Debian Freedom Tools Project
Summary
Utilities
Debian Freedom Utilities Packages

This metapackage will install packages useful for browsing anonymously in Debian.

The list to the right includes various software projects which are of some interest to the Debian Freedom Tools Project. Currently, only a few of them are available as Debian packages. It is our goal, however, to include all software in Debian Freedom Tools which can sensibly add to a high quality Debian Pure Blend.

For a better overview of the project's availability as a Debian package, each head row has a color code according to this scheme:

If you discover a project which looks like a good candidate for Debian Freedom Tools to you, or if you have prepared an unofficial Debian package, please do not hesitate to send a description of that project to the Debian Freedom Tools mailing list

Links to other tasks

Debian Freedom Tools Utilities packages

Official Debian packages with high relevance

Assword
Simple and secure password management and retrieval system.
Versions of package assword
ReleaseVersionArchitectures
jessie0.8-1all
sid0.8-1all
Popcon: 22 users (2 upd.)*
Versions and Archs
License: DFSG free
Git

Assword is a secure password manager that relies on your OpenPGP key for security and is designed to integrate in a minimal fashion into any X11 window manager.

Passwords and context strings are stored in a single OpenPGP-encrypted and signed file (meaning entry contexts are not exposed to the filesystem). Along with a simple command-line interface, there is a streamlined GUI meant for X11 window manager integration. When invoked, the GUI produces a prompt to search stored contexts. New entries can also easily be created. Passwords are securely retrieved without displaying on the screen. Multiple retrieval methods are available, including auto-typing them directly into an X11 window (default), or inserting them into the X11 clipboard.

Haveged
Linux entropy source using the HAVEGE algorithm
Maintainer: Jérémy Bobbio
Versions of package haveged
ReleaseVersionArchitectures
wheezy1.4-4amd64,armel,armhf,i386,ia64,mips,mipsel,powerpc,s390,s390x,sparc
jessie1.9.1-1amd64,arm64,armel,armhf,i386,mips,mipsel,powerpc,ppc64el,s390x
sid1.9.1-1amd64,arm64,armel,armhf,i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Debtags of package haveged:
interfacedaemon
roleprogram
scopeutility
securitycryptography
Popcon: 550 users (43 upd.)*
Versions and Archs
License: DFSG free
Git

haveged is a userspace entropy daemon which is not dependent upon the standard mechanisms for harvesting randomness for the system entropy pool. This is important in systems with high entropy needs or limited user interaction (e.g. headless servers).

haveged uses HAVEGE (HArdware Volatile Entropy Gathering and Expansion) to maintain a 1M pool of random bytes used to fill /dev/random whenever the supply of random bits in dev/random falls below the low water mark of the device.

More information about HAVEGE is available at http://www.irisa.fr/caps/projects/hipsor/

Keepassx
Cross Platform Password Manager
Versions of package keepassx
ReleaseVersionArchitectures
squeeze0.4.3-1amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy0.4.3+dfsg-0.1amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie0.4.3+dfsg-0.1amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid0.4.3+dfsg-0.1amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
experimental2.0~alpha6-1amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Debtags of package keepassx:
interfacex11
roleprogram
scopeutility
securitycryptography
suitekde
uitoolkitqt
usestoring
x11application
Popcon: 2060 users (167 upd.)*
Versions and Archs
License: DFSG free
Bzr

KeePassX is a free/open-source password manager or safe which helps you to manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key-disk. So you only have to remember one single master password or insert the key-disk to unlock the whole database. The databases are encrypted using the algorithms AES or Twofish.

Mat
Metadata anonymisation toolkit
Versions of package mat
ReleaseVersionArchitectures
wheezy0.3.2-1all
jessie0.5.2-3all
sid0.5.2-3all
Popcon: 58 users (12 upd.)*
Versions and Archs
License: DFSG free
Git

Metadata consist of information that characterizes data. Metadata are used to provide documentation for data products. In essence, metadata answer who, what, when, where, why, and how about every facet of the data that are being documented.

Metadata within a file can tell a lot about you. Cameras record data about when a picture was taken and what camera was used. Office documents like PDF or Office automatically adds author and company information to documents and spreadsheets.

Maybe you don't want to disclose those information on the web.

Mat only removes metadata from your files, it does not anonymise their content, nor can it handle watermarking, steganography, or any too custom metadata field/system.

If you really want to be anonym, use format that does not contain any metadata, or better: use plain-text.

Formats supported to some extent are:

  • Portable Network Graphics (PNG)
  • JPEG (.jpeg, .jpg, ...)
  • Open Document (.odt, .odx, .ods, ...)
  • Office Openxml (.docx, .pptx, .xlsx, ...)
  • Portable Document Fileformat (.pdf)
  • Tape ARchive (.tar, .tar.bz2, .tar.gz)
  • ZIP (.zip)
  • MPEG Audio (.mp3, .mp2, .mp1, .mpa)
  • Ogg Vorbis (.ogg)
  • Free Lossless Audio Codec (.flac)
  • Torrent (.torrent)
Screenshots of package mat
Msva-perl
Cryptographic identity validation agent (Perl implementation)
Maintainer: Daniel Kahn Gillmor
Versions of package msva-perl
ReleaseVersionArchitectures
squeeze0.3-1all
wheezy0.8.1-2all
jessie0.9.2-1all
sid0.9.2-1all
Debtags of package msva-perl:
uitoolkitgtk
Popcon: 142 users (6 upd.)*
Versions and Archs
License: DFSG free
Git

The Monkeysphere Validation Agent offers a local service for tools to validate certificates (both X.509 and OpenPGP) and other public keys.

This package contains a perl implementation of a Monkeysphere Validation Agent.

Nautilus-wipe
Secure deletion extension for Nautilus
Maintainer: intrigeri
Versions of package nautilus-wipe
ReleaseVersionArchitectures
wheezy0.1.1-3amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie0.2.1-1amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid0.2.1-1amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Debtags of package nautilus-wipe:
uitoolkitgtk
Popcon: 406 users (9 upd.)*
Versions and Archs
License: DFSG free
Git

Nautilus Wipe is a Nautilus extension that adds "Securely erase" and "Securely fill empty space" items to the right-click menu.

The progress and results of the operations are shown in a progress dialog.

Pwgen
Automatic Password generation
Maintainer: Theodore Y. Ts'o
Versions of package pwgen
ReleaseVersionArchitectures
squeeze2.06-1amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy2.06-1amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie2.07-1amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid2.07-1amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Debtags of package pwgen:
interfacecommandline
roleprogram
scopeutility
securityprivacy, authentication
Popcon: 2256 users (622 upd.)*
Versions and Archs
License: DFSG free

pwgen generates random, meaningless but pronounceable passwords. These passwords contain either only lowercase letters, or upper and lower case mixed, or digits thrown in. Uppercase letters and digits are placed in a way that eases remembering their position when memorizing only the word.

Screenshots of package pwgen
Secure-delete
tools to wipe files, free disk space, swap and memory
Maintainer: Robert Lemmen
Versions of package secure-delete
ReleaseVersionArchitectures
squeeze3.1-5amd64,armel,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,sparc
wheezy3.1-5amd64,armel,armhf,i386,ia64,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,s390,s390x,sparc
jessie3.1-6amd64,arm64,armel,armhf,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x
sid3.1-6amd64,arm64,armel,armhf,hurd-i386,i386,kfreebsd-amd64,kfreebsd-i386,mips,mipsel,powerpc,ppc64el,s390x,sparc
Debtags of package secure-delete:
interfacecommandline
roleprogram
scopeutility
securityprivacy
works-withfile
Popcon: 334 users (76 upd.)*
Versions and Archs
License: DFSG free

Gutmann method based tools for securely wiping data from files, free disk space, swap and memory: srm, sfill, sswap and sdmem.

*Popularitycontest results: number of people who use this package regularly (number of people who upgraded this package recently) out of 169921