Open Call Beneficiaries

DISCOVER THE WINNER PROJECTS

This page contains a concise overview of projects funded by NGI Assure. There is more information
available on each of the projects listed on this page – all you need to do is click on the title on
each project to read more.

Applications are still open, you can apply today.

0KNOW

Group Theoretic Zero-knowledge Proofs (0KNOW)

Atomic Data

Typesafe handling of LinkedData

Authenticated DNSSEC bootstrapping

Secure in-band announcements of DNSSEC parameters

Heads-OpenPGP

OpenPGP Authenticated Heads and long-time awaited security improvements

Bertie

Formally verified TLS 1.3 implementation

Blink Qt Messaging

Add modern encryption to SIP softphone

Briar Desktop

E2EE online and offline messaging and discussion

Libre-SOC Cavatools: Power ISA Simulator

Power ISA Simulator

Coko Docs

A modern, open source replacement for Google Docs and Drive

CryptPad Auth

Implement external identity mechanisms to E2EE collaborative editor

CryptoLyzer

Cryptographic settings analyzer library

Securing Internet protocols with DIDs

Bridge Decentralized Identifiers with standardised authorisation mechanisms

DATALISP

Universal data interchange format using canonical S-expressions

dream2nix

Automate reproducible packaging for various language ecosystems

Encoding for Robust Immutable Storage (ERIS)

Encrypted and content-addressable data blocks

Earthstar

P2P protocol and APIs for collaborative and social applications

FOSS Code Supply Chain Assurance

Mitigate attacks through software dependencies

Federated Timesheets

Interoperable machine-readable time tracking

Fobnail

Remote attestation delivered locally

Full-source GNU Mes on ARM and RISC-V

Expand full-source bootstrap to other CPU platforms

GNU Mes RISC-V

Bringing the trustworthy bootstrap to RISC-V

GNU Mes Tower

GNU Mes with alternative scheme implementations and WASM

Layer-2-Overlay

Generalising the GNUnet Layer-2 Overlay for broader usage

GNUnet Messenger API

API for decentralized instant messaging using CADET

Gash

Port Gash to GNU Mes for auditable bootstrap

Gosling

Generic Onions Services Library Project

Porting Guix to Riscv64

Port Guix software collection to Riscv64 architecture

Himalaya

End-to-end encryption capable scriptable email

Hyper Hyper Space

Cryptographically secure append-only distributed data layer

IPDL

Equational Proofs for Distributed Cryptographic Protocols

Standardizing KEMTLS

Post-quantum TLS without handshake signatures

Katzen

Meta-data resistant instant messaging over the Katzenpost mixnet

Private Key Operations for Keyoxide

Implement Private Key Store design in Keyoxide

Keyoxide v2

Add cryptographic signature based to Keyoxide

Kintex-nextpnr

Open toolchain for high performance FPGAs

LiberaForms

End tot End Encrypted Forms

Librecast

E2E encrypted multicast

The Libre-SOC Gigabit Router

Native Open Hardware chip implementation of crypto primitives

LumoSQL at-rest data security

Modern embedded database with encryption and signed data

Manyverse Private Groups

Implement SSB Private Groups in Manyverse

Monal IM

Free Jabber/XMPP client for iOS and macOS

Naisho

Efficiently combine end-to-end encryption with CRDTs

NeoChat

Native Matrix encrypted instant messaging client

Packet classification extensions for Netfilter

High throughput packet classification of tunneled traffic

neuropil

DHT based overlay network

Securing NixOS services with systemd

UEFI Secure Boot support for NixOS

Add a self-sovereign root of trust as part of supply chain security

Adopting the Noise Key Exchange in Tox

Improved security of Tox instant messaging with NoiseIK

Oil Shell

A new dialect of shell that is less error-prone

Improve Okular digital signature support

Improve open source tooling for digital signatures

OpenCryptoHW

CGRA- based reconfigurable open-source cryptographic IP cores

OpenCryptoLinux

Make Linux run on OpenCryptoHW

Open MLS Infrastructure

End-to-end encrypted group messaging

Improving OpenSSH's Authentication and PKI

Improving SSH Authentication with OpenPGP transitive trust

Interoperable Certificate Store for OpenPGP

Standardisation effort for shared OpenPGP certificate storage

Hardening OpenPGP CA deployments

HSM support for OpenPGP key infrastructure

OpenQRNG

Open source, certified Quantum Random Number Generator

Adding Web-of-Trust Support to PGPainless

Web-of-Trust specification support for Java

Post-Quantum Crypto in DNSSEC

Experimental platform for DNSSEC with post-quantum cryptography

Statime

Memory-safe high-precision clock synchronization

Peppol for the masses

Hybrid self-hosted e-invoicing with decentralized identities

Probabilistic NAT Traversal

Last resort ad hoc connections for GNUnet

Prosody IM

Implement SASL authentication mechanism for XMPP

ProveThis

Prove statements about authenticated API resources

PyCM

Evaluate the performance of ML algorithms

GNUnet

Formalisation within IETF of R5N Distributed Hash Table design

rasn

Safe ASN.1 codec framework for Rust

SES - SimplyEdit Spaces

SimplyEdit Spaces - collaborative presentations

A Secret Key Store for Sequoia PGP

Standards-compliant private key store for OpenPGP

Adding TPM Support to Sequoia PGP

Implement use of TPM 2.0 crypto hardware for OpenPGP

Sequoia PGP

Improve interface of Sequoia PGP commandline

Sequoia GPG Chameleon

Implement well-known API's for using OpenPGP

Peer-to-Peer Access to Our Software Heritage

Access Software Heritage data via IPFS DHT

Solid Wallet

Authorization reasoning, rule-based controls and fluid integration for Solid

Dual-level Specification Inference

Make formal verification more practical with dual-level Specification Inference

Statime PTP Master

Statime - Zero-allocation cross-platform Precision Time Protocol

Great Black Swamp

Decentralized cloud storage with provider-independent security

Tauri Apps

A safer run-time for web technology based apps

TerosHDL

Assisting hardware developers to deliver safer designs

TrustING

Ultrafast AS-level Public-Key Infrastructure

Trustix

Make build logs available as publicly verifiable, tamper-proof Merkle trees

Tvix

Alternative Rust-based software build transparency

TypeCell

CRDT-based collaborative block-based editor

LIP6 VLSI Tools

Logical validation of ASIC layouts

Verified Reowolf

Formal protocol verification with Reowolf

Web Zero, with m-ld

Multi-collaborator editable pages and data based on m-ld's CRDT

Wispwot

Implement generalized scalable protection against disruptive behavior in content discovery

Yrs

Collaborative editing with CRDT written in Rust

Yrs Undo

Rust-based CRDT framework for real-time multi-user applications

Quantum-Proof Zenroom

Implementation of Quantum-Proof Cryptography in Zenroom

Reinstatement of crypto.signText()

Cryptographic signatures brought back to the browser

Distributed Mechanism Learning

Privacy preserving ways of distributed data usage

imap-codec library

Release version 1.0 of the imap-codec library

libresilient

Create robust web presence with service workers and DHT

lpnTPM

TPM 2.0 compliant open hardware Trusted Platform Module

Securing Decentralised Live Information with m-ld

Collaborative editing of LInked Data based on CRDT

oqsprovider

Post-quantum/quantum-safe cryptographic algorithms for OpenSSL

NGI Assure (NGI GO2S) has received funding from the European Commission, as part of the Horizon 2020 Research and Innovation Programme, under Grant Agreement Nº 957073. This Project is funded under the NGI (Next Generation Internet) Initiative, powered by the Digital Single Market of the European Commission. NGI Assure was previously also referred to as NGI Go2S.