Current projects
Listed on this page are programs and projects which are - at this moment - working with NLnet funding.
| project | description |
|---|---|
| 0KNOW | Group Theoretic Zero-knowledge Proofs (0KNOW) |
| LibreCellular | Open hardware 4G Mobile Network |
| AI-VPN | Local machine-based learned analysis of VPN trafffic |
| Analog/Mixed-Signal Library | OSHW component library for ASIC design |
| Accessible security | Integration effort of independent security efforts like Qubes, Heads, coreboot, etc |
| Alder Lake Desktop | Open firmware for widely used Desktop/Workstation motherboard |
| OCCRP Aleph disambiguation | OCCRP Aleph: disambiguating different people and companies |
| AREXERA Crawler | C++ based web crawler |
| Armbian | Versatile OS for ARM-based single board computers |
| Atomic Data | Typesafe handling of LinkedData |
| Authenticated DNSSEC bootstrapping | Secure in-band announcements of DNSSEC parameters |
| Heads-OpenPGP | OpenPGP Authenticated Heads and long-time awaited security improvements |
| Autocrypt for Thunderbird | Make email encryption extremely simple |
| binary-analysis-ng improvements | Integrate Kaitai in binary-analysis-ng |
| BBBsecureChat | Add E2EE instant messaging to Big Blue Button meetings |
| Babelia | Search engine and crawler in Scheme |
| Balthazar | One laptop for the new internet age. |
| Balthazar - One laptop for the new internet age. | A secure fully open hardware laptop |
| Bertie | Formally verified TLS 1.3 implementation |
| Betrusted OS | An embedded OS for cryptographic devices |
| Betrusted software | A minimalist and secure OS for embedded communication devices |
| Betrusted Storage | Plausably deniable encrypted storage |
| Blink Qt Messaging | Add modern encryption to SIP softphone |
| Blink RELOAD | Secure P2P real-time communications with RELOAD |
| Bonfire Search & Discovery | Improving search and discoverability in the Fediverse |
| Briar | A secure messaging app with offline capabilities |
| Briar Desktop | E2EE online and offline messaging and discussion |
| Canarytail | Warrant canary standardization and automation |
| Castopod | Podcasting in the fediverse |
| Castopod Mobile | Userfriendly mobile podcasting application |
| Libre-SOC Cavatools: Power ISA Simulator | Power ISA Simulator |
| CeroWRT II | Make Wi-Fi routers faster and more reliable |
| Certbot ECDSA support | |
| LibrEDA | An integrated development environment for chip design |
| Zerocat Chipflasher Flashrom Interface | Hardware to flash alternative/libre firmware to BIOS chips |
| Chips4Makers ASICs | |
| Discover and move your coins by yourself | A safe way to explore and work with cryptocurrency forks |
| Coko Docs | A modern, open source replacement for Google Docs and Drive |
| Connect by Name | Library for easy connection setup |
| Conversations | A secure mobile messaging client |
| Conzept encyclopedia | An alternative encyclopedia |
| Libre-SOC, Coriolis2 ASIC Layout Collaboration | Open tooling for ASIC Layout |
| Record Federation for Corteza Clouds | Data federation over ActivityPub |
| Corteza Discovery | (Geo)search and discovery within federated services |
| Privacy Infrastructure for Corteza Federations | Allow users to locate and browse their private data wherever |
| ArtistHub | Allow creative artists to gain visibility and build reputation on the web |
| CryptPad Auth | Implement external identity mechanisms to E2EE collaborative editor |
| CryptPad: Project Dialogue | Secure surveys and polls for Cryptpad |
| CryptoLyzer | Cryptographic settings analyzer library |
| CryptPad | Real-time collaboration with client-side encryption |
| CryptPad for communities | Collaborative web editor with client-side encryption |
| GNU Guix - Cuirass | Continuous integration system for GNU Guix/Linux + Hurd |
| DCnets | Implementation of Dining Cryptographers Network |
| Securing Internet protocols with DIDs | Bridge Decentralized Identifiers with standardised authorisation mechanisms |
| Dat Private Network | Private storage in DAT |
| DATALISP | Universal data interchange format using canonical S-expressions |
| Structuring the System Layer with Dataspaces | Implementing a secure and scalable system layer on mobile |
| DeltaBot | Social discovery over mail-based chat |
| Dino | User-friendly and secure instant messaging |
| Distributed Private Trust | Decentralised trust and reputation system |
| dream2nix | Automate reproducible packaging for various language ecosystems |
| How AdTech works | Improving public awareness of AdTech and privacy |
| EEZ DIB | EEZ DIY Instrument Bus |
| EGIL SCIM client | System for Cross-domain Identity Management |
| ELF Linking | Analytic tools for UNIX' Executable and Linkable Format |
| Encoding for Robust Immutable Storage (ERIS) | Encrypted and content-addressable data blocks |
| Earthstar | P2P protocol and APIs for collaborative and social applications |
| Edalize ASIC backend | Create open hardware silicon with a fully free software toolchain |
| EDeA | A forge suitable for open hardware development |
| AEAP | Automated e-mail address porting to a new provider |
| Email for expert news | Keep up to date with a flow of publication |
| Etebase - protocol and encryption enhancements | Redesign EteSync protocol and encryption scheme |
| EteSync - iOS application | Encrypted synchronisation for calendars, addressbook, etc |
| The search for ethical Apps | |
| Tracking the Trackers | Automated scanning for spyware in mobile applications |
| FOSS Code Supply Chain Assurance | Mitigate attacks through software dependencies |
| FairSync | Simplify aggregation and discovery of places and events |
| searx | Federating self-hosted search hubs |
| Federated Timesheets | Interoperable machine-readable time tracking |
| FemtoStar Project | Open Hardware Communications Satellite |
| First Classify Documents | Categorise different types of official documents |
| Fobnail | Remote attestation delivered locally |
| Folksonomy engine for the food ecosystem | Data modelling by the community |
| ForgeFed | Federation for software collaboration tools |
| Fractal | Native client for the Matrix protocol |
| Fix the Pitch Black Attack in Freenet routing | A decentralized distributed platform for private communication |
| Funkwhale | ActivityPub-driven audio streaming and sharing |
| GNU Name System | Authenticated naming system for the internet from GNU project |
| GNU Mes | Help create an operating system we can trust |
| Full-source GNU Mes on ARM and RISC-V | Expand full-source bootstrap to other CPU platforms |
| GNU Mes RISC-V | Bringing the trustworthy bootstrap to RISC-V |
| GNU Mes on ARM | Trustworthy bootstrap for operating systems on ARM ISA |
| GNU Mes: Full Source bootstrap | |
| GNU Mes Tower | GNU Mes with alternative scheme implementations and WASM |
| GNU social | Modernizing the original FOSS Social Network |
| GNU Taler | Advanced electronic payment system for privacy-preserving payments |
| Layer-2-Overlay | Generalising the GNUnet Layer-2 Overlay for broader usage |
| GNUnet Messenger API | API for decentralized instant messaging using CADET |
| GPG Lacre project | Best effort encryption of mail flows with OpenPGP |
| GNU Guix | Discovery of service configurations in a declarative setup |
| Tooling to improve security and trust in GNU Guix | Contextual software vulnerability discovery |
| Gash | Port Gash to GNU Mes for auditable bootstrap |
| Geolexica reverse | Reverse Semantic Search and Ontology Discovery via Machine Learning |
| Federated software forges with Gitea | Use W3C ActivityPub to federate amond software forges |
| GoatCounter | Privacy-friendly web analytics for small websites |
| Gosling | Generic Onions Services Library Project |
| Real time graph database search engine | Live filtering on graph database streams |
| The Open Green Web | Ethical meta-search filter on green hosted websites |
| Porting Guix to Riscv64 | Port Guix software collection to Riscv64 architecture |
| Haketilo/Hydrilla | Browser extension for site customisatoin |
| Great scanning and OCR for mobile devices | |
| Himalaya | End-to-end encryption capable scriptable email |
| Hubzilla | Federated social networking environment |
| Implement sound support in the Hurd | Add audio capabilities to the multiserver microkernel from GNU |
| Hyper Hyper Space | Cryptographically secure append-only distributed data layer |
| A proof of concept of identity-based encryption | Make encryption simpler |
| IMSI Pseudonymization | Better privacy protection for 2G-5G |
| IPDL | Equational Proofs for Distributed Cryptographic Protocols |
| ipfs-search.com | Search engine for the Interplanetary File System |
| Telecommunication in HF using the Internet Protocol (IPoHF) | High-throughput software-defined wireless telecommunications |
| IRMA made easy | Usability research into attribute based authentication |
| Icebreaker | Gemini centric viewpoint of coding issues and bug tracking |
| IN COMMON | Public platform to map and act together for the Commons |
| In-document search | Interoperable Rich Text Changes for Search |
| Practical Tools to Build the Context Web | Declarative setup of P2P collaboration |
| Indigenous | Indieweb mobile clients |
| YunoHost and the Internet Cube | Solutions for DIY-ISP's and self-hosters |
| Interpeer | Collaboration infrastructure with near real-time p2p data synchronization |
| Inventaire | Wikidata-based social sharing of reading experiences |
| Inventaire recommender | Book recommendations in Inventaire |
| Irdest | Llocal P2P mesh discovery of devices and users |
| JavaScript Restrictor | Increasing Security and Privacy of JavaScript APIs |
| JShelter | Cross-browser extension to make javascript less exploitable |
| End-To-End Encryption for Jitsi Meet | Proven strong encryption for open source video conferencing |
| Verified Differential Privacy for Julia | Proving sound privacy guarantees through a type system |
| Standardizing KEMTLS | Post-quantum TLS without handshake signatures |
| Kaidan | Adding encryption to userfriendly cross-platform XMPP client |
| Karrot | Save and share food waste |
| Katzen | Meta-data resistant instant messaging over the Katzenpost mixnet |
| Kazarma | Bridge ActivityPub and Matrix realms |
| Keyoxide | Self-hostable identity proofs with bidirectional linking verification |
| Private Key Operations for Keyoxide | Implement Private Key Store design in Keyoxide |
| Keyoxide v2 | Add cryptographic signature based to Keyoxide |
| KiCad | Professional open source electronics design application |
| Kintex-nextpnr | Open toolchain for high performance FPGAs |
| Adopt improvements in Email Encryption in KMail | |
| ARPA2 LDAP Middleware | Privacy enhancing middleware |
| Collabora Online and LibreOffice | Improved visual document search for cloud service |
| lemmur | A Lemmy mobile client |
| Lemmy | ActivityPub for link aggregation |
| Lemmy | Lemmy Federation and ActivityPub compliance |
| LiberaForms | End tot End Encrypted Forms |
| Liberaforms | Open source form server |
| XMPP-ActivityPub gateway | XMPP, ActivityPub and E2EE Pubsub |
| Libre-SOC | A fully open hardware System-on-a-Chip |
| Librecast | E2E encrypted multicast |
| LibreOffice P2P | Encrypted collaborative editing in the browser |
| The Libre-SOC Gigabit Router | Native Open Hardware chip implementation of crypto primitives |
| LibreSilicon | Free/open source semiconductor manufacturing process |
| Libre Silicon compiler | Synthesize, place and route hardware description to silicon |
| Standard Cell Library | Open Standard Cell Library with automated dimensioning of transistors |
| Port of AMDVLK/RADV 3D Driver to the Libre-SOC | Adapt Vulkan Drivers to the Libre-SoC |
| Libre-SOC Formal Correctness Proofs | Mathematical unit tests for open hardware System-on-Chip |
| Libre-SOC Formal Standards Development | Formal Standards for OpenPower extensions from Libre-SoC |
| Libre-SOC Video Acceleration | Optimised video acceleration instructions for Libre RISC-V SoC |
| Librecast Live | Live streaming with multicast |
| Lightmeter | Email server configuration lifecycle management |
| LinkedDataHub | Framework to handle Linked Data at scale |
| Usability of Linux firewall userspace tools | Userspace tooling for Linux kernel Netfilter |
| Local Production of Antennas for LibreRouter (LoPaLiR) | Reliable open hardware Antennas for LibreRouter |
| LumoSQL | Create more reliable, distributed embedded databases |
| LumoSQL at-rest data security | Modern embedded database with encryption and signed data |
| Luna | A versatile and fast new open-source place and route tool |
| MNT Reform | A trustworthy open hardware laptop |
| MaDada | Using LinkedData to improve FOI processes |
| Maemo Leste | An independent mobile operating system focused on trustworthiness |
| Mailpile Search Integration | Personal email search engine |
| Mangaki | Advanced group recommendations |
| Manyverse | An off-line capable privacy-centric social messaging app |
| Manyverse Private Groups | Implement SSB Private Groups in Manyverse |
| Mastodon - groups, filtering, moderation | Group support with ActivityPub |
| Improving Matrix E2E encryption UX | Better usability of Matrix.org E2E encryption |
| MEGA65 Phone | A phone simple enough to understand in full |
| Mepo | Lightweight mobile map search |
| Practical Decentralised Search and Discovery | Search and discovery inside mesh/adhoc networks |
| Meta-Press.es | A press search engine in your browser |
| Meta-Press.es | Retrieve news feeds and search locally |
| Misskey | Misskey federation and ActivityPub compliance |
| MobileAtlas | A distributed open hardware test infrastructure to analyse mobile networks |
| Mobile Test Farm | Test farm setup for aftermarket mobile operating systems |
| Mobilizon | Find, create and organize events |
| MoboSearch | Providing an alternative view on the Android App ecosystem |
| Monal IM | Free Jabber/XMPP client for iOS and macOS |
| Mosaic | Trustworthy open hardware design tool for electrical engineers |
| Movim | Add OMEMO encryption to Movim XMPP client |
| Mynij | Portable indexing and search engine for mobile |
| NEFUSI | NEFUSI: A novel NEuroFUzzy approach for semantic SImilarity assessment |
| Naisho | Efficiently combine end-to-end encryption with CRDTs |
| Namecoin: TLS | Various TLS integrations for Namecoin |
| Namecoin: ZeroNet and Packaging | Make ZeroNet work with Namecoin |
| Namecoin: Core Infrastructure | Alternative domain name system |
| NeoChat | Native Matrix encrypted instant messaging client |
| Packet classification extensions for Netfilter | High throughput packet classification of tunneled traffic |
| neuropil | Privacy by design P2P search including IoT |
| neuropil | DHT based overlay network |
| Nextcloud | Unified and intelligent search within private cloud data |
| Nitrokey | Open hardware for encryption and authentication |
| Securing NixOS services with systemd | |
| UEFI Secure Boot support for NixOS | Add a self-sovereign root of trust as part of supply chain security |
| NoScript Contextual Policies & LAN protection | Application Boundaries Enforcer (ABE) for new generation of browsers |
| Adopting the Noise Key Exchange in Tox | Improved security of Tox instant messaging with NoiseIK |
| Nominatim | Multi-lingual support in address search |
| Nym Credentials | A decentralised solution for authentication |
| Nyxt | A programmable browser with advanced search integration |
| Nyxt | Browser integration of federated, distributed platforms |
| Open Know-How Search | Search Open Hardware Projects |
| OSF Crawler Cooperation | Support Infrastructure for Open Search initiatives |
| OpenStreetMap Speed Limits | Infer default speed limits for better quality OpenStreetMap-based routing |
| Off-the-Record messaging version 4 | Advanced protocol for secure messaging |
| Offen | Privacy-respecting site analytics |
| Oil Shell | A new dialect of shell that is less error-prone |
| Improve Okular digital signature support | Improve open source tooling for digital signatures |
| Omnom | Self-hosted bookmarking and snapshotting with search |
| OnBaSca | Tor Bandwidth Scanner |
| Opaque Sphinx | Secure password-based authentication with Opaque/Sphinx |
| Opaque Sphinx Server and Clients | Server and tools for modern authentication |
| OpenCryptoHW | CGRA- based reconfigurable open-source cryptographic IP cores |
| OpenCryptoLinux | Make Linux run on OpenCryptoHW |
| DRTM implementation for AMD processors | Unified framework for dynamic RTM |
| Personal Food Facts | Privacy protecting personalized information about food |
| Open Hospitality Network | Federated hospitality with ActivityPub |
| Openki.net | Make local events and meetups discoverable |
| Open MLS Infrastructure | End-to-end encrypted group messaging |
| OpenPGP Certificate Authority | Managing OpenPGP keys for communities and organisation |
| Improving OpenSSH's Authentication and PKI | Improving SSH Authentication with OpenPGP transitive trust |
| Interoperable Certificate Store for OpenPGP | Standardisation effort for shared OpenPGP certificate storage |
| Hardening OpenPGP CA deployments | HSM support for OpenPGP key infrastructure |
| OpenQRNG | Open source, certified Quantum Random Number Generator |
| 802.11n feature of openwifi | Open Hardware implementation of wifi |
| LTE support in OsmoCBC (Cell Broadcast Centre) | Open source Cell Broadcast Centre for mobile networks |
| GPRS/EGPRS support in Osmocom CNI for Ericsson RBS | |
| Open source ePDG for VoWiFi | Enhanced Packet Data Gateway for mobile infrastructure |
| Owncast | ActivityPub powered Livecasting |
| P2Pcollab | Decentralised social search and discovery |
| PGP4civiCRM | Add email encryption to CRM |
| Adding Web-of-Trust Support to PGPainless | Web-of-Trust specification support for Java |
| Securing PLCs via embedded protocol adapters | Open hardware protocol adapters for industrial automation |
| Post-Quantum Crypto in DNSSEC | Experimental platform for DNSSEC with post-quantum cryptography |
| PRESC Classifier Copies Package | Implementing Machine Learning Copies as a Means for Black Box Model Evaluation and Remediation |
| Statime | Memory-safe high-precision clock synchronization |
| The PeARS app | Building low-resource Web search applications from cognitive models |
| PeerDB Search | Search for semantic and full-text data |
| PeerTube | A decentralised streaming video platform |
| Extending PeerTube | Adding advanced search capabailities to PeerTube |
| peermaps | Peer to peer cartography |
| Peppol for the masses | Hybrid self-hosted e-invoicing with decentralized identities |
| A Distributed Software Stack For Co-operation | Facilitating easy ad hoc cooperation |
| Pion | Network congestion measurement for adaptive real-time applications |
| PixelDroid | Share and browse photos in the fediverse with a mobile app |
| Pixelfed Live | Live streaming and other Pixelfed enhancements |
| Pixelfed | ActivityPub driven decentralised photo sharing platform |
| Plaudit | Make good science discoverable through endorsements |
| Poliscoops | Make political news and online debate accessible |
| Privacy Enhancements for PowerDNS and DNSdist | Make it easier to deploy private DoT/DoH resolvers |
| PrivateRecSys | Privacy-Friendly Recommendation System |
| Private Searx | Add private resources to the open source Searx metasearch engine |
| Probabilistic NAT Traversal | Last resort ad hoc connections for GNUnet |
| Prosody IM | Implement SASL authentication mechanism for XMPP |
| ProveThis | Prove statements about authenticated API resources |
| PyCM | Evaluate the performance of ML algorithms |
| Qubes OS | Bring the security of Qubes OS to people with disabilities |
| GNUnet | Formalisation within IETF of R5N Distributed Hash Table design |
| rasn | Safe ASN.1 codec framework for Rust |
| RISC-V Phone | Open hardware RISC-V Phone |
| RNP Confium | Distributed trust store enabling threshold encryption |
| RADIUSdesk | Open wifi mesh deployment application |
| Re-isearch | Vectorise text with a flexible unit of retrieval |
| Redwax | Standardisation of client side PKI interfaces |
| Reowolf | Rip and replace for BSD socket insecurity |
| Graphics acceleration on Replicant | Free software graphics drivers for mobile phones |
| Finish porting Replicant to newer Android version | Alternative, free software version of Android |
| Ricochet Refresh | Anonymous, meta-data free secure messaging |
| Ripple | Safer and faster incremental software builds |
| Robotnix | Reproducible Builds of Android with NIX |
| Rust Threadpool | Improve privacy of Rust threading library |
| Great OCR for SANE | Integrate OCR capabilities into open source scanning tools |
| SASL XMSS | Make SASL work with XMSS protocol |
| SASL Works for the InternetWide Architecture | Integrate new authentication mechanisms into SASL |
| SCION-RAINS | RAINS, Another Internet Naming Service (or, a DNS alternative) |
| SCION-Pathdiscovery | Secure and reliable decentralized storage platform |
| Geographic tagging of Routing and Forwarding | Geographic tagging and discovery of Internet Routing and Forwarding |
| SES - Symply Edit Spaces | Symply Edit Spaces - collaborative presentations |
| SWH package manager Data Ingestion | Add Package managers to Software Heritage |
| Storing Efficiently Our Software Heritage | Faster retrieval within Software Heritage |
| SpinalHDL, VexRiscv, SaxonSoc | Open Hardware System-on-Chip design framework based on SpinalHDL |
| Adera | Relevant scientific research results |
| SEARXR | Virtual reality for web search |
| searx | A privacy-respecting, hackable metasearch engine |
| SeedVault | Private backups of mobile applications |
| Dynamic indexing for real time graph database | Provide faster query results through algorithmic preprocessing |
| A Secret Key Store for Sequoia PGP | Standards-compliant private key store for OpenPGP |
| Adding TPM Support to Sequoia PGP | Implement use of TPM 2.0 crypto hardware for OpenPGP |
| Sequoia PGP | Improve interface of Sequoia PGP commandline |
| Sequoia GPG Chameleon | Implement well-known API's for using OpenPGP |
| Simmel | A wearable contact tracing beacon/scanner |
| Software Heritage | Collect, preserve and share the source code of all software ever written |
| Peer-to-Peer Access to Our Software Heritage | Access Software Heritage data via IPFS DHT |
| Solid Application Interoperability | |
| Solid-NextCloud app | Bridge Nextcloud to Solid |
| Solid-Search | Queries in a pod |
| Solid Control | Access Control mechanism for data and services within Solid |
| Solid Application Interoperability | |
| Solid Wallet | Authorization reasoning, rule-based controls and fluid integration for Solid |
| Sonar: a modular peer-to-peer search engine | Modular peer-to-peer search engine |
| sourcehut | Graph query support for software development platform |
| Dual-level Specification Inference | Make formal verification more practical with dual-level Specification Inference |
| Spectrum | A security through compartmentalization based operating system |
| Secure User Interfaces (Spritely) | Usability of decentralised social media |
| Spritely | Capability based petname system |
| Statime PTP Master | Statime - Zero-allocation cross-platform Precision Time Protocol |
| ARPA2 Steamworks | ARPA2 Steamworks |
| StreetComplete | Fix open geodata with OpenStreetMap |
| StreetComplete | Collaborative editing in OpenStreetMap |
| StreetComplete UX | Improve usability of StreetComplete |
| Suhosin-NG | Harden PHP 7 and PHP 8 applications |
| Sylk chat | Add instant messaging features to Sylk |
| Sylk Client | Secure multiparty videoconferencing application |
| Sylk Mobile | Secure real-time mobile communications |
| Timing-Driven Place-and-Route (TDPR) | Open hardware tool to synthesize digital silicon circuits |
| RETETRA | Security Analysis of Proprietary Cryptography in Terrestrial Trunked Radio |
| TLS-KDH mbed | Implement TLS-KDH into mbed |
| Great Black Swamp | Decentralized cloud storage with provider-independent security |
| Tantum Search | Context-enhanced search driven by schema.org |
| Tauri Apps | A safer run-time for web technology based apps |
| TerosHDL | Assisting hardware developers to deliver safer designs |
| Padding Machines for Tor | Protect metadata in the Tor onion routing network |
| TrustING | Ultrafast AS-level Public-Key Infrastructure |
| Build Transparency (Trustix) | Towards a decentralized supply chain for software |
| Trustix | Make build logs available as publicly verifiable, tamper-proof Merkle trees |
| Tvix | Alternative Rust-based software build transparency |
| TypeCell | CRDT-based collaborative block-based editor |
| ULX3M | A modular open hardware FPGA platform |
| URL Frontier 2.0 | Enterprise features for URLFrontier |
| URL Frontier | Develop a API between web crawler and frontier |
| Universal DID Resolver and Registrar | Tooling for decentralized identifiers |
| LIP6 VLSI Tools | Logical validation of ASIC layouts |
| ValOS Cryptographic Content Security project | Cryptographic Content Security for ValOS |
| variation graph (vgteam) | Privacy enhanced search within e.g. genome data sets |
| Noise Explorer-VerifPal | Automated proofs and code generation for secure protocols |
| Verifpal | Prove soundness of verification in Verifpal |
| Verified Reowolf | Formal protocol verification with Reowolf |
| VFRAME: Visual Defense Tools | Use computer-vision to shield privacy in video |
| video box | Affordable open hardware video-to-network |
| Video chat privacy | Add privacy features to video chats |
| Waasabi Framework | P2P Live Streaming for events |
| Independent captions and transcript augmentation | Speech-to-text integration for Waasabi |
| Web Annotation | Building blocks for interoperable annotation systems |
| WebXray Discovery | Expose tracking mechanism in search hubs |
| Web Zero, with m-ld | Multi-collaborator editable pages and data based on m-ld's CRDT |
| Web Shell | Desktop and security environment for web apps |
| XWiki | Bring wiki capabilities into the Fediverse |
| WikiRate Insights | Transforming WikiRate ESG Platform User Experience to Maximise Reliable Data Insights |
| WikiRate Insights 2 | Dedicated text search architecture for environmental, social and corporate governance platform |
| WireGuard | Scale up WireGuard |
| Wireguard Windows client | Native Wireguard protocol client for Windows |
| Wireguard Rust Implementation | Implementation of WireGuard in a type safe language |
| Wishbone Streaming | Add Streaming capabilities to Wishbone |
| Wispwot | Implement generalized scalable protection against disruptive behavior in content discovery |
| WordPress ActivityPub | Bring ActivityPub social networking to the widely used Wordpress |
| XWiki ActivityPub | First class ActivityPub support in XWiki |
| YaCy Grid SaaS | |
| Yrs | Collaborative editing with CRDT written in Rust |
| Yrs Undo | Rust-based CRDT framework for real-time multi-user applications |
| ZSipOs | Open hardware for telephony encryption |
| Quantum-Proof Zenroom | Implementation of Quantum-Proof Cryptography in Zenroom |
| ARPA2 | Working towards a decentralised global internet that offers security and privacy by design. |
| GnuTLS | Implement TLS-KDH in GnuTLS |
| ARPA2 resource ACL and HTTP SASL modules for NGINX | Extend consistent access control to NGINX webserver |
| betrusted | A protected hardware device for your private matters. |
| Bitmask | User-friendly and secure VPN configuration |
| Conferences | sponsoring of various conferences |
| Reinstatement of crypto.signText() | Cryptographic signatures brought back to the browser |
| Democratic Sendcomm | An easy to use connected open hardware device with a flat learning curve |
| DIME | A new encrypted, end-to-end email protocol |
| Distributed Mechanism Learning | Privacy preserving ways of distributed data usage |
| Donations | smaller contributions to various activities |
| ipfs-search.com | Index DHT based distributed webs |
| eduVPN app | Add Wireguard protocol to federated VPN suite |
| eduVPN on Apple | eduVPN for Apple devices |
| eduVPN on Apple part II | Improved version of eduVPN for Apple devices |
| eduVPN multi-protocol | Review of the eduVPN multi-protocol project. |
| eduVPN | Making secure VPN network technology available to everyone |
| elRepo.io - Resilient, distributed content sharing | Resilient, human-centered, distributed content sharing and discovery. |
| Explain Direct | Providing effective and efficient access paradigms for open educational material |
| Fashion Freedom | Supporting research, development, and education to bring the fashion industry into the 21st century |
| fediverse.space | Find your way in the Fediverse |
| FileSender | FileSender is a secure and private way to share large files with anyone. |
| fwupd | Automatic Firmware updates for BSD operating systems |
| GetDNS | Deliver DNSSEC as a building block in harsh environments |
| Global Directories | Distributed contact information discovery mechanism |
| Pretty Easy Privacy | At scale simulation over GNUnet with different realistic user behavior scenarios |
| GUN P2P Encryption | A realtime, decentralized, offline-first, graph database engine |
| Hackathons | contributions to various hackathons |
| imap-codec library | Release version 1.0 of the imap-codec library |
| Internet of Coins | Create a decentralized, self-sustaining economy by implementing inter-blockchain connectivity |
| Handling Data from IPv6 Scanning | Scanning tools for scaling up IPv6 scans |
| iuh-openbsc | An open source implementation of 3G |
| Katzenpost | Observation resistant secure messaging layer |
| Key Management | Key Management |
| DNSSEC Key Signing Suite | A best practise for DNSSEC Key Signing |
| lib25519: Secure and efficient computation of X25519 and Ed25519 | |
| libresilient | Create robust web presence with service workers and DHT |
| libspng | A fast and safe implementation of Portable Network Graphics |
| lpnTPM | TPM 2.0 compliant open hardware Trusted Platform Module |
| Securing Decentralised Live Information with m-ld | Collaborative editing of LInked Data based on CRDT |
| Minedive | P2P search over webRTC |
| mobile-nixos | NixOS for mobile phones and tablets |
| Namecoin | Decentralized, censorship resist Internet infrastructure for e.g. DNS and identities |
| Faster and configurable datapath/Linux xfrm | Rewriting nftables to optimise for xfrm |
| Nixcloud Mail | Declarative mail server based on NixOS |
| Nixcloud Webservices | Declarative web services based on NixOS |
| Software vulnerability discovery | Automating discovery of software update and vulnerabilities |
| node-Tor | Implementation of Tor protocols for inside webpages |
| offen | Ethical site analytics, controlled by the user |
| openEngiadina | Platform for creating, publishing and using open local knowledge |
| oqsprovider | Post-quantum/quantum-safe cryptographic algorithms for OpenSSL |
| pcb-rnd | Modular printed circuit board editor |
| Pitchfork | Open hardware for compartmentalizing key material and cryptographic operations |
| Pitchfork PKCS#11 | Contribute to OASIS standardisation PKCS#11 v3 |
| PKCS#11 v3 | Contribute to standardisation of PKCS#11 for cryptographic tokens |
| postmarketOS | An independent mobile operating system |
| Privacy Preserving Disease Tracking | Research into contact tracing privacy |
| RaptorJIT | RaptorJIT is a high-performance Lua virtual machine for network dataplanes. |
| Modular CA | Modular infrastructure for building secure internet services |
| Remote PKCS#11 | Remote usage of PKCS#11 |
| SDR PHY | Create a GSM mobile phone consisting of completely open source software and SDR radio |
| x86-64 VM Monitor for seL4 verified microkernel | Very restricted virtualized environment for higher security |
| Search and Displace | Find and redact privacy sensitive information |
| SecuShare | A framework for sufficiently safe social interaction |
| Secushare Box | Operating system extension of Secushare for hardware devices |
| Serval-LR | SERVAL Long-range WiFi Add-on |
| Magic Wormhole/SPAKE2 | Securely send files between two computers with minimum fuss |
| Stubby | A local DNS Privacy stub resolver using DNS-over-TLS |
| TLS-KDH | Combined Kerberos and Diffie-Hellman as an authentication mechanism for TLS |
| TOS;DR | A user rights initiative to rate and label website terms & privacy policies |
| Tracking Exposed | Increase transparency behind personalization algorithms |
| Trusted Boot Module | An open hardware trusted boot manager |
| Vita | A fast IPSEC-based VPN gateway |
| Vita | A high performance IPSEC implementation |
| Free Software Vulnerability Database | A resource to aggregate software updates |
| Nixcloud | Declarative internet services based on NixOS |
| WireGuard | A fast and modern VPN that utilizes state-of-the-art cryptography |
| Wireguard | Take modern network tunnels to the next level |
| WPIA CA Infrastructure | Deployment infrastructure for certificate authorities |
|
NLnet Foundation currently supports the following projects with in-kind contributions: |
|
| The Commons Conservancy | Legal infrastructure for public benefit efforts |
| NLnet Labs | Independent lab for Internet infrastructure development |
