From a68df7a9285931e543c7f700ab38124cc554f337 Mon Sep 17 00:00:00 2001 From: rpriven Date: Mon, 1 Jun 2026 11:58:08 -0600 Subject: [PATCH] Initial skeleton: Awesome PETs (Privacy Enhancing Technologies) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Curated map of the PET builder/researcher stack, 7-tier taxonomy, seeded with well-known projects. Skeleton โ€” to be verified + expanded. Co-Authored-By: Claude Opus 4.8 (1M context) --- README.md | 111 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 111 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..cdfceaf --- /dev/null +++ b/README.md @@ -0,0 +1,111 @@ +# Awesome PETs โ€” Privacy Enhancing Technologies [![Awesome](https://awesome.re/badge.svg)](https://awesome.re) + +> A curated **map of the privacy-enhancing technology stack** โ€” the cryptographic primitives, protocols, +> and systems you use to *build* privacy into products and research. +> +> **For builders and researchers, not switchers.** If you're looking for "use this app instead of Google," +> see [awesome-privacy](https://github.com/pluja/awesome-privacy). This list answers the other question: +> *which primitive, protocol, or system do I reach for?* + +PETs are the technologies that let data be **used without being exposed** โ€” computed on, queried, shared, +or transmitted while staying private. This list organizes them into a practical 7-tier stack (synthesized +from the [ENISA](https://www.enisa.europa.eu/publications/pets-evolution-and-state-of-the-art), UN, and +OECD PET taxonomies) and links out to the excellent per-discipline lists for depth. + +> **๐Ÿšง Skeleton / work-in-progress.** Seeded with well-known projects; entries to be verified, expanded, and +> annotated. Contributions welcome. + +## Contents +- [1. Input Privacy](#1-input-privacy) โ€” data never seen in the clear +- [2. Output Privacy](#2-output-privacy) โ€” aggregate results with formal guarantees +- [3. Federated & Distributed Analytics](#3-federated--distributed-analytics) +- [4. Anonymity & Traffic-Analysis Resistance](#4-anonymity--traffic-analysis-resistance) +- [5. Verified / Proof-Based Privacy](#5-verified--proof-based-privacy) +- [6. Hardware-Anchored Confidential Compute](#6-hardware-anchored-confidential-compute) +- [7. Accountability & Transparency](#7-accountability--transparency) +- [Related Lists](#related-lists) +- [Contributing](#contributing) + +--- + +## 1. Input Privacy +*Compute on data that is never decrypted or revealed to the other party.* + +**Secure Multi-Party Computation (MPC)** +- [MP-SPDZ](https://github.com/data61/MP-SPDZ) โ€” versatile MPC framework, many protocols. +- [EMP-toolkit](https://github.com/emp-toolkit) โ€” efficient MPC (garbled circuits, OT). +- [MPyC](https://github.com/lschoe/mpyc) โ€” Python MPC via secret sharing. + +**Homomorphic Encryption (HE / FHE)** +- [OpenFHE](https://github.com/openfheorg/openfhe-development) โ€” community FHE library (BGV/BFV/CKKS/TFHE). +- [Microsoft SEAL](https://github.com/microsoft/SEAL) โ€” widely used HE library. +- [TFHE-rs](https://github.com/zama-ai/tfhe-rs) / [Concrete](https://github.com/zama-ai/concrete) โ€” Zama's Rust FHE stack. +- [Lattigo](https://github.com/tuneinsight/lattigo) โ€” Go lattice-based HE. + +**Private Information Retrieval (PIR) / PSI / ORAM** +- [SealPIR](https://github.com/microsoft/SealPIR) โ€” single-server PIR. +- [Private Set Intersection (libPSI / volePSI)](https://github.com/Visa-Research/volepsi) โ€” fast PSI. + +## 2. Output Privacy +*Release aggregate insights with mathematical privacy guarantees.* +- [OpenDP](https://github.com/opendp/opendp) โ€” differential privacy primitives (Harvard/Microsoft). +- [Google differential-privacy](https://github.com/google/differential-privacy) โ€” DP libraries + tooling. +- [Opacus](https://github.com/pytorch/opacus) โ€” DP training for PyTorch. +- [SDV](https://github.com/sdv-dev/SDV) โ€” synthetic data generation. + +## 3. Federated & Distributed Analytics +*Train and analyze without centralizing the raw data.* +- [Flower](https://github.com/adap/flower) โ€” framework-agnostic federated learning. +- [TensorFlow Federated](https://github.com/tensorflow/federated) โ€” FL in TF. +- [OpenFL](https://github.com/securefederatedai/openfl) โ€” Intel's federated learning. +- [PySyft](https://github.com/OpenMined/PySyft) โ€” privacy-preserving ML (OpenMined). + +## 4. Anonymity & Traffic-Analysis Resistance +*Hide who is talking to whom, and the metadata around it.* +- [Tor](https://www.torproject.org/) โ€” onion routing, the anonymity baseline. +- [Nym](https://github.com/nymtech/nym) โ€” mixnet with cover traffic + incentives. +- [I2P](https://geti2p.net/) โ€” garlic-routed anonymous network. +- [Katzenpost](https://github.com/katzenpost/katzenpost) โ€” modern mix network. +- [libsignal](https://github.com/signalapp/libsignal) โ€” the Signal Protocol (E2EE + metadata minimization). +- [OpenMLS](https://github.com/openmls/openmls) โ€” Rust impl of IETF MLS (group E2EE). +- [Oblivious HTTP (OHTTP, RFC 9458)](https://datatracker.ietf.org/doc/rfc9458/) โ€” decouple requests from client identity. + +## 5. Verified / Proof-Based Privacy +*Prove something is true without revealing the underlying data.* +- [circom](https://github.com/iden3/circom) + [snarkjs](https://github.com/iden3/snarkjs) โ€” zk-SNARK circuits + tooling. +- [arkworks](https://github.com/arkworks-rs) โ€” Rust ecosystem for ZK / SNARKs. +- [halo2](https://github.com/zcash/halo2) โ€” recursive proof system (Zcash). +- [gnark](https://github.com/Consensys/gnark) โ€” Go zk-SNARK library. +- [Noir](https://github.com/noir-lang/noir) โ€” language for writing ZK circuits. + +## 6. Hardware-Anchored Confidential Compute +*Run code in an attestable, isolated enclave.* +- [Open Enclave SDK](https://github.com/openenclave/openenclave) โ€” cross-platform TEE SDK. +- [Gramine](https://github.com/gramineproject/gramine) โ€” run unmodified apps in SGX. +- [Occlum](https://github.com/occlum/occlum) โ€” memory-safe LibOS for SGX. +- [Enarx](https://github.com/enarx/enarx) โ€” WebAssembly in TEEs (SGX/SEV). +- [Constellation](https://github.com/edgelesssys/constellation) โ€” confidential Kubernetes. + +## 7. Accountability & Transparency +*Make privacy claims auditable.* +- [Certificate Transparency / Trillian](https://github.com/google/trillian) โ€” verifiable, append-only logs. +- [Sigstore](https://github.com/sigstore) โ€” transparency for software signing. +- Warrant canaries โ€” pattern + tooling (to be expanded). + +--- + +## Related Lists +Deep dives in a single discipline โ€” this list maps the territory; these go deep: +- [awesome-mpc](https://github.com/rdragos/awesome-mpc) ยท [awesome-he](https://github.com/jonaschn/awesome-he) ยท + [awesome-zero-knowledge-proofs](https://github.com/matter-labs/awesome-zero-knowledge-proofs) ยท + [awesome-tor](https://github.com/ajvb/awesome-tor) +- Consumer tools (different audience): [awesome-privacy](https://github.com/pluja/awesome-privacy) ยท + [Lissy93/awesome-privacy](https://github.com/Lissy93/awesome-privacy) + +## Contributing +PRs welcome. Add a project with: name, link, and a one-line description of *what privacy property it +provides*. Prefer maintained, documented, open-source projects. (CONTRIBUTING.md + license TODO.) + +--- + +*Curated by [Cypherpunk School](https://cypherpunkschool.com). Knowledge should be free.*