMap |
| Suhosin-NG | Harness PHP 7 applications |
| Sylk chat | Add instant messaging features to Sylk |
| Sylk Client | Secure multiparty videoconferencing application |
| Sylk Mobile | Secure real-time mobile communications |
| Timing-Driven Place-and-Route (TDPR) | Open hardware tool to synthesize digital silicon circuits |
| RETETRA | Security Analysis of Proprietary Cryptography in Terrestrial Trunked Radio |
| TLS-KDH mbed | Implement TLS-KDH into mbed |
| Tantum Search | Context-enhanced search driven by schema.org |
| Padding Machines for Tor | Protect metadata in the Tor onion routing network |
| Transparency Toolkit | A decentralized hosted archiving service with search |
| TrustING | Ultrafast AS-level Public-Key Infrastructure |
| Build Transparency (Trustix) | Towards a decentralized supply chain for software |
| Trustix | Make build logs available as publicly verifiable, tamper-proof Merkle trees |
| Tvix | Alternative Rust-based software build transparency |
| ULX3M | A modular open hardware FPGA platform |
| URL Frontier | Develop a API between web crawler and frontier |
| Universal DID Resolver and Registrar | Tooling for decentralized identifiers |
| ValOS Cryptographic Content Security project | Cryptographic Content Security for ValOS |
| variation graph (vgteam) | Privacy enhanced search within e.g. genome data sets |
| Noise Explorer-VerifPal | Automated proofs and code generation for secure protocols |
| Verifpal | Prove soundness of verification in Verifpal |
| VFRAME: Visual Defense Tools | Use computer-vision to shield privacy in video |
| video box | Affordable open hardware video-to-network |
| Video chat privacy | Add privacy features to video chats |
| Waasabi Framework | P2P Live Streaming for events |
| Web Annotation | Building blocks for interoperable annotation systems |
| WebXray Discovery | Expose tracking mechanism in search hubs |
| Web Shell | Desktop and security environment for web apps |
| XWiki | Bring wiki capabilities into the Fediverse |
| WikiRate Insights | Transforming WikiRate ESG Platform User Experience to Maximise Reliable Data Insights |
| Wireguard Windows client | Native Wireguard protocol client for Windows |
| Wireguard Rust Implementation | Implementation of WireGuard in a type safe language |
| Wishbone Streaming | Add Streaming capabilities to Wishbone |
| WordPress ActivityPub | Bring ActivityPub social networking to the widely used Wordpress |
| XWiki ActivityPub | First class ActivityPub support in XWiki |
| YaCy Grid SaaS | |
| Yrs | Collaborative editing with CRDT written in Rust |
| ZSipOs | Open hardware for telephony encryption |
| ARPA2 | Working towards a decentralised global internet that offers security and privacy by design. |
| GnuTLS | Implement TLS-KDH in GnuTLS |
| ARPA2 resource ACL and HTTP SASL modules for NGINX | Extend consistent access control to NGINX webserver |
| betrusted | A protected hardware device for your private matters. |
| Bitmask | User-friendly and secure VPN configuration |
| Conferences | sponsoring of various conferences |
| Reinstatement of crypto.signText() | Cryptographic signatures brought back to the browser |
| Democratic Sendcomm | An easy to use connected open hardware device with a flat learning curve |
| dhcpcanon | Network configuration with better privacy |
| DIME | A new encrypted, end-to-end email protocol |
| Donations | smaller contributions to various activities |
| ipfs-search.com | Index DHT based distributed webs |
| eduVPN app | Add Wireguard protocol to federated VPN suite |
| eduVPN on Apple | eduVPN for Apple devices |
| eduVPN on Apple part II | Improved version of eduVPN for Apple devices |
| eduVPN multi-protocol | Review of the eduVPN multi-protocol project. |
| eduVPN | Making secure VPN network technology available to everyone |
| elRepo.io - Resilient, human-centered, distributed content sharing and discovery. | Resilient, human-centered, distributed content sharing and discovery. |
| Explain Direct | Providing effective and efficient access paradigms for open educational material |
| Fashion Freedom | Supporting research, development, and education to bring the fashion industry into the 21st century |
| fediverse.space | Find your way in the Fediverse |
| FileSender | FileSender is a secure and private way to share large files with anyone. |
| fwupd | Automatic Firmware updates for BSD operating systems |
| GetDNS | Deliver DNSSEC as a building block in harsh environments |
| Global Directories | Distributed contact information discovery mechanism |
| Pretty Easy Privacy | At scale simulation over GNUnet with different realistic user behavior scenarios |
| GUN P2P Encryption | A realtime, decentralized, offline-first, graph database engine |
| Hackathons | contributions to various hackathons |
| Internet of Coins | Create a decentralized, self-sustaining economy by implementing inter-blockchain connectivity |
| Handling Data from IPv6 Scanning | Scanning tools for scaling up IPv6 scans |
| iuh-openbsc | An open source implementation of 3G |
| Katzenpost | Observation resistant secure messaging layer |
| Key Management | Key Management |
| DNSSEC Key Signing Suite | A best practise for DNSSEC Key Signing |
| libresilient | Create robust web presence with service workers and DHT |
| libspng | A fast and safe implementation of Portable Network Graphics |
| lpnTPM | TPM 2.0 compliant open hardware Trusted Platform Module |
| Securing Shared Decentralised Live Information with m-ld | Collaborative editing of LInked Data based on CRDT |
| Minedive | P2P search over webRTC |
| mobile-nixos | NixOS for mobile phones and tablets |
| Namecoin | Decentralized, censorship resist Internet infrastructure for e.g. DNS and identities |
| Faster and configurable datapath/Linux xfrm | Rewriting nftables to optimise for xfrm |
| Nixcloud Mail | Declarative mail server based on NixOS |
| Nixcloud Webservices | Declarative web services based on NixOS |
| Software vulnerability discovery | Automating discovery of software update and vulnerabilities |
| node-Tor | Implementation of Tor protocols for inside webpages |
| offen | Ethical site analytics, controlled by the user |
| openEngiadina | Platform for creating, publishing and using open local knowledge |
| oqsprovider | Post-quantum/quantum-safe cryptographic algorithms for OpenSSL |
| pcb-rnd | Modular printed circuit board editor |
| Pitchfork | Open hardware for compartmentalizing key material and cryptographic operations |
| Pitchfork PKCS#11 | Contribute to OASIS standardisation PKCS#11 v3 |
| PKCS#11 v3 | Contribute to standardisation of PKCS#11 for cryptographic tokens |
| postmarketOS | An independent mobile operating system |
| Privacy Preserving Disease Tracking | Research into contact tracing privacy |
| RaptorJIT | RaptorJIT is a high-performance Lua virtual machine for network dataplanes. |
| Modular CA | Modular infrastructure for building secure internet services |
| Remote PKCS#11 | Remote usage of PKCS#11 |
| SDR PHY | Create a GSM mobile phone consisting of completely open source software and SDR radio |
| x86-64-bit Virtual Machine Monitor for seL4 verified microkernel | Very restricted virtualized environment for higher security |
| Search and Displace | Find and redact privacy sensitive information |
| SecuShare | A framework for sufficiently safe social interaction |
| Secushare Box | Operating system extension of Secushare for hardware devices |
| Serval-LR | SERVAL Long-range WiFi Add-on |
| Magic Wormhole/SPAKE2 | Securely send files between two computers with minimum fuss |
| Stubby | A local DNS Privacy stub resolver using DNS-over-TLS |
| TLS-KDH | Combined Kerberos and Diffie-Hellman as an authentication mechanism for TLS |
| TOS;DR | A user rights initiative to rate and label website terms & privacy policies |
| Tracking Exposed | Increase transparency behind personalization algorithms |
| Trusted Boot Module | An open hardware trusted boot manager |
| Virtualizing device firmware | Creating digital twins for auditing and testing appliances |
| Vita | A fast IPSEC-based VPN gateway |
| Vita | A high performance IPSEC implementation |
| Free Software Vulnerability Database | A resource to aggregate software updates |
| Nixcloud | Declarative internet services based on NixOS |
| WireGuard | A fast and modern VPN that utilizes state-of-the-art cryptography |
| Wireguard | Take modern network tunnels to the next level |
| WPIA CA Infrastructure | Deployment infrastructure for certificate authorities |
| xqerl | Performant (Erlang) implementation of W3C XQuery and XML database |
|
NLnet Foundation currently supports the following projects with in-kind contributions: |
|
| The Commons Conservancy | Legal infrastructure for public benefit efforts |
| NLnet Labs | Independent lab for Internet infrastructure development |
