-
curve25519-dalek
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
rustls
modern TLS library written in Rust
-
blake3
hash function
-
sha2
Pure Rust implementation of the SHA-2 hash function family including SHA-224, SHA-256, SHA-384, and SHA-512
-
rsa
Pure Rust RSA implementation
-
webpki-roots
Mozilla's CA root certificates for use with webpki
-
openssl
bindings
-
rcgen
Rust X.509 certificate generator
-
pem
Parse and encode PEM-encoded data
-
bcrypt
Easily hash and verify passwords using bcrypt
-
security-framework
Security.framework bindings for macOS and iOS
-
secrecy
Wrapper types and traits for secret management which help ensure they aren't accidentally copied, logged, or otherwise exposed (as much as possible), and also ensure secrets are securely wiped from memory when dropped
-
sequoia-openpgp
OpenPGP data types and associated machinery
-
snow
A pure-rust implementation of the Noise Protocol Framework
-
aes
Pure Rust implementation of the Advanced Encryption Standard (a.k.a. Rijndael)
-
constant_time_eq
Compares two equal-sized byte strings in constant time
-
subtle
Pure-Rust traits and utilities for constant-time cryptographic implementations
-
der
Pure Rust embedded-friendly implementation of the Distinguished Encoding Rules (DER) for Abstract Syntax Notation One (ASN.1) as described in ITU X.690 with full support for heapless
no_std/no_alloctargets -
coset
Set of types for supporting COSE
-
base64ct
Pure Rust implementation of Base64 (RFC 4648) which avoids any usages of data-dependent branches/LUTs and thereby provides portable "best effort" constant-time operation and embedded-friendly no_std support
-
aws-lc-rs
cryptographic library using AWS-LC for its cryptographic operations. This library strives to be API-compatible with the popular Rust library named ring.
-
hmac-sha256
A small, self-contained SHA256, HMAC-SHA256, and HKDF-SHA256 implementation
-
group
Elliptic curve group traits and utilities
-
vsss-rs
Verifiable Secret Sharing Schemes for splitting, combining and verifying secret shares
-
blst
Bindings for blst BLS12-381 library
-
ct-codecs
Constant-time hex and base64 codecs from libsodium reimplemented in Rust
-
cryptoki
Rust-native wrapper around the PKCS #11 API
-
fiat-crypto
generated Rust
-
schannel
bindings for rust, allowing SSL/TLS (e.g. https) without openssl
-
aws-sigv4
SigV4 signer for HTTP requests and Event Stream messages
-
tiny-keccak
Keccak derived functions
-
pgp
OpenPGP implementation in Rust
-
asn1
ASN.1 (DER) parser and writer for Rust
-
boring
BoringSSL bindings
-
tfhe
TFHE-rs is a fully homomorphic encryption (FHE) library that implements Zama's variant of TFHE
-
hpke
hybrid encryption standard (RFC 9180) in pure Rust
-
crypto-primes
Random prime number generation and primality checking library
-
pairing
Pairing-friendly elliptic curve library
-
libcrux-ml-kem
Libcrux ML-KEM & Kyber implementations
-
matrix-sdk-crypto
Matrix encryption library
-
sha256
crypto digest
-
light-poseidon
Poseidon hash implementation in Rust
-
ring
An experiment
-
gridiron
Rust finite field library with fixed size multi-word values
-
secret-vault
secure vault to store securely application secrets in memory from Google/AWS/K8S and environment variables
-
pasetors
PASETO: Platform-Agnostic Security Tokens (in Rust)
-
rustls-platform-verifier
supports verifying TLS certificates in rustls with the operating system verifier
-
openssl-probe
helping to find system-wide trust anchor (“root”) certificate locations based on paths typically used by
openssl -
authenticator
interacting with CTAP1/2 security keys for Web Authentication. Used by Firefox.
-
tss-esapi
Rust-native wrapper around TSS 2.0 Enhanced System API
-
x509-certificate
X.509 certificate parser and utility functionality
-
ed25519-dalek
Fast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust
-
cryptoxide
pure implementation of various common modern cryptographic algorithms, WASM compatible
-
ed25519-compact
A small, self-contained, wasm-friendly Ed25519 implementation
-
hmac-sha512
A small, self-contained SHA512, HMAC-SHA512, HKDF-SHA512, SHA384, HMAC-SHA384, and HKDF-SHA384 implementation
-
recrypt
A pure-Rust implementation of Transform Encryption, a Proxy Re-encryption scheme
-
bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
age
[BETA] A simple, secure, and modern encryption library
-
w3f-bls
Aggregate BLS-like signatures
-
opaque-ke
OPAQUE password-authenticated key exchange protocol
-
mls-rs
Messaging Layer Security (RFC 9420)
-
openmls
Messaging Layer Security (MLS) protocol, as defined in RFC 9420
-
picky-asn1-x509
ASN1 types defined by X.509 related RFCs
-
cosmian_crypto_core
Cosmian base cryptographic library
-
curve25519-dalek-ml
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
azure_security_keyvault_keys
Rust wrappers around Microsoft Azure REST APIs - Azure Key Vault Keys
-
p12-keystore
Convenient API to work with PKCS#12 files
-
snmp2
SNMP v1/v2/v3 sync/async client library with traps and MIB support
-
kbs2
A secret manager backed by age
-
ppv-lite86
Cross-platform cryptography-oriented low-level SIMD library
-
self_encryption
Self encrypting files (convergent encryption plus obfuscation)
-
hashguard
Command-Line tool for ensuring the integrity of files using hash sums
-
sha1_smol
Minimal dependency-free implementation of SHA1 for Rust
-
rusty_paseto
A type-driven, ergonomic alternative to JWT for secure stateless PASETO tokens
-
dbus-secret-service
interface with Secret Service API over DBUS
-
cryptographic-message-syntax
A pure Rust implementation of Crypographic Message Syntax (RFC 5652)
-
tor-keymgr
Key management for the Arti Tor implementation
-
openssl-sys
FFI bindings to OpenSSL
-
libpep
polymorphic encryption and pseudonymization
-
sequoia-chameleon-gnupg
Sequoia's reimplementation of the GnuPG interface
-
sshkeys
parsing OpenSSH certificates and public keys
-
rabbitmq_http_client
RabbitMQ HTTP API client
-
fips204
FIPS 204: Module-Lattice-Based Digital Signature
-
sigstore
An experimental crate to interact with sigstore
-
zkryptium
Rust crypto library for zero-knowledge proofs
-
vnc-rs
An async implementation of VNC client side protocol
-
djpass
A command-line tool to generate and verify passwords used in Django project
-
yara-x
A pure Rust implementation of YARA
-
cosmian_cover_crypt
Key Policy attribute encryption based on subset cover
-
gst-plugin-sodium
GStreamer plugin for libsodium-based file encryption and decryption
-
crystals-dilithium
Pure Rust implementation of CRYSTALS-Dilithium and ML-DSA (FIPS 204) digital signatures
-
mbedtls
Idiomatic Rust wrapper for MbedTLS, allowing you to use MbedTLS with only safe code while being able to use such great Rust features like error handling and closures. Building on MbedTLS's focus on embedded use…
-
nkeys
NATS nkeys library
-
hakanai
CLI client for Hakanai, a secure secret sharing service
-
orion
Usable, easy and safe pure-Rust crypto
-
g2p
create types that implement fast finite field arithmetic
-
vrf
Fast and extensible Verifiable Random Function (VRF) library; currently supporting secp256k1, secp256r1 and sect163k1 curves
-
noise-protocol
Noise Protocol Framework implementation
-
apr
Rust bindings for Apache Portable Runtime
-
mla
Multi Layer Archive - A pure rust encrypted and compressed archive file format
-
c2pa
Rust SDK for C2PA (Coalition for Content Provenance and Authenticity) implementors
-
akd
auditable key directory
-
napa
secure command line password manager
-
tokio-openssl
SSL streams for Tokio backed by OpenSSL
-
qrc-opensource-rs
The free opensource version of the Quantum Secure Cryptographic library in Rust (QRC)
-
sframe
pure rust implementation of SFrame (RFC 9605)
-
zipsign-api
Sign and verify
.zipand.tar.gzfiles with an ed25519 signing key -
saorsa-pqc
Post-Quantum Cryptography library for Saorsa Labs projects
-
dusk-poseidon
Poseidon hash algorithm over the Bls12-381 Scalar field
-
russh-keys
Deal with SSH keys: load them, decrypt them, call an SSH agent
-
delsum
Reverse Engineer's Toolbox for Checksums
-
fips203
FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism
-
sha1
SHA-1 hash function
-
keccak-asm
wrappers for SHA-3 algorithms written in assembly
-
lrwn
encoding / decoding LoRaWAN frames
-
keccak-hash
keccak-hashis a set of utility functions to facilitate working with Keccak hashes (256/512 bits long) -
aws-lc-fips-sys
AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. This is the FIPS validated version of AWS-LC.
-
dryoc
Don't Roll Your Own Crypto: pure-Rust, hard to misuse cryptography library
-
classic-mceliece-rust
Pure rust implementation of the PQC scheme Classic McEliece
-
rustls-pki-types
Shared types for the rustls PKI ecosystem
-
oo7-daemon
Server side implementation of the freedesktop Secret Service
-
p2panda-core
Extensible data-types for secure, distributed and efficient exchange of data
-
frost-core
Types and traits to support implementing Flexible Round-Optimized Schnorr Threshold signature schemes (FROST)
-
wdcrypt
CLI to encrypt the current working directory with Fernet encryption
-
mwa_giant_squid
MWA ASVO command line client
-
gf256
containing Galois-field types and utilities
-
gpg-tui
Manage your GnuPG keys with ease!
-
s2n-tls
A C99 implementation of the TLS/SSL protocols
-
sigstore-verification
Sigstore, Cosign, and SLSA attestation verification library
-
ap-relay
activitypub relay
-
blind-rsa-signatures
RSA blind signatures in pure Rust
-
sirr
CLI client for Sirr — push, get, and manage ephemeral secrets
-
rbw
Unofficial Bitwarden CLI
-
opa-wasm
OPA policies compiled to WASM
-
pqcrypto-traits
Shared traits for post-quantum cryptographic primitives
-
halo2curves
Elliptic curve implementations and wrappers for halo2 library
-
rsop
SOP CLI tool based on rPGP and rpgpie
-
paper-age
Easy and secure paper backups of secrets
-
ecb
Electronic Codebook (ECB) block cipher mode of operation
-
blsful
BLS signature implementation according to the IETF spec on the BLS12-381 curve
-
quichash
High-performance cryptographic hash utility with SIMD optimization
-
tdigests
An efficient Rust implementation of the t-digest algorithm
-
crypt_guard
CryptGuard is a post-quantum cryptography library with support for Kyber, Falcon, Dilithium in combination with AES and XChaCha20
-
shadowsocks-crypto
Shadowsocks Crypto
-
jaz
Find secrets hidden in commits
-
rufendec
lightweight CLI tool for AES-256 encryption and decryption, preserving file names and directory structure. With support for ECB/GCM modes, it simplifies securing and restoring files with ease, all powered by Rust.
-
dimpl
DTLS 1.2/1.3 implementation (Sans‑IO, Sync)
-
rust_keylock_shell
Shell access to the rust-keylock. rust-keylock is a password manager with goals to be Secure, Simple to use, Portable and Extensible.
-
safecloset
Secret Keeper
-
boring2
BoringSSL bindings
-
hkdf
HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
-
x25519-dalek
X25519 elliptic curve Diffie-Hellman key exchange in pure-Rust, using curve25519-dalek
-
underskrift
PDF digital signing library — PAdES B-B through B-LTA, PKCS#7, visible/invisible signatures, LTV, and verification
-
shad3
App for hashing entries in blocklists
-
openssl-src
Source of OpenSSL and logic to build it
-
sigstore-verify
Sigstore signature verification
-
product-os-security
Product OS : Security provides a suite of helper tools to easily perform cryptographic operations including generating hashes, encrypting and decrypting content
-
rattler_digest
used by rattler crates to compute different hashes from different sources
-
aws-db-esdk
implementing client side encryption with DynamoDB
-
x509-verify
Pure Rust library that verifies X.509 signatures based on the algorithm identifiers
-
apple-cryptokit-rs
wrapper around Apple's native CryptoKit framework for App Store compliant cryptography
-
signify-rs
OpenBSD-compatible file signing & verification tool
-
ieee80211
A parser for IEEE 802.11 frames
-
crtshmon
Monitor crt.sh for new certificates
-
ssh-agent-client-rs
Pure rust implementation of the ssh-agent protocol. It can be used to write clients that interact with the ssh agent.
-
p12
pure rust pkcs12 tool
-
kms-aead
KMS/AEAD envelope encryption for GCP/AWS KMS and Ring AEAD encryption
-
rsacracker
Powerful RSA cracker for CTFs. Supports RSA, X509, OPENSSH, PKCS#12, PKCS#7, and CSR in PEM and DER formats.
-
nam-blstrs
High performance implementation of BLS12 381
-
b3sum
a command line implementation of the BLAKE3 hash function
-
aws-nitro-enclaves-cose
aims to provide a safe Rust implementation of COSE, with COSE Sign1 currently implemented
-
mls-spec
repository of MLS / RFC9420-related data structures
-
internal-russh-forked-ssh-key
Pure Rust implementation of SSH key file format decoders/encoders as described in RFC4251/RFC4253 and OpenSSH key formats, as well as "sshsig" signatures and certificates (including…
-
tor-cert
Non-standard certificate formats used by Tor
-
ece
Encrypted Content-Encoding for HTTP Rust implementation
-
openssh-keys
read and write OpenSSH public keys
-
openpgp-card-tools
inspecting, configuring and using OpenPGP cards
-
ensync
A flexible ENcrypted file SYNChroniser suitable for uses where the central location is not fully trusted
-
encrypt_config
manage, persist and encrypt your configurations
-
threema-gateway
A client library for the Threema Gateway
-
generic-ec
General elliptic curve cryptography
-
arq-restore
A program to restore backups created with Arq 6 and 7
-
astrid-approval
Approval system for Astrid secure agent runtime - types, allowances, and security policy
-
circom-witness-rs
Fast witness generator for Circom circuits
-
inspect-cert-chain
OpenSSL-like text output for debugging certificate chains
-
dnssec-prover
allows for the creation and validation of transferrable proofs of entries in the DNS
-
prople-did-core
A set of core libraries to manage the DID data and objects based on Prople system requirements
-
vodozemac
Olm and Megolm
-
libcrux-hmac
Libcrux HMAC implementation
-
jaws
JSON Algorithms and Web Signing
-
bergshamra-c14n
XML Canonicalization (C14N) for Bergshamra XML Security library
-
giant-spellbook
cryptographic multi-tool with file analysis, encoding, bitflipping, splitting, hashing, encryption, signing, and more
-
nest-data-source-api
NEST Data Source API Service
-
cross-krb5
Safe cross platform Kerberos v5 interface
-
prolock
securely storing secrets like passwords and plain text snippets in a password-protected file
-
oqs
interface to Open-Quantum-Safe's liboqs
-
minisign-verify
A small, zero-dependencies crate to verify Minisign signatures
-
aegis_vm
Advanced Rust code virtualization and obfuscation framework
-
digest
Traits for cryptographic hash functions and message authentication codes
-
pq-oid
OID constants for all PQ algorithms (ML-KEM, ML-DSA, SLH-DSA)
-
matrix-sdk-store-encryption
Helpers for encrypted storage keys for the Matrix SDK
-
nethsm-sdk-rs
Rust SDK to communicate with Nitrokey NetHSM
-
red_asn1
A little library to encode/decode ASN1 DER
-
enc_file
Password-based file encryption tool with a versioned header, AEAD, Argon2id KDF, and streaming mode. Library + CLI + GUI.
-
paq
Hash file or directory recursively
-
nuts-container
A secure storage library
-
aws-esdk
implementing client side encryption
-
strobe-rs
Strobe protocol framework in pure Rust
-
fluxencrypt
A high-performance, secure encryption SDK for Rust applications
-
secrets
Protected-access memory for cryptographic secrets
-
zff
interact with zff, a file format for forensic images
-
hyper-openssl
Hyper TLS support via OpenSSL
-
keygen-rs
Unofficial Rust SDK for integrating with the keygen.sh licensing service
-
moq-token
Media over QUIC - Token Generation and Validation
-
picky
Portable X.509, PKI, JOSE and HTTP signature implementation
-
hunt-scan
MCP agent scanning and vulnerability detection for clawdstrike hunt
-
cuaimacrypt
symmetric hybrid cipher engine — block cipher and stream cipher combined
-
nethsm-cli
A CLI for the Nitrokey NetHSM
-
wycheproof
test vectors
-
l-s
Summary any file‘s meta
-
secure-gate
Zero-cost secure wrappers for secrets — heap for dynamic, stack for fixed
-
hanko
Keeps your Git allowed signers file up to date with signing keys configured on software development platforms like GitHub and GitLab
-
rust-argon2
Argon2 password hashing function
-
news-backend
Personalized article recommendations without profiling or cookies
-
shiguredo_srt
SRT (Secure Reliable Transport) library
-
biscuit-cli
a CLI to manipulate biscuit tokens
-
pgen
Passphrase Generator
-
verifysign
cargo used to verify digital code signature on files
-
qp-rusty-crystals-dilithium
Pure Quantus RUST implementation of CRYSTALS-Dilithium digital signature scheme
-
ort-openrouter-cli
Open Router CLI
-
dumpy
A web frontend to Suricata full packet capture
-
odoh-rs
Oblivious DNS over HTTPS (ODoH) protocol version 1
-
kcr_kyverno_io
Kubernetes Custom Resource Bindings
-
jubjub-plus
Jubjub elliptic curve group
-
playfair_cipher
Playfair, Two square and Four square cipher
-
rustls-webpki
Web PKI X.509 Certificate Verification
-
jwt-hack
Hack the JWT (JSON Web Token) - A tool for JWT security testing and token manipulation
-
udigest
Unambiguously digest structured data
-
glass_pumpkin
A cryptographically secure prime number generator based on rust's own num-bigint and num-integer
-
sketches
Probabilistic data structures for scalable approximate analytics
-
libcrux-ml-dsa
Libcrux ML-DSA implementation
-
turboshake
A family of extendable output functions (XOFs) based on 12-rounds Keccak[1600] permuation
-
murk-cli
Encrypted secrets manager for developers — one file, age encryption, git-friendly
-
mpvss-rs
Publicly Verifiable Secret Sharing Library
-
product-os-random
Product OS : Random provides a suite of random generator tools for different contexts. This includes random text, number and key generators including cryptographically secure random generation.
-
cryptostream
Transparent encryption and decryption for Read and Write streams
-
midnight-curves
BLS12 381 and Jubjub curves
-
gxt-cli
Minimal, encrypted, signed and copy-pasteable tokens for manual data exchange between games
-
fernet
in Rust
-
ubiq-rust
SDK for the Ubiq Security platform
-
tap-agent
Transaction Authorization Protocol (TAP)
-
webpki
Web PKI X.509 Certificate Verification
-
confidential-ml-pipeline
Multi-enclave pipeline orchestration for confidential ML inference
-
sha3sum
compute and check SHA3 message digest
-
pkix
TLS Certificate encoding and decoding helpers
-
lakers
EDHOC (RFC 9528)
-
jubjub-schnorr
A pure-Rust implementation of Schnorr signatures with a PLONK circuit module additionally
-
sd-jwt-payload
Selective Disclosure JWTs (SD-JWT)
-
az-cvm-vtpm
Package with shared code for Azure Confidential VMs
-
clawdentity-cli
Clawdentity Rust CLI for identity onboarding, provider setup, and connector operations
-
fatoora-core
Rust Fatoora/ZATCA SDK with C ABI and multi-language bindings
-
rescue_poseidon
Sponge construction based Algebraic Hash Functions
-
dnsimple
API client for Rust
-
edgee-server
The full-stack edge platform for your edge oriented applications (server part)
-
hekate-math
A high-performance, constant-time implementation of binary tower fields (F(2^k)) optimized for GKR-based provers, Virgo, and Binius protocols
-
libp2p-noise
Cryptographic handshake protocol using the noise framework
-
sequoia-wot
OpenPGP's web of trust
-
tangy
Tang server implementation
-
jwk-simple
JWK/JWKS for Rust and WASM (RFC 7517, 7518, 7638, 8037, 9864) with jwt-simple integration
-
cose-rust
COSE Rust implementation
-
c5store
A comprehensive Rust library for unified configuration and secret management, supporting various sources, typed access, and local encryption
-
keyquorum
Shamir secret sharing daemon for distributed key quorum
-
minio-rsc
minio, api is compliant with the Amazon S3 protocol
-
rgp
Enabling E2EE for a range of applications
-
happy-cracking
A fast, comprehensive CTF toolkit for cryptographic encoding/decoding, classic ciphers, hash operations, and analysis tools
-
yimi-rutool
A comprehensive Rust utility library inspired by Hutool
-
winter-rand-utils
Random value generation utilities for Winterfell crates
-
ristretto_classfile
reading, writing and verifying Java classfiles
-
instant-acme
Async pure-Rust ACME client
-
rustgenhash
generate hashes from the command line
-
kanidm-hsm-crypto
easily interacting with a HSM or TPM
-
magic-crypt
MagicCrypt is a Java/PHP/NodeJS/Rust library to encrypt/decrypt strings, files, or data, using Data Encryption Standard(DES) or Advanced Encryption Standard(AES) algorithms. It supports CBC block cipher mode…
-
elf2tab
Compiles from ELF to TAB (a Tock Application Bundle using the Tock Binary Format)
-
curve25519-dalek-ng
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
crabapple
iOS backup decryption and encryption
-
minisign
sign files and verify signatures
-
flexible-transcript
transcript trait definition, along with viable options
-
embedded-tls
TLS 1.3 client with no_std support and no allocator
-
dcap-qvl-webpki
Fork of rustls-webpki to support single cert CRL check
-
clatter
no_std compatible implementation of Noise protocol framework with Post-Quantum extensions
-
tfhe-zk-pok
zero-knowledge proofs of encryption for TFHE
-
deterministic-hash
Create deterministic hashes regardless of architecture
-
web-bot-auth
Web Bot Authentication using HTTP Message Signatures
-
p256
Pure Rust implementation of the NIST P-256 (a.k.a. secp256r1, prime256v1) elliptic curve as defined in SP 800-186, with support for ECDH, ECDSA signing/verification, and general purpose curve arithmetic
-
datasynth-fingerprint
Privacy-preserving synthetic data fingerprinting for DataSynth
-
ascon-core
Pure Rust implementation of the Ascon permutation
-
rshc
compile shell script(or expect script) to Rust code and binary
-
aws-sdk-paymentcryptography
AWS SDK for Payment Cryptography Control Plane
-
aef
An encrypted file archiver
-
zfuel
types used for a mutual credit accounting system
-
cryptocol
cryptographic library that includes big number arithmetic operations, hash algorithms, symmetric-key cryptographic encryption/decryption algorithms, asymmetric-key (public-key) cryptographic…
-
cord
Canonical serialization format designed for security
-
dilithium-rs
Pure Rust implementation of ML-DSA (FIPS 204) / CRYSTALS-Dilithium post-quantum digital signature scheme
-
sequoia-sq
Command-line frontends for Sequoia
-
grammers-crypto
Several cryptographic utilities to work with Telegram's data
-
oboron
Encryption and encoding library for developer ergonomics: prefix entropy, compact outputs, high performance
-
paas-client
PEP Authorization API Service client
-
Mademoiselle_Entropia
Extremely strong, stupidly simple and relatively fast symmetric cipher.. check out the Readne for explanation. Have a great day, Dear User 💯❤️
-
biscuit-parser
Datalog parser used in the biscuit-auth and biscuit-quote crates
-
multihash-codetable
Default multihash code-table with cryptographically secure hash implementations
-
lockstitch
incremental, stateful cryptographic primitive for symmetric-key cryptographic operations in complex protocols
-
frost-ed25519
A Schnorr signature scheme over Ed25519 that supports FROST
-
agentic-identity
Cryptographic identity anchor for AI agents — persistent identity, signed actions, revocable trust
-
libvault
modified from RustyVault
-
lxmf-core
Core LXMF message format, constants, and stamp validation (no_std)
-
sphinx-packet
A Sphinx packet implementation in Rust
-
t-rust-less-lib
Password manager library
-
bdrck
Generic common foundational utilities
-
certradar-cli
Certificate transparency and SSL/TLS security analysis CLI tool
-
rooster
password manager
-
tough
The Update Framework (TUF) repository client
-
vmprotect
Unofficial VMProtect SDK for Rust
-
jacs-binding-core
Shared core logic for JACS language bindings (Python, Node.js, etc.)
-
cocoon
protected container with strong encryption and format validation
-
cryptotensors
extension of safetensors that adds encryption, signing, and access control (Rego-based policy engine) while maintaining full backward compatibility with the safetensors format. It…
-
localsend-rs
LocalSend protocol - cross-platform file transfer tool
-
img4-dump
Extracts payloads and metadata from IMG4/IM4P/IM4M; decrypts with user-supplied IV+Key; optional LZFSE/LZSS decompress
-
readable-hash
Human-readable hash representations for easy verification and data obfuscation
-
htauth-cli
A CLI tool for managing htpasswd files
-
rsecure
file encryption and decryption tool using AES-GCM
-
why2
Lightweight, fast, secure, and easy to use encryption system
-
c2patool
displaying and creating C2PA manifests
-
cryptovec
A vector which zeroes its memory on clears and reallocations
-
tdx-quote
Parses and verifies Intel TDX quotes
-
pqc_kyber
post-quantum Kyber KEM algorithm
-
kitty-rc
controlling kitty terminal emulator via its remote control protocol
-
json-proof-token
based on the new JOSE Working Group draft specifications: JSON Web Proof (JWP), JSON Proof Token (JPT) and JSON Proof Algorithm (JPA)
-
nu_plugin_nw_ulid
Production-grade ULID (Universally Unique Lexicographically Sortable Identifier) utilities plugin for Nushell with cryptographically secure operations, enterprise-grade security, and streaming support
-
bitbottle
a modern archive file format
-
muddy
literal string obfuscation library
-
wa-rs-proto
Protocol Buffers definitions for WhatsApp
-
jwtk
JWT signing (JWS) and verification, with first class JWK and JWK Set (JWKS) support
-
cert-dump
High-performance X.509 certificate scanner and extractor for binary files
-
qcicada
SDK for the QCicada QRNG (Crypta Labs) — macOS-first, works on Linux too
-
ssh-vault
encrypt/decrypt using ssh keys
-
qfall-schemes
Collection of prototype implementations of lattice-based cryptography
-
wolfssl
High-level bindings for WolfSSL
-
s3-simple
fast and efficient s3 client for bucket operations
-
pf8
encoding and decoding artemis PF8 archive files
-
rust_ev_crypto_primitives
Crypto Primitives necessary for E-Voting Applications
-
arcanum-primitives
Native cryptographic primitives for Arcanum
-
tindercrypt
Data encryption with symmetric cryptographic keys or passwords/passphrases, and self-contained encryption metadata
-
caesar_cipher_enc_dec
can easily use caesar cipher
-
binstalk-types
The binstall toolkit that contains basic types for binstalk crates
-
voprf
verifiable oblivious pseudorandom function (VOPRF)
-
elastic-elgamal
ElGamal encryption and related zero-knowledge proofs with pluggable crypto backend
-
proofmode
Capture, share, and preserve verifiable photos and videos
-
zipsign
Sign and verify
.zipand.tar.gzfiles with an ed25519 signing key -
libherokubuildpack
Opinionated common code for buildpacks implemented with libcnb.rs
-
aranya-daemon-api
IPC API between the Aranya client and daemon
-
sigstore-trust-root
Sigstore trusted root management and parsing
-
pqc-binary-format
Standardized binary format for post-quantum cryptography encrypted data interchange
-
korrosync
A KOReader Sync Server
-
vitaminc-password
Secure password generator. Part of the Vitamin-C cryptographic suite.
-
qatsi
Stateless secret generation via hierarchical memory-hard key derivation using Argon2id
-
p3ak-vault
P3AK vault CLI — encrypted portable AI knowledge store. Create, ingest, search, and serve .vault files. 35 formats, hybrid BM25+vector search, 98% accuracy.
-
compass-cli
Interactive README runner and onboarding guide
-
darkbio-crypto
Cryptography primitives and wrappers
-
mdk-core
A simplified interface to build secure messaging apps on nostr with MLS
-
krill
Resource Public Key Infrastructure (RPKI) daemon
-
ruscrypt
⚡ Lightning-fast cryptography toolkit built with Rust - A comprehensive CLI tool for classical and modern cryptographic operations
-
bl4
Borderlands 4 save editor library - encryption, decryption, and parsing
-
ashcore
ASH (Application Security Hash) — RFC 8785 compliant request integrity verification with anti-replay protection
-
devolutions-crypto
An abstraction layer for the cryptography used by Devolutions
-
rustls-cng
Windows CNG API bridge for rustls
-
rust_helpers
help with projects
-
libsmx
Pure-Rust, no_std, constant-time SM2/SM3/SM4/SM9 Chinese cryptography (GB/T 32918/32905/32907/38635)
-
kestrel-cli
Kestrel file encryption program
-
qasa
Post-quantum cryptography implementation using CRYSTALS-Kyber and CRYSTALS-Dilithium for quantum-safe communications
-
rust_tokio_kcp
A kcp implementation for tokio
-
reishi-handshake
Pure, sans-IO implementation of the Noise IK handshake with optional post-quantum hybrid mode
-
concryptor
A multi-threaded AEAD encryption engine
-
printwell-pdf
PDF manipulation features (forms, signing) for Printwell
-
salty
Small, sweet, swift Ed25519 signatures for microcontrollers
-
ruma-common
Common types for other ruma crates
-
httpsig
IETF RFC 9421 of http message signatures
-
cognitum-gate-tilezero
Native arbiter for TileZero in the Anytime-Valid Coherence Gate
-
fract
A Hyperchaotic, Quantum-Resistant, Minimalist Cryptographic Hash
-
cipherstash-client
The official CipherStash SDK
-
challenge-bypass-ristretto
implemention of the privacy pass cryptographic protocol using the Ristretto group (WIP)
-
yubirs-tools
Command line tools for interacting with YubiKeys, based upon yubirs
-
sha1collisiondetection
SHA-1 hash function with collision detection and mitigation
-
polytune
Maliciously-Secure Multi-Party Computation (MPC) Engine using Authenticated Garbling
-
witnet-bn
Pairing cryptography with the Barreto-Naehrig curve
-
klave
SDK for the Klave platform
-
fynx-proto
Production-ready SSH and IPSec/IKEv2 protocol implementations with comprehensive testing and high-level APIs
-
geneos-toolkit
building Geneos Toolkit compatible applications
-
merkle-search-tree
A data structure for efficient state-based CRDT replication and anti-entropy
-
qcrypto
design, simulation and validation of Quantum Cryptography protocols
-
secure-crypt
Ultra secure encryption/decryption tool using Rust + libsodium with zero secret leakage
-
saorsa-gossip-groups
MLS group management wrapper for Saorsa Gossip (RFC 9420 compliant)
-
mitoo
toolkit library that encapsulates methods such as configuration reading, file operations, encryption and decryption, transcoding, regular expressions, threading, collections, trees…
-
peat-mesh
Peat mesh networking library with CRDT sync, transport security, and topology management
-
byte-array-ops
no_std-compatible library for security-by-default byte array operations. Includes automatic memory zeroization, constant-time utilities, multiple input formats (hex, binary, UTF-8)…
-
hpke-dispatch
runtime algorithmic selection for hybrid public key encryption
-
tss-esapi-sys
FFI wrapper around TSS 2.0 Enhanced System API
-
datafusion-postgres-cli
Command-line tool for DataFusion's Postgres Protocol frontend
-
async-hash
Traits and helper functions for SHA256 hashing of async data types
-
bizinikiwi-bn
Pairing cryptography with the Barreto-Naehrig curve
-
ds-rom
extracting/building Nintendo DS ROMs
-
librnxengine
implement robust software licensing, activation, and validation systems
-
pq-key-encoder
Post-quantum key encoding (DER, PEM, JWK) for ML-KEM, ML-DSA, SLH-DSA
-
recipe
Dynamic binary composition and low level manifest orchestration. Defines the blueprints and deterministic procedures for the Honest-Classified security ecosystem.
-
typelock
Enforce security boundaries at the Type level
-
lorawan
structures and tools for reading and writing LoRaWAN messages from and to a slice of bytes
-
atproto-plc
did-method-plc implementation for ATProto with WASM support
-
saorsa-fec
Quantum-safe erasure coding with post-quantum cryptography using saorsa-pqc
-
paseto-pq
Post-quantum PASETO tokens with RFC-compliant footer authentication using ML-DSA signatures
-
fhe
Fully Homomorphic Encryption in Rust
-
b4ae
B4AE (Beyond For All Encryption) - Quantum-resistant secure communication protocol
-
prollytree
A prolly (probabilistic) tree for efficient storage, retrieval, and modification of ordered data
-
aes_crypto
A platform-agnostic library for the AES cipher (Rijndael)
-
ironhide
easily encrypt and decrypt files to users and groups. Similar to GPG, but usable at scale.
-
trustless-provider-filesystem
Filesystem-based key provider for trustless
-
ssi-vc-jose-cose
Securing Verifiable Credentials using JOSE and COSE with the
ssilibrary -
dugout
Git-native secrets manager for development teams, written in Rust
-
shamirsecretsharing
Shamir secret sharing library for Rust
-
affinidi-secrets-resolver
Common utilities for Affinidi Trust Development Kit
-
dotenvage
Dotenv with age encryption: encrypt/decrypt secrets in .env files
-
kangarootwelve_xkcp
An FFI wrapper for the XKCP implementation of the KangarooTwelve hash function
-
appattest
Verification of Apple App Attestations and Assertions, to help enforce iOS App Integrity Checks
-
cesride
Cryptographic primitives for use with Composable Event Streaming Representation (CESR)
-
pact_verifier_cli
Standalone pact verifier for provider pact verification
-
ret2script
Checker script runner for Ret2Shell - A feature-riches CTF challenge platform
-
yubikey-signer
YubiKey code signing utility
-
wkd-server
A WKD server
-
rusty_paserk
Platform Agnostic Serializable Keys (PASERK) is an extension on PASETO for key management
-
sl-messages
Message exchange for MPC protocols
-
mbedtls-smx
Idiomatic Rust wrapper for MbedTLS, allowing you to use MbedTLS with only safe code while being able to use such great Rust features like error handling and closures. Building on MbedTLS's focus on embedded use…
-
fheanor
that provides fast implementations of rings commonly used in homomorphic encryption, built on feanor-math
-
palisade-config
Security-conscious configuration management for honeypot systems with cryptographic tag derivation
-
hexz-ops
High-level snapshot operations: pack, write, inspect, sign
-
ockam
End-to-end encryption and mutual authentication for distributed applications
-
tauri-plugin-secure-element
Tauri plugin for secure element use on iOS (Secure Enclave) and Android (Strongbox and TEE)
-
omnibor
Reproducible software identity and fine-grained build dependency tracking
-
pkcs11-sys
Generated bindings for pkcs11.h. Useful for building PKCS#11 modules in rust.
-
scryptenc
scrypt encrypted data format
-
breakmancer
Drop a breakpoint into any shell
-
webrtc-dtls
A pure Rust implementation of DTLS
-
rskit
rust kit
-
exaf-rs
Extensible archiver format
-
secapi
bindings
-
symcrypt
Friendly and Idiomatic Wrappers for SymCrypt
-
atlas-common
Common functionality for Atlas ML provenance system
-
jks
Java KeyStore (JKS) and PKCS12 encoder/decoder for Rust
-
bls48581
BLS signature implementation using the BLS48-581 curve with KZG commitments
-
botan
Rust wrapper for Botan cryptography library
-
cosmian_findex
Symmetric Searchable Encryption
-
suit_validator
no_std-friendly Rust crate for decoding and verifying SUIT Manifest
-
oxigdal-security
Enterprise security features for OxiGDAL: encryption, access control, compliance
-
secrets-tweaked
Protected-access memory for cryptographic secrets
-
holecard-cli
A secure CLI password manager with dual-key encryption and TOTP support
-
fastmurmur3
Fast non-cryptographic hash, with the benchmarks to prove it
-
pqready
A cross-platform CLI tool to test for quantum-secure TLS/HTTPS encryption support
-
negentropy
set-reconciliation protocol
-
c2-chacha
The ChaCha family of stream ciphers
-
topo-scanner
File walking with gitignore support and content hashing
-
xor_cryptor
A encryption/decryption library using bitwise xor
-
dcrypt
pure-Rust, software-only cryptography library providing both classical and post-quantum primitives with a focus on security, hybrid KEMs/signatures, and memory-safe, no-FFI design
-
infolyt-daemon
Background daemon for Infolyt
-
tongsuo-src
Source of Tongsuo and logic to build it
-
poulpy-schemes
A backend agnostic crate implementing mainsteam RLWE-based FHE schemes
-
edgesentry-rs
Tamper-evident immutable audit trace: signing, verification, ingestion and CLI
-
cubehash
(rev2/rev3) hashing with SIMD acceleration and portable fallback
-
fastcert
zero-config tool for making locally-trusted development certificates
-
xmlsec
Wrapper for xmlsec1 library
-
nabla-cli
An OSS tool for reverse engineering and binary composition analysis
-
aws-lc-sys
AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.
-
eldenring
Structures, bindings, and utilities for From Software's title Elden Ring
-
opensecret
Rust SDK for OpenSecret - secure AI API interactions with nitro attestation
-
ypass
A secure password manager using YubiKey HMAC-SHA1 challenge-response
-
shelter
ROP-based sleep obfuscation to evade memory scanners
-
acme-redirect
Tiny http daemon that answers acme challenges and redirects everything else to https
-
fips205
FIPS 205: Stateless Hash-Based Digital Signature Standard
-
shashasha
SHA3
-
ngdp-crypto
Salsa20 and ARC4 encryption/decryption with key management for Blizzard's TACT files
-
mozilla/jwcrypto
Firefox Application Services
-
djangohashers
port of the password primitives used in Django project
-
chacha
stream ciphers
-
tor-hscrypto
Basic onion service cryptography types used by Aerti
-
nacl
Rust version of NaCl Cryptographic library with Scrypt added
-
hofmann-rfc
RFC 9380 (Hash-to-Curve), RFC 9497 (OPRF), and RFC 9807 (OPAQUE)
-
barretenberg-rs
Rust bindings for Barretenberg, a C++ cryptographic library for zero-knowledge proofs
-
rops
SOPS-like library in pure Rust
-
ironcore-alloy
IronCore Labs SDK for all your different Application Layer Encryption needs
-
arwen-codesign
Ad-hoc code signing for Mach-O binaries
-
xmit
e2e encrypted messaging between agents
-
win-crypto-ng
Safe bindings to Windows Cryptography API: Next Generation
-
qcert
generating test key/certificate pairs
-
jacs-cli
JACS CLI: command-line interface for JSON AI Communication Standard
-
fast-des
implements DES encryption and NetNTLMv1 hashing in bitsliced form. a 10x-100x improvement in speed can be achieved depending on hardware.
-
mlar
A wrapper around the MLA library for common use cases
-
sgx_types
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
petriage
Cross-platform PE file surface analysis tool for malware analysts
-
gstp
A secure, authenticated, transport-agnostic data exchange protocol with distributed state management via Encrypted State Continuations (ESC)
-
deno_crypto
Web Cryptography API implementation for Deno
-
ciphersuite
Ciphersuites built around ff/group
-
hana-vault
used by the Hana SSH client for storing user data securely in encrypted SQLite
-
phala-tee-deploy-rs
Rust client for deploying and managing Docker containers on Phala TEE Cloud (dstack)
-
openentropy-cli
CLI for openentropy — your computer is a hardware noise observatory
-
kcr_argoproj_io
Kubernetes Custom Resource Bindings
-
bbjwt
well documented JWT validation library, mainly for validating OpenID Connect ID Tokens
-
schemapin
Cryptographic schema integrity verification for AI tools - Rust implementation
-
vaultic
Secure your secrets. Sync your team. Trust your configs.
-
shield-core
EXPTIME-secure encryption library - Rust core implementation
-
light-openid
Lightweight OpenID primitives & client
-
nitro-tpm-attest
Retrieve a signed attestation document from the NitroTPM
-
astrid-audit
Chain-linked cryptographic audit logging for Astrid
-
bergshamra-keys
Key management for Bergshamra XML Security library
-
rama-boring
BoringSSL bindings for Rama
-
tacet
Detect timing side channels in cryptographic code
-
psp_security
PSP Security Protocol
-
smpl_jwt
Very simple JWT generation lib
-
libsui
A injection tool for executable formats (ELF, PE, Mach-O) that allows you to embed files into existing binary and extract them at runtime
-
yacme
ACME client
-
tink-streaming-aead
Streaming AEAD functionality for Rust port of Google's Tink cryptography library
-
appstoreconnect
client
-
eolib
A core rust library for writing applications related to Endless Online
-
neodata
Streaming fixed-memory 16-ary merkle tree with backend-agnostic storage
-
tlock_age
Rust encryption library for hybrid time-lock encryption
-
hayro
A rasterizer for PDF files
-
fp2
An efficient, flexible and constant time Rust implementation of the extension field Fp^2 with modulus x^2 + 1
-
iroh-blake3
the BLAKE3 hash function
-
nuts-archive
A tar like archive on top of the nuts-container
-
tnid
A UUID compatible ID with static type checking
-
isomdl
ISO mDL implementation in Rust
-
crrl
cryptographic research
-
flexiber
Encoding and decoding of BER-TLV as described in ISO 7816-4, without allocations
-
ockam_command
End-to-end encryption and mutual authentication for distributed applications
-
chbs
providing secure passphrase generation based on a wordlist
-
hashtree-core
content-addressed merkle tree with KV storage
-
serde-encrypted-value
A Serde Deserializer wrapper which transparently decrypts encrypted values
-
jsonwebtoken-aws-lc
Create and decode JWTs in a strongly typed way
-
turnkey_api_key_stamper
Generate signatures over Turnkey API requests using a P-256 key
-
filecoin-hashers
Hashers used in filecoin and their abstractions
-
wsc-cli
CLI tool to sign and verify WebAssembly modules
-
anyhide
Hide any data in any file(s) - steganography tool with hybrid encryption and plausible deniability
-
amll-lyric
一个歌词解析/生成模块，着重于歌词内容解析，支持多种格式
-
clock-hash
ClockHash-256: Consensus hash function for ClockinChain
-
clasp-registry
Entity registry for CLASP - persistent identity for devices, users, and services
-
tenuo
Agent Capability Flow Control - Rust core library
-
rustls-mbedpki-provider
Implements rustls PKI traits using mbedtls
-
openssl_provider_forge
FFI binding for the
CoreandProviderAPIs ofOpenSSL 3.2+ -
aranya-policy-text
The Aranya Policy Language textual types
-
kafkang
Rust client for Apache Kafka
-
prople-crypto
A set of libraries and function helpers to maintain cryptography data based on Prople system requirements
-
kylix-ml-kem
ML-KEM (FIPS 203) implementation for the Kylix post-quantum cryptography library
-
adaptive-pipeline-domain
Domain layer for optimized, adaptive pipeline - pure reusable business logic, entities, value objects, and domain services following DDD principles
-
apns-h2
Async HTTP/2 APNs client based on hyper
-
gun-rs
A realtime, decentralized, offline-first, graph data synchronization engine (Rust port)
-
laicrypto
Lemniscate-AGM Isogeny (LAI) Encryption – quantum‑resistant cryptography
-
zbus-lockstep
Keep types in lockstep with DBus XML definitions
-
etebase
client library for Etebase
-
claim169-core
ID Claim 169 QR Code decoder library
-
agntcy-slim-config
Configuration utilities
-
xllm-proxy
TCP proxy server with AES-256-GCM encryption for xllm
-
astrid-capabilities
Capability token system for Astrid secure agent runtime
-
rdedup
Data deduplication with compression and public key encryption. - binary
-
latticearc
Production-ready post-quantum cryptography. Hybrid ML-KEM+X25519 by default, all 4 NIST standards (FIPS 203–206), post-quantum TLS, and FIPS 140-3 backend — one crate, zero unsafe.
-
const-oid
Const-friendly implementation of the ISO/IEC Object Identifier (OID) standard as defined in ITU X.660, with support for BER/DER encoding/decoding as well as heapless no_std (i.e. embedded) support
-
rpgm-asset-decrypter-lib
decrypting/encrypting RPG Maker MV/MZ audio and image assets
-
okid
generating double clickable ids
-
sare-cli
Command-line interface for the SARE encryption standard
-
citadel_pqcrypto
Lower-level cryptographic library for the Citadel Protocol
-
zsign-rs
Cross-platform iOS code signing library - Rust port of zsign
-
polyhash
POLYVAL and GHASH per RFC 8452
-
blake2ya
The BLAKE2 cryptographic hash and message authentication code
-
pngyou
high-performance CLI tool to hide secret messages in a PNG file using steganography
-
tuf
Update Framework (TUF)
-
gpgme
bindings for Rust
-
icefast
A optimized parallel ICE encryption implementation with auto-dispatching logic and auto-vectorization
-
eidetica
Decentralized DB. Remember Everything. Everywhere. All At Once.
-
fips204_rs
FIPS 204: Module-Lattice-Based Digital Signature
-
wolfssl-wolfcrypt
Rust wrapper for wolfssl C library cryptographic functionality
-
sha3-circuit
Lookup based midnight-proofs (halo2 fork) implementation of keccak-f[1600] permutation and gadgets for the sha3-256 and keccak-256 hash functions
-
dtls
A pure Rust implementation of DTLS
-
secret-tree
Hierarchical secret derivation with Blake2b
-
pg_ecdsa_verify
A PostgreSQL extension for ECDSA signature verification
-
rana
Nostr public key mining tool
-
clear_on_drop
Helpers for clearing sensitive data on the stack and heap
-
srt-protocol
SRT implementation in Rust
-
hfile
command-line interface (CLI) tool for generating hash values of files
-
hypercore-protocol
Replication protocol for Hypercore feeds
-
lupin
A blazing-fast, lightweight steganography tool for concealing secret data within normal files
-
accumulators
Complete package of multiple Accumulators with Stores and hashing functions (Hashers)
-
deadrop
Zero-knowledge encrypted dead drop. One binary. One command. Gone.
-
avila-nucleus
Atomic-level operations - Foundation of Avila cryptography stack
-
tectonic-fn-dsa-kgen
FN-DSA signature scheme
-
rust-dice
Rust wrapper for dice
-
cipherrun
A fast, modular, and scalable TLS/SSL security scanner written in Rust
-
e2eel
end-to-end encryption library for key management
-
envio
A secure command-line tool for managing environment variables
-
crypto-async-rs
High-performance pure Rust cryptographic library with async streaming support
-
tls-api
TLS API without implementation
-
bjorn-acme
Building blocks for an ACME server
-
parsec-service
A language-agnostic API to secure services in a platform-agnostic way
-
memo128
encoding and decoding 128-bit data as mnemonic sentences
-
tf-registry
A high-performance, asynchronous implementation of the Terraform Provider Registry protocol, powered by Tokio and Axum
-
tailscale-localapi
Client for the Tailscale local API
-
edgee-cli
Edgee CLI to play with AI Gateway, tools, components
-
saorsa-gossip-identity
Post-quantum identity management for Saorsa Gossip: ML-DSA-65 keypairs and PeerId derivation
-
dev-tool
dev-tool(变更为mitoo)是一个Rust工具包类库，对文件、加密解密、转码、正则、线程池、sqlite等方法进行封装，组成各种Util工具类。
-
verkle_pq
Quantum-resistant Verkle tree library built on quilibrium-verkle with CRYSTALS-Dilithium3 (ML-DSA-65) post-quantum signatures and SHAKE-256 proof binding
-
stix-rs
STIX 2.1 types and helpers for Rust
-
msoffice_crypt
msoffice-crypt bindings for the Rust programming language
-
pingap-acme
ACME client for pingap
-
ferrocrypt-cli
Command-line interface for Ferrocrypt (installs the 'ferrocrypt' binary)
-
assemblyline-models
Data models for the Assemblyline malware analysis platform
-
radicle-oid
Radicle representation of Git object identifiers
-
sigstore-sign
Sigstore signature creation
-
capycrypt
An advanced cryptographic suite for secure message exchange
-
dhsd
SCION endhost SDK observability utilities
-
dkimdo
DKIM command-line tool
-
hcl
high level cryptography library ready for production use
-
wechat-oa-sdk
WeChat Official Account API SDK for Rust
-
siguldry
Sigul protocol
-
chacha20poly1305
Pure Rust implementation of the ChaCha20Poly1305 Authenticated Encryption with Additional Data Cipher (RFC 8439) with optional architecture-specific hardware acceleration. Also contains…
-
qrptonote
AES-256-GCM encrypted terminal notebook. mlock'd cleartext buffer, Argon2id KDF, prctl-hardened.
-
rustup-mirror
Setup a local rustup mirror
-
antimatter
antimatter.io Rust library for data control
-
ssss
Shamir's Secret Sharing Scheme
-
pkcs12cracker
High-performance, multi-threaded PKCS#12 password cracker supporting dictionary, pattern-based, and brute force attacks
-
dechdev_rs
by DECHDEV
-
syftbox-crypto-cli
Command-line interface for SyftBox cryptographic operations
-
mozilla/neqo-crypto
Neqo, an implementation of QUIC written in Rust
-
ssri
Various utilities for handling Subresource Integrity
-
blsttc
Pairing threshold cryptography
-
noise-rust-crypto
Wrappers of dalek and RustCrypto crates for noise-protocol
-
schnorr-rs
Schnorr Protocols
-
json_atomic
The Cryptographic Atom — JSON✯Atomic: canonicalization + BLAKE3 content addressing + DV25-Seal (Ed25519) for Signed Facts
-
oracle_omen_patches
Self-evolution patch system with gates for oracle.omen
-
secretsharing_shamir
Hardened Rust cryptographic library for Shamir's Secret Sharing with support for multiple prime sizes
-
xor-cipher
reusable and optimized XOR ciphers in Rust
-
cryptan
crypto playground (Caesar, Morse, ...)
-
frost-secp256k1-tr
A Schnorr signature scheme over the secp256k1 curve that supports FROST and Taproot
-
zopp-secrets
Secret encryption and decryption for zopp secrets manager
-
shamir-vault
Shamir's Secret Sharing algorithm
-
tiny-encrypt
tiny file encrypt tool
-
simple-cookie
Functions for creating and parsing signed & encrypted cookies
-
object-rainbow
distributed object model
-
sifredb
Field-level encryption library with envelope encryption and blind indexes
-
altcha-lib-rs
Community implementation of the Altcha library in Rust for your own server application to create and validate challenges and responses
-
promocrypt-core
Core library for cryptographically secure promotional code generation
-
argon2-kdf
Intuitive Rust bindings for Argon2
-
pqcrypto-sphincsplus
Post-Quantum Signature Scheme sphincsplus
-
ockam_api
Ockam's request-response API
-
safe_pqc_kyber
Fork of pqc_kyber with some safety fixes
-
pasta-msm
Optimized multiscalar multiplicaton for Pasta moduli for x86_64 and aarch64
-
rswidevine
Widevine CDM (Content Decryption Module) implementation in Rust
-
meritocrab-github
GitHub API integration for the Meritocrab reputation system
-
cocoon-tpm-crypto
Cocoon TPM project - cryptographic primitives
-
ncm_core
core decoder for ncmc
-
cert-helper
A helper library for managing certificates using OpenSSL, including support for generating CSRs and CRLs
-
openpgp-card
A client implementation for the OpenPGP card specification
-
totpyx
Minimal, dependency-free RFC 6238 TOTP implementation
-
rustls-jls
Rustls is a modern TLS library written in Rust
-
zymic_cli
Encrypt and decrypt files using the Zymic format
-
staticrypt
Static encryption for string literals and binary data
-
pqc-fips
Imported pqc-combo v0.1.0
-
sentinel-crypto
Cryptographic utilities for Cyberpath Sentinel, including hashing and signing
-
nats-io-jwt
Generate JWTs signed using NKEYs for use with https://nats.io
-
cipherscope
A high-performance, language-aware tool for scanning source code to detect cryptographic libraries and algorithms usage
-
garage_model
Core data model for the Garage object store
-
tink-ffi
Safe Rust bindings to Google Tink cryptography library
-
agent-vault
Zero-trust credential manager for AI agents
-
lattice-kyber
Pure Rust implementation of ML-KEM (FIPS 203) / CRYSTALS-Kyber post-quantum key encapsulation mechanism
-
rvf-crypto
RuVector Format cryptographic primitives -- SHA-3 hashing and Ed25519 signing
-
nostringer_cli
Command-line interface for the nostringer ring signature library
-
bab_rs
Bab family of hash functions, and its WILLIAM3 instantiation
-
thrussh-keys
Deal with SSH keys: load them, decrypt them, call an SSH agent
-
rvf-federation
Federated RVF transfer learning -- PII stripping, differential privacy, federated averaging
-
eenv
Encrypted Env Manager: encrypts .env files, manages examples, and enforces safety via git hooks
-
opensession-api
Shared API types, crypto, and SQL builders for opensession.io
-
atlas-rs
attested TLS (aTLS) core library for verifying TEE attestations over TLS connections
-
wechat-pay-rust-sdk-wf
微信支付 © Wechat Pay SDK Official (标准库)
-
isideload-cryptographic-message-syntax
A pure Rust implementation of Crypographic Message Syntax (RFC 5652)
-
lambda-shield
A lightweight, energy-efficient stream cipher based on the Collatz Lemma 3 residue discovery
-
symphony
Eclipse Symphony Target Provider Rust binding
-
openfhe
Rust package of the OpenFHE Fully Homomorphic Encryption Library
-
openapi-rs
A type-safe Rust client library for building, signing, and sending API requests with minimal boilerplate
-
mls-rs-crypto-hpke
HPKE implementation based on mls-rs-crypto-traits used by mls-rs
-
waproto
Protocol Buffers definitions for WhatsApp
-
esk
Encrypted Secrets Keeper with multi-target deploy
-
crypt-ro
Blazing-fast matrix-based encryption library with configurable transformations
-
sslenum
SSL certificate Extractor
-
argentum_encryption_business
Business layer of encryption
-
ezcheck
lightweight, cross-platform, and high-performance tool for calculating, comparing, and verifying hash of strings and files
-
graviola
modern, fast cryptography library
-
midnight-ledger
transaction format and semantics for Midnight
-
pkcrack
Known-plaintext attack against PkZip encryption
-
cmn
accessing a collection of mathematical and cryptographic constants
-
mini-sign
minisign in rust
-
spartan
High-speed zkSNARKs without trusted setup
-
a2
A native, asynchronous Apple push notification client
-
locker-backend
Self-hosted digital encrypted vault with immutable consent receipts for personal documents
-
donut-cli
CLI tool for libdonut-rs
-
zhc_langs
Language dialects for the ZHC compiler (IOP, HOP, DOP)
-
vrf-rfc9381
VRFs (Verifiable Random Functions) as described in RFC9381
-
atrium-crypto
Cryptographic library providing basic helpers for AT Protocol
-
jmix-rs
JMIX (JSON Medical Interchange) format - secure medical data exchange with cryptographic features
-
mpc-relay
Noise protocol websocket relay for MPC/TSS applications
-
btls
BoringSSL bindings
-
drand_core
A drand client library
-
jubjub-elgamal
ElGamal encryption scheme implemented on the JubJub curve with support for zero-knowledge circuits
-
corevpn-crypto
Cryptographic primitives for CoreVPN - secure key exchange, encryption, and certificate handling
-
spideroak-crypto
SpiderOak's cryptography library
-
cfun
Tidy up common functions
-
sodalite
Tweetnacl in pure rust with no std dependency
-
rsa-magic-public-key
Converting between the Magic Public Key format and a RustCrypto RSA type
-
rasn-cms
Data types for handling Cryptographic Message Syntax
-
tink-aead
AEAD functionality for Rust port of Google's Tink cryptography library
-
yamid
Machine ID
-
herolib-crypt
secure asymmetric cryptography: signing and encryption using Ed25519
-
sm-crypto
China's Standards of Encryption Algorithms(SM2/SM3/SM4)
-
confidential-ml-transport
Attestation-bound encrypted tensor transport for confidential ML inference
-
cryptid-rs
encrypt and decrypt integer IDs to URL safe strings
-
feistelnet
Symetric block split Feistel Network
-
cnfy-uint
Zero-dependency 256-bit unsigned integer arithmetic for cryptographic applications
-
arx-kw
ARX-KW-8-2-4 Key Wrap constructions
-
rust-secure-logger
Memory-safe security logging for financial systems and critical infrastructure with encryption, log forwarding, and compliance automation
-
oxitoken
Fastest and most secure JWT encoding/validation library for Rust. Fully supports custom header/claims structs, an extendable validation pipeline, and is crypto-backend agnostic (built-in…
-
crabgraph
A safe, ergonomic, high-performance cryptographic library for Rust built on audited primitives
-
blake2b-rs
Rust bindings for the official Blake2b C implementation
-
jtm
Just The Math Crypto Library
-
kuska-handshake
Secure Scuttlebutt handshake + boxstream library
-
sm9
SM9 (OSCCA GM/T 0044-2016), identity-based cryptography
-
cryptr
encrypted (streaming) values
-
arcis-compiler
A framework for writing secure multi-party computation (MPC) circuits to be executed on the Arcium network
-
a3s-box-runtime
MicroVM runtime engine — VM lifecycle, OCI images, attestation, networking
-
chamber-tui
A secure, local-first secrets manager with encrypted storage and zero-knowledge architecture
-
codive-tunnel
Shared types and cryptography for secure tunneling
-
chachacha
SIMD optimized implementations of the Chacha stream cipher
-
ossl
OpenSSL version 3+ bindings to modern EVP APIs
-
hexz-common
Common utilities and configuration for Hexz
-
pam-ssh-agent
A PAM module that authenticates using the ssh-agent
-
axial
All in One web framework for Rust
-
authenticated-pseudonyms
anonymous credentials
-
tuftool
creating and signing The Update Framework (TUF) repositories
-
efficient-sm2
China's Standards of Signature Algorithms (SM2)
-
ligerito-reed-solomon
Reed-Solomon erasure coding for Ligerito over binary fields
-
rssh-core
Core cryptography, encrypted key storage, and RAM key management for rssh-agent
-
xwt-web
xwt that runs in the browser. Powered by wasm-bindgen and web-sys
-
rust_jarm
JARM fingerprinting in native Rust
-
pkcs8
Pure Rust implementation of Public-Key Cryptography Standards (PKCS) #8: Private-Key Information Syntax Specification (RFC 5208), with additional support for PKCS#8v2 asymmetric key packages (RFC 5958)
-
keeper-secrets-manager-core
Rust SDK for Keeper Secrets Manager
-
payload-loader
Production-ready Rust loader with cryptography, configuration, and security features
-
secp
A flexible and secure secp256k1 elliptic curve math library with constant-time support and superb ergonomics
-
ntdb_unwrap
Decrypt/decoded NTQQ database files
-
bitrouter-accounts
BitRouter account and session management
-
gcm_rs
AES-256 GCM
-
subtle-encoding
Encoders and decoders for common data encodings (base64, bech32, hex) which avoid data-dependent branching/table lookups and therefore provide "best effort" constant time. Useful for encoding/decoding…
-
bupstash
Easy and efficient encrypted backups
-
paillier-zk
ZK-proofs for Paillier encryption scheme
-
mxlink
connecting (linking) to the Matrix Client Server API (for building bots, etc.)
-
kmip-protocol
KMIP protocol object (de)serialization
-
dome-ward
Injection detection, schema integrity, and heuristic analysis for MCPDome
-
fi-digital-signatures
Cryptography library for rust and WASM
-
acme2-eab
A Tokio and OpenSSL based ACMEv2 client
-
paks
A light-weight encrypted archive inspired by the Quake PAK format
-
encodex
cryptanalysis tool for legacy and modern codes, ciphers and hashes
-
datex-crypto-facade
DATEX Crypto Trait used by the datex crate
-
secry
AES-256-GCM / ChaCha20-Poly1305 / XChaCha20-Poly1305 token encryption CLI
-
identity_ecdsa_verifier
JWS ECDSA signature verification for IOTA Identity
-
ps-datachunk
Chunk-based data encrypter
-
srp6
A safe implementation of the secure remote password authentication and key-exchange protocol - SRP version 6 and 6a
-
cipher-salad
Implementations of classic ciphers
-
boring-sys
FFI bindings to BoringSSL
-
uselesskey
Deterministic cryptographic key and certificate fixtures for Rust tests. Seed-stable, cached, scanner-safe.
-
chip_as_code
Semantic Chips — deterministic boolean circuits as text DNA. Parse, evaluate, evolve, and prove policy gates with No-Guess constitutional checkpoints.
-
sunscreen
A Fully Homomorphic Encryption (FHE) compiler supporting the Brakerski/Fan-Vercauteren (BFV) scheme
-
kcr_kustomize_toolkit_fluxcd_io
Kubernetes Custom Resource Bindings
-
wa-rs-binary
Binary data and constants for WhatsApp protocol
-
shippo_git
Git helpers for Shippo
-
prefix-file-tree
Predictable file directory structures
-
libsodium-rs
A comprehensive, idiomatic Rust wrapper for libsodium, providing a safe and ergonomic API for cryptographic operations
-
commucat-federation
Federation event signing and verification for CommuCat domains
-
sshx
A secure web-based, collaborative terminal
-
cryprot-core
Core primitives for cryptographic protocol implementations
-
cargocrypt
Zero-config cryptographic operations for Rust projects with HIVE MIND collective intelligence
-
tequel-rs
A multi-layered byte-level encryption library built in Rust
-
spake2-conflux
The SPAKE2 password-authenticated key-exchange algorithm
-
pq-jwt
Post-Quantum JWT implementation using ML-DSA (FIPS 204) signatures for quantum-resistant authentication
-
kerberos_crypto
Cryptography algorithms for Kerberos
-
better-blockmap
Generate better blockmap files for electron-builder
-
rs_tfhe
A high-performance Rust implementation of TFHE (Torus Fully Homomorphic Encryption) with advanced programmable bootstrapping capabilities
-
libkeri
KERI (Key Event Receipt Infrastructure)
-
libreofficekit
in Rust
-
zbx_sender
Zabbix Sender Client
-
datapipe
Stream data from here to there
-
kcr_fluentd_fluent_io
Kubernetes Custom Resource Bindings
-
agentic-identity-mcp
MCP server for AgenticIdentity — expose identity operations to AI agents
-
rust-padbuster
It's a port of python-paddingoracle (https://github.com/mwielgoszewski/python-paddingoracle)
-
interactsh-rs
client library for working with Interact.sh servers
-
bitwark
Empowering secure digital interactions with robust binary token management and dynamic rolling keys
-
ciphercore-utils
Convenience functions and wrappers used by CipherCore crates
-
swc_confidential
AST transforms visitor for swc-confidential
-
chuchi-crypto
Crypto library providing encryption and signing
-
pubky-messenger
private messaging using Pubky
-
n01d-forge
Secure Cross-Platform Image Burner with AES-256 Encryption - Write ISOs to USB drives with optional encryption
-
mogh_server
Configurable axum server including TLS, Session, CORS, common security headers, and static file hosting
-
kiwavi
A secure TOTP-based key derivation system using user salts
-
ps3decrs
PS3 ISO decryption tool
-
bark-dev
bark(receive notify on IOS devices)
-
taceo-groth16-material
A collection of utilities for generating witnesses and proofs for Groth16 circuits. Supports Circom circuits for now.
-
secra-pluginctl
生产级插件打包工具 - 安全可信的插件产物管理（支持加密、签名、并发处理）
-
yunli
Additional utilities for working with Yunli
-
redoubt-aead
AEGIS-128L and XChaCha20-Poly1305 AEAD with zeroization
-
aes-wasm
AES-GCM, AES-OCB, AEGIS, AES-CTR, CMAC-AES for WebAssembly
-
sunscreen_math
contains GPU implementations that support the Sunscreen compiler
-
libtls
Rust bindings for LibreSSL's libtls
-
xcalgo
XCA: Topological Data Analysis Cryptosystem - Novel encryption based on graph homomorphisms and persistent homology
-
short-crypt
ShortCrypt is a very simple encryption library, which aims to encrypt any data into something random at first glance
-
webrtc-srtp
A pure Rust implementation of SRTP
-
jose
A JSON Object Signing and Encryption implementation
-
svalinn
A unified, safety-critical hybrid cryptographic library (X25519, ML-KEM, Ed25519, ML-DSA, SLH-DSA)
-
jwt-encde
GUI JWT encoder / decoder - Local, private, easy
-
custom-utils
Provide customized tools based on features
-
taceo-eddsa-babyjubjub
An EdDSA signature scheme implementation over the Baby Jubjub elliptic curve using Poseidon2, useful for SNARK-friendliness
-
vigenere-demo
优雅的维吉尼亚密码实现，采用泛型设计，支持自定义字符集
-
snippet-agent
Codebase parsing tool. It aggregates code (i.e. RAG) as an input to LLMs
-
hmac-sha1
wrapper around the RustCrypto hmac and sha1 crates for simple HMAC-SHA1 generation
-
prisma-decrypt
CLI tool for super fast prisma-field-encryption column decryption (clock decryption)
-
fpe
Format-preserving encryption
-
dog-auth-local
Local (username/password) authentication strategy for DogRS
-
mozilla-root-ca
Mozilla Root CA list from https://curl.se/ca/cacert.pem
-
sha2-const-stable
const fn implementation of the SHA-2 family of hash functions. Based on sha2-const, but updated to use only stable rust
-
debsign-rs
Sign Debian packages with GPG
-
vwh
Cryptographic accountability tool for verifying digital presence
-
backblaze-b2-client
Backblaze B2 Client for Rust
-
kyu-extension
Extension trait and procedure signatures for KyuGraph plugins
-
logline
full stack bundle (TDLN + JSON✯Atomic + LogLine core + LLLV) with CLI
-
tesser-broker
Broker abstraction and execution client interfaces for Tesser
-
gxt
Minimal, encrypted, signed and copy-pasteable tokens for manual data exchange between games
-
libslug
Cryptography Intended For Slug20 That Supports X59 Certificate Format and Post-Quantum Cryptography
-
faest
Pure Rust implementation of the FAEST post-quantum secure digital signature scheme
-
light-poseidon-nostd
Poseidon hash implementation in Rust with no_std support (fork of light-poseidon)
-
verifyos-cli
A pure Rust CLI tool to scan Apple app bundles for App Store rejection risks before submission
-
nil-crypto
Multiplayer strategy game
-
iscc-lib
High-performance Rust implementation of ISO 24138:2024 (ISCC)
-
ms-offcrypto-writer
Encrypting ECMA376/OOXML files with agile encryption as described in MS-OFFCRYPTO
-
jax-common
Core data structures and cryptography for JaxBucket - end-to-end encrypted P2P storage
-
tor-client-lib
A client library for the Tor API
-
trust_pdf
Verifies signed PDFs against the originals, checking for sneaky modifications
-
csrf
CSRF protection primitives
-
rust-kpdb
reading/writing KeePass 2 and KeePassX databases
-
wstep-rs
[MS-WSTEP] WS-Trust X.509v3 Token Enrollment Extensions protocol
-
flp-saml2
SAML2 for Rust
-
palcrypto-rs
A crypto lib
-
qssl
Patent-free post-quantum TLS with SPHINCS+ KEM, Falcon signatures, and traffic analysis resistance. NIST FIPS 203/204/205 compliant.
-
orbis-pkg
parsing and extracting PlayStation 4 PKG files
-
rswxpay
WeChat Pay V3 API SDK for Rust — pure Rust crypto, no OpenSSL
-
rustcube
Multi-password, order-dependent, streaming encryption/decryption tool with secure memory handling
-
thash
A terminal program for hashing with many algorithms and many output formats, and recursive hashing support
-
fog-crypto
signing & encryption easier for small, independent blocks of bytes. Primary use-case is the fog-pack crate.
-
hashtree-cli
Hashtree daemon and CLI - content-addressed storage with P2P sync
-
fn-dsa
signature scheme
-
age-plugin-gpg
Age plugin that uses recipients/identities from gpg-agent, making it possible to use gpg smartcards
-
rotorix-core
Enigma-inspired transformation pipeline with explicit state and pluggable components
-
tropic01
An embedded-hal driver for the TROPIC01 chip by TropicSquare
-
nu_plugin_hmac
A HMAC sealing plugin for Nushell
-
crypt4gh
Encryption and decryption implementation of the Crypt4GH encryption format
-
sharrd
A secure seed phrase manager using Shamir's Secret Sharing
-
oma-repo-verify
Handle APT repository verify library
-
strong-box
Strong, ergonomic encryption for non-cryptographers
-
sssui-mpc-rs
shamir-secret-sharing for SUI chain
-
pmv_encryption_rs
PersonalMediaVault encrypted storage model. This library allows to encrypt and decrypt data, and also read ans write files in the same format PersonalMediaVault uses.
-
slhdsa-c-rs
FFI bindings for the slhdsa-c SLH-DSA implementation
-
roughenough-keys
Roughenough key material handling with multiple secure storage backends
-
opentalk-types-signaling-e2ee
Signaling types for the OpenTalk e2ee module
-
rustic_cdc
performing Content-Defined Chunking (CDC) on data streams
-
dgsp
Efficient Scalable Post-Quantum Fully-Dynamic Group Signature Scheme Using SPHINCS+
-
uesugi-rs
Uesugi cipher implementation using the iroha table
-
crypta
Gestor de secretos moderno escrito en Rust puro, compatible con SOPS/Age para encriptación de secretos y sincronización automática con Git
-
libcrux-platform
Platform detection crate for libcrux
-
oniongen-rs
A v3 .onion vanity URL generator written in Rust
-
rasn-pkix
Data types for handling Public Key Infrastructure (PKIX) objects
-
rustls-channel-resolver
single-cert channel-ish rustls resolver for live-reloading certificate files
-
enigmar
High-performance Enigma Machine simulator (M3/M4) with Python bindings
-
rommer
A powerful tool designed to customize Android ROM ZIP files without building from source
-
enigma-simulator
An absurdly fast and highly flexible Enigma machine simulation, encryption, and decryption library
-
routex-settlement
routex settlement
-
p2panda-encryption
Decentralised data- and message encryption for groups with post-compromise security and optional forward secrecy
-
sl-mpc-mate
secure multi-party computation
-
nix-base32
nix (as in NixOS) compatible base32 encoding
-
neocities-sync
Sync files to neocities while doing the least amount of API requests
-
vitaminc
cryptographic suite by CipherStash
-
rust_ev_system_library
E-Voting system library functionalities for the Verifier
-
cypheron-core
Post-quantum cryptography library with NIST-standardized quantum-resistant algorithms
-
aerovault
Military-grade encrypted vault format — AES-256-GCM-SIV, Argon2id, AES-KW, HMAC-SHA512
-
easy_password
Easy password hashing (includes bcrypt)
-
rustcrypt
Macro-first encryption and obfuscation library for Rust
-
bergshamra-crypto
Cryptographic algorithm implementations for Bergshamra XML Security library
-
aruna-file
component for encrypting / compressing .aruna files, including specification
-
reqsign-huaweicloud-obs
Huawei Cloud OBS signing implementation for reqsign
-
stackforge-core
Core networking logic for Stackforge
-
age-plugin-xwing
X-Wing plugin for age clients
-
hashmoney
hashcash implementation, with wasm support, variable date width and multiple minting strategies
-
elara-crypto
ELARA Protocol - Cryptographic engine with identity binding, multi-ratchet encryption, and post-quantum ready security
-
affinidi-data-integrity
W3C Data Integrity Implementation
-
lambdaworks-gpu
Modular math library for cryptography - GPU implementation
-
crypto-auditing-log-parser
Event log parser for crypto-auditing project
-
streaming-crypto
Cryptographic library with optional FFI and Python bindings
-
ecdsa
Pure Rust implementation of the Elliptic Curve Digital Signature Algorithm (ECDSA) as specified in FIPS 186-4 (Digital Signature Standard), providing RFC6979 deterministic signatures as well as support for added entropy
-
chalamet_pir
Stateful, Single-Server Private Information Retrieval for Key-Value Databases
-
luks
Pure-Rust Library for the Linux Unified Key Setup
-
in-toto
Library for in-toto
-
ghostkey
A command-line tool for Freenet Ghost Key operations
-
boring-vendit
BoringSSL bindings
-
crypto_bastion
Hardened post-quantum cryptographic primitives with zero-trust architecture
-
sigstore-tsa
RFC 3161 Time-Stamp Protocol client for Sigstore
-
jdt_activity_pub
ActivityPub is a set of structs and enums used to facilitate the operations of ActivityPub servers and clients
-
saferet
Secure types for handling sensitive data in Rust with automatic memory cleanup and protection against accidental exposure
-
trustless-protocol
Protocol utilities for trustless
-
sentrystr
Core library for publishing Sentry-like events to Nostr network
-
keystore-rs
securely generating, storing, and managing cryptographic keys with support for macOS and Linux keychain integration
-
roc-cert
A Rust-based CLI tool for automatic SSL certificate renewal
-
qos_crypto
Cryptographic primitives for use with QuorumOS
-
polygraphia
A comprehensive library for classical and modern cryptographic algorithms
-
arachnid
aims to be a complete offensive security suite written for Rust
-
soft-fido2-crypto
Cryptographic utilities for the soft-fido2 FIDO2/WebAuthn authenticator
-
crab-cryptor
file cryptor
-
nginx-src
Source of NGINX
-
thrussh-libsodium
Straightforward bindings to libsodium
-
decryptor_s2
cli for decrpting and encrpting S2 10th Anniversary assets
-
aegis
authenticated ciphers (AEGIS-128, AEGIS-256, AEGIS-128X, AEGIS-256X)
-
rasn-ocsp
Data types for Online Certificate Status Protocol
-
pqctracer
A reusable TLS-aware HTTP client that captures post-quantum cryptography handshake metadata
-
threshold-pairing
Pairing threshold cryptography
-
sigma_fun
A framework for making Sigma protocols fun!
-
az-snp-vtpm
vTPM based SEV-SNP attestation for Azure Confidential VMs
-
dco3_crypto
Symmetric and asymmetric encryption for DRACOON in Rust
-
ltk_pki
Support code for verifying League Toolkit mod signatures
-
wasmsign2
WebAssembly modules signatures proposal
-
sgx_pkix
TLS Certificate encoding and decoding helpers for the SGX environment
-
native-pkcs11
Cross-platform PKCS#11 module written in rust. Can be extended with custom credential backends.
-
saku-sync
Sync engine for the saku ecosystem
-
pqxdh-zoa
generic implementation of Signal's PQXDH
-
tbz-airlock
TIBET Airlock: sandboxed decompression with eBPF kernel enforcement
-
bergshamra-xml
XML DOM abstraction for Bergshamra XML Security library
-
lets-encrypt-warp
letsencrypt.org with warp
-
ecies_25519
Cross-platform Elliptic Curve Integrated Encryption Scheme (ECIES) using X25519, AES-256-GCM, and HKDF-SHA256
-
cryptic
encryption/decryption application. You can use this to encrypt and decrypt files using a password
-
git-mine
Mine your favorite git commit hashes
-
pqcrypto
Post-Quantum cryptographic primitives
-
xdid
DID library
-
oximedia-drm
DRM and encryption support for OxiMedia streaming
-
turtls
A TLS library
-
jacs
JACS JSON AI Communication Standard
-
lifx-rs
A synchronous + asynchronous library for communicating with the official LIFX-API and the unoffical offline API
-
recs_lib
A confusing library for encrypting files and text
-
olm-sys
Low level binding for libolm
-
azure_svc_keyvault
generated REST API bindings
-
freezeout-core
Freezeout Poker core types
-
tokio-boring-vendit
SSL streams for Tokio backed by BoringSSL
-
regitry-code
是一个使用 SM2、SM3 国密算法进行加密、解密和生成注册码、任务号、密码的类库
-
keyhive_core
Core Beehive types and functions
-
hypercore_handshake
Used for establishing an encrypted connection between hypercore peers
-
sct
Certificate transparency SCT verification library
-
blake2-rfc
A pure Rust implementation of BLAKE2 based on RFC 7693
-
bromberg_sl2
Cayley hashing as in 'Navigating in the Cayley Graph of SL₂(𝔽ₚ)'
-
secret-vault-value
secure and serializable type to store and control secret/sensitive values
-
libsm
China's Standards of Encryption Algorithms (SM2/3/4)
-
qubip_aurora
A framework to build OpenSSL Providers tailored for the transition to post-quantum cryptography
-
koi-crypto
Key management, TOTP, signing, and encryption primitives for local network trust
-
deno_tls
TLS for Deno
-
saku-crypto
End-to-end encryption for the saku sync system
-
tokio-nats
Async-await ready NATS library
-
scromble
A no-nonsense single-file encryptor with data authentication
-
gitoid
Git Object Identifiers in Rust
-
oxidite-security
Security utilities for Oxidite (CSRF, XSS protection, encryption)
-
bao1x-api
Baochip-1x API Crate
-
deno_native_certs
deno-native-certs loads native certificate store into rustls
-
self_crypto_key
self-modifying encrypted key storage in binaries
-
safehold
A secure cross-platform environment variable manager with CLI and optional GUI for encrypted storage of secrets and config
-
rzbackup
RZBackup
-
crypt-keeper
A cli helper for managing, encrypting and decrypting files
-
jacs-mcp
MCP server for JACS: data provenance and cryptographic signing of agent state
-
signature_bbs_plus
The Ockam BBS+ signature impementation
-
rekrypt
Professional proxy re-encryption library based on Curve25519 for Rust and WebAssembly
-
django-rs-core
Core types, settings, app registry, signals, and error types for django-rs
-
fast-paillier
Optimized Paillier encryption scheme
-
nu_plugin_secret
Production-grade secret handling plugin for Nushell with secure CustomValue types that prevent accidental exposure of sensitive data
-
ez-hash
Ergonomic hashing helpers with a simple Hashable API and optional algorithm features
-
yourevalid
Validation type and trait. For internal use in polyproto-related crates, currently
-
goldilocks-crypto
ECgFp5 elliptic curve and Schnorr signatures over the Goldilocks field
-
rsrp-pqcrypto
Hybrid post-quantum cryptographic primitives for deterministic proof systems
-
enva-shared
Shared types and utilities for enva
-
cait_sith_keplr
Threshold ECDSA via Triples
-
shosha256
A sha256 previewer I made just for fun
-
lb-rs
interacting with your lockbook
-
card-cli
FIDO(U2F, WebAuthn), YubiKey, OpenPGP command line tool
-
cipher_identifier
identifying classical ciphers based on statistical analysis
-
printwell
HTML to PDF conversion using Chromium's rendering libraries
-
keyquorum-split
Split a secret into Shamir shares for use with keyquorum
-
proto-blue-crypto
AT Protocol cryptographic operations: P-256, K-256 signing, did:key, SHA-256
-
lsmtree
Implements a Sparse Merkle tree for a key-value store. The tree implements the same optimisations specified in the libra whitepaper, to reduce the number of hash operations required per tree operation to O(k)…
-
marsupial
safe bindings to the xkcp/k12 implementation of the kangarootwelve hash function
-
relay-agent-entity
Enitity definitions for the Relay Mail Agent
-
dee-ssl
TLS certificate inspection CLI for domains
-
mykey
MIKEY (RFC 3830) — Multimedia Internet KEYing for SRTP key exchange
-
securepass
A password generator and balancer library in Rust
-
bbs-accum
accumulator commitment scheme by Jutla et al
-
sigserlic
Combine serde with signify
-
libqabu
A auditable and versitile Rust cryptography library
-
shaha
Hash database builder and reverse lookup tool
-
sorted-iter
Typesafe extensions for sorted iterators, including set and relational operations
-
runar_node
Runar Node implementation
-
crowenv
— Smart secrets. Like a crow. 🐦 AES-256-GCM encrypted .cenv replacement for plain .env files
-
http-sig
IETF draft 'Signing HTTP Messages'
-
tls-friend
A friendly library to make dealing with TLS easier
-
rand-esdm
interface to ESDM RNG server
-
compact_argon2
Thin wrapper around the argon2 crate to improve ergonomics and provide a smaller serialization format
-
seal-crypto
providing pure cryptographic capability abstractions (traits) and implementations for the seal-kit ecosystem
-
pqc_dilithium
A post-quantum cryptographic signature scheme based on the hardness of lattice problems over module lattices
-
onepass-base
Basic formatting and word lists for onepass-seed
-
google/ctap2
OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards
-
yara-sys
Native bindings to the libyara library
-
abcrypt
encrypted data format
-
blake2
hash functions
-
pwhash
A collection of password hashing routines in pure Rust
-
nam-blst
Bindings for blst BLS12-381 library
-
xcqa
Dictionary-based cryptosystem with zero-knowledge proof signatures
-
acme-lib
requesting certificates from an ACME provider
-
kotoba-cid
Content ID (CID) system for Kotoba graph processing
-
r1cs
building R1CS gadgets
-
lattice-slh-dsa
Pure Rust implementation of SLH-DSA (FIPS 205) / SPHINCS+ post-quantum digital signature scheme
-
ristretto_pom
Ristretto Package Object Model
-
commucat-crypto
Noise handshake helpers and Ed25519 tooling for CommuCat
-
irox-cryptids
IROX Cryptographic Primitives - probably very hazardous
-
voidio
VOID I/O - High-performance Cross-platform I/O for Rust
-
tafrah-hqc
HQC (FIPS 207) scaffolding for the Tafrah PQC library
-
paseto-core
Core traits and encodings for PASETO/PASERK
-
s5_core
types and traits shared by all S5 crates
-
nostr-double-ratchet
Nostr double ratchet library for Rust
-
aqua-registry
Aqua registry backend for mise
-
ai_hash
hashing helpers supporting sgd sharding
-
SaltPass
A deterministic password generator based on cryptographic algorithms
-
crypto2
cryptographic algorithms
-
sad-rsa
Hardened pure Rust RSA implementation with Marvin attack mitigation
-
sm4-ff1
SM4 FF1 implementation
-
nekocat
-
securestore
API for creating or decrypting user secrets
-
reishi-quinn
Noise IK handshake integration for quinn with QUIC key derivation
-
zkcg-circuits
Zero-knowledge circuits for the ZKCG protocol
-
aes-prng
Pseudo-random number generator based on AES
-
mnm
Mnemonic sentences for BitTorrent info-hashes
-
sosistab2
An obfuscated datagram transport for horrible networks
-
rustls-mbedtls-provider-utils
code used in mbedtls based provider for rustls
-
xrc_cli
A cli for multi-threaded encryption/decryption of files/folder using bitwise xor
-
rust-crypto-utils
Memory-safe cryptographic utilities for secure key handling, encryption, and post-quantum readiness
-
sha3-utils
SHA-3 utilities
-
sentc
Encryption and group/user management sdk. Easy-to-use encryption with post quantum cryptography.
-
libkrimes
A pure rust, minimal kerberos library
-
wots-rs
Winternitz One-time Signature Scheme made using Rust
-
theoros
LinkedIn feed digest — daily scrape, Claude filter, vault note
-
racme
Rust 庫，提供與 ACME 協議互動的功能，支援自動化憑證管理，適用於 Let's Encrypt 等 CA。
-
crypto-permutation
Permutation based cryptography framework; core traits
-
omnibor-cli
CLI for working with OmniBOR Identifiers and Manifests
-
squint
Encode sequential integer ids as random looking strings
-
bls-signatures-evm
BLS signatures in Rust for the EVM
-
canaad-cli
CLI tool for AAD canonicalization per RFC 8785
-
crypter
A AES-GCM 256 encryption and decryption library
-
librustysigs
Signatures: A Secure Code Signing System
-
rns-crypto
Cryptographic primitives for the Reticulum Network Stack
-
xs_curve25519-dalek
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
aes-gcm
Pure Rust implementation of the AES-GCM (Galois/Counter Mode) Authenticated Encryption with Associated Data (AEAD) Cipher with optional architecture-specific hardware acceleration
-
k12sum
A command line implementation of the KangarooTwelve hash function
-
avila-primitives
Big integer primitives (U256, U512, U1024, U2048, U4096) - Built on avila-nucleus
-
monocypher
Bindings for the monocypher C library
-
relay-lib
The Relay library
-
cutil
A complete internal PKI toolkit for Rust
-
ps-cypher
Chacha-based data cypher
-
dec-cryptor
A high-performance file encryption tool using AES-256-CTR and Argon2id
-
ark-ed-on-bw6-761
A Twisted Edwards curve defined over the scalar field of the BW6-761 curve
-
rejson
A command line utility for managing secrets
-
dalek-ff-group
ff/group bindings around curve25519-dalek
-
monerochan-recursion-gnark-ffi
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
signedshot-validator
Validator for SignedShot media authenticity proofs
-
r-license
An industrial-grade offline software licensing system with hardware binding and anti-rollback protection
-
deoxysii
Deoxys-II-256-128 MRAE primitives for Rust
-
foa
An experimental IEEE 802.11 (WLAN) stack for rust on the ESP32
-
clasp-caps
Capability tokens for CLASP protocol (delegatable Ed25519)
-
paillier-common
paillier over bigint traits provided by rust-bigint
-
gen-key
Small CLI tool for generating RSA and HMAC keys
-
xitca-tls
tls utility for xitca
-
rust-native-obf
advanced native obfuscation library for rust
-
tsumiki-pkix-types
PKIX types (AlgorithmIdentifier, Name, etc.) for X.509 certificates
-
ytdlp-ejs
ejs
-
keyper
TUI password manager
-
gpg-expire-warner
Prints a warning when GPG keys are about to expire
-
rssh-types
Shared protocol and domain types for rssh-agent
-
fss-rs
Function secret sharing including distributed comparison & point functions
-
midnight-circuits
Circuit and gadget implementations for Midnight zero-knowledge proofs
-
paas-api
Common API for PAAS server and client
-
cryprot-ot
Oblivious Transfer extension protocols
-
simple-rijndael
Pure Rust, simple implementation of the rijndael-cbc algorithm for osu! score decryption or encryption
-
cdumay_sodium
sodium
-
enject
Hide .env secrets from AI agents. Stores secrets in an encrypted local store and injects them into subprocesses at runtime — your .env file contains only symbolic references, never real values.
-
uts-bmt
Binary Merkle Tree implementation for Universal Timestamps in Rust
-
hmac
Generic implementation of Hash-based Message Authentication Code (HMAC)
-
gloves
seamless secret manager and handoff
-
xaman
CLI tool for Aman integrity system
-
super_simple_jwt
A super simple implementation of JWTs in rust!
-
moose
Encrypted learning and data processing framework
-
balanced-tree-index
constant-time manipulation of a complete binary tree with a flat in-memory representation
-
ntied
stable messenger
-
easydes
Encrypt with DES easily in Rust
-
hanzo-pqc
Post-quantum cryptography primitives (ML-KEM, ML-DSA, SLH-DSA) for Hanzo ecosystem
-
const-siphasher
SipHash-2-4, SipHash-1-3 and 128-bit variants in pure Rust
-
hbs-lms
Pure Rust implementation of the Leighton Micali Signature scheme with support for key generation, signature generation and verification
-
prompt-store
Prompt Store is a secure, encrypted CLI and Rust library for managing, deploying, and orchestrating AI prompts using workspaces and Git-based workflows
-
pkcs11-bindings
Rust bindings for the PKCS#11 specification
-
ctf_party
CTF Party is a tool that provides various cryptographic and network utilities for CTF (Capture The Flag) competitions. It is written in Rust and offers a command-line interface for easy usage…
-
dgc
A parser and validator for the EU Digital Green Certificate (dgc) a.k.a. greenpass
-
lafs
Least-Authority File Store utils
-
turbomcp-dpop
DPoP (RFC 9449) implementation for TurboMCP with HSM support
-
ec-gpu-gen
Code generator for field and eliptic curve operations on the GPUs
-
ed25519-dalek-hpke
HPKE encryption/decryption using
ed25519-dalekkeys via automatic X25519 conversion -
sigh
HTTP signature generation and verification for ActivityPub, using OpenSSL
-
openentropy-wasm
WebAssembly entropy collection using browser APIs — timing jitter, crypto.getRandomValues(), and scheduling noise
-
rpgpie
Experimental high level API for rPGP
-
quantumapi
Official Rust SDK for QuantumAPI - European quantum-safe encryption and identity platform
-
rust_code_obfuscator
easily obfuscate strings and control-flow using cryptify lib
-
abao
BLAKE3 verified streaming
-
rpgmad-lib
decrypting/encrypting RPG Maker
rgssarchives -
boytacean-encoding
Codecs library for Boytacen
-
shadow-crypt
Secure password-based file encryption with filename obfuscation
-
tor-checkable
Types to ensure that signed or time-bound data is validated before use
-
tameshi
(試し) - Deterministic integrity attestation library for infrastructure layers
-
sha2raw
SHA-2 hash function
-
midnight-base-crypto
foundational cryptographic primitives for Midnight's ledger
-
mdf
MDFive, simple md5 tool
-
yedad_ladder
Core library for Yedad ladder hash algorithm - digital signature based on double SHA-256 for decentralized networks
-
wa-rs-noise
Noise Protocol implementation for WhatsApp with AES-256-GCM
-
abrute
AESCrypt Brute force attempter
-
winternitz-ots
Interacting With Winternitz One-Time Signatures, a Hash-Based, Post-Quantum Digital Signature Scheme Based On Lamport Signatures. This implementation uses the hash function Blake2b for all hashing…
-
cose_minicbor
no_std-friendly Rust crate for decoding and verifying COSE (CBOR Object Signing and Encryption) messages with optional cryptographic backends
-
keysmith
Create keys, uuid's, timestamps, and more
-
rfc2289-otp
One Time Passwords (OTP) per IETF RFC 2289
-
efr
efr (EFile Rust)
-
am-core
Core library for agent-to-agent encrypted messaging over Nostr
-
edgee-proxy
Edgee proxy
-
false-bottom
A deniable encryption scheme
-
ascon-hash
Ascon-Hash256 and Ascon-XOF128
-
omit
Omit allows you to securely share environment variables and secrets using a single key
-
hotboot
Secure private data with a weak secret, using as a protection access control of the system and defense especially designed against cold-boot attacks
-
isideload
Sideload iOS/iPadOS applications
-
http-signature-normalization-actix-extractor
An HTTP Signatures library that leaves the signing to you
-
ssi-bbs
The BBS Signature Scheme implementation for SSI
-
brass-aphid-wire-decryption
do runtime decryption of TLS conversations, and helpers for popular TLS libraries
-
kylix-pqc
Post-quantum cryptography library implementing NIST FIPS standards
-
uniaz
Unify the Unicode chars into A-Z sequence
-
itsdangerous
Rust port of the popular itsdangerous python library for signing strings and sending them over untrusted channels
-
kzen-paillier
Efficient pure-Rust library for the Paillier partially homomorphic encryption scheme
-
sntrup761
Streamline NTRU Prime algorithm
-
libsignal-dezire
signal protocol
-
feistel-permutation-rs
Constant time, constant space permutations with Feistel Network ciphers
-
agentpin
Domain-anchored cryptographic identity protocol for AI agents
-
sc_drbg
Subset Counter-Based Deterministic Random Bit Generator
-
isideload-x509-certificate
X.509 certificate parser and utility functionality
-
weapay
SDK for Alipay and WeChat Pay based on v3
-
equix
Asymmetric function for client puzzle protocols
-
classical-ciphers
Classical cipher implementations: Caesar, Vigenère, Atbash, XOR
-
isideload-apple-codesign
Pure Rust interface to code signing on Apple platforms
-
ifd-jcecard
PC/SC IFD Handler for jcecard virtual OpenPGP and PIV smart card
-
df1t-cyph
minimal rust encryption algorithm made by a solid structured sequential algorithms without any external cryptographic crates
-
hunt-query
Structured querying and timeline reconstruction for clawdstrike hunt
-
comprehensive_tls
A harness for creating consistently-shaped servers will less boilerplate
-
uselesskey-x509
X.509 self-signed and chain certificate fixtures with negative variants for tests
-
subduction_crypto
Cryptographic types for Subduction: signed payloads, verification witnesses
-
dexios
Secure, fast and authenticated command-line encryption of files with modern algorithms and an audited encryption backend
-
app-utils
modules for application logic (YAML, audit, timestamps)
-
atlas-token-confidential-transfer-proof-extraction
Atlas Program Library Confidential Transfer Proof Extraction
-
hop-relay
Hop-Corr relay (batch apply + optional HTTP endpoint)
-
external-command-rs
External tool in Rust
-
cretrit
Flexible Order-Revealing Encryption library
-
spacetimedb-jsonwebtoken
Create and decode JWTs in a strongly typed way
-
async-openssl
SSL streams for async IO backed by OpenSSL
-
acmer-server
ACME TLS certificates proxy server
-
sustenet-shared
Sustenet shared library that contains the common code used by all modules
-
ncmdump
Some copyright protection file dump
-
sha256-rs
SHA256 hash made using Rust
-
anothertls
TLS implementation, but written from scratch (including the crypto) in pure Rust - of course
-
commucat-media-types
Shared media codec descriptors for CommuCat
-
frost-dkg
Frost Distributed Key Generation protocol
-
hawk
Hawk Implementation for Rust
-
libcrux-p256
Formally verified P-256 implementation
-
bandersnatch-ffi
C FFI bindings for Bandersnatch VRF - ring signatures and ticket ID computation
-
decds
A CLI for Distributed Erasure-Coded Data Storage System
-
ledger-core
Core data model, hashing, and signature verification primitives for immutable trace records
-
crown
A cryptographic library
-
tor-metrics-datamodel
Shared data model with entities and migrations
-
tpm2-crypto
TPM 2.0 cryptographic routines
-
webbuf_aescbc
WebBuf AES-CBC library
-
nuts-memory
A backend implementation for nuts
-
http-signature-directory
Validate if your JWKS directories meet web-bot-auth standards
-
spwn
A language for Geometry Dash triggers
-
nam-ec-gpu-gen
Code generator for field and elliptic curve operations on the GPUs
-
rust-bottle
Bottle protocol - layered message containers with encryption and signatures
-
turnstile
One-way encryption
-
scramblr
Obfuscation for Ordinary
-
rustfs-crypto
Cryptography and security features for RustFS, providing encryption, hashing, and secure authentication mechanisms
-
anubis-rage
Post-quantum secure file encryption tool with hybrid X25519+ML-KEM-1024. Defense-in-depth security.
-
nettext
A text-based data format for cryptographic network protocols
-
fractus
Cryptographic attack library for Rust and Python
-
abhedya-ffi
C/FFI Bindings for Abhedya PQC
-
dcrypt-sign
Digital Signature Schemes for the dcrypt library
-
rage
[BETA] A simple, secure, and modern encryption tool
-
pkloong-kcapi
High-level Rust wrapper for Linux Kernel Crypto API
-
fitgirl-decrypt
decrypt torrents from fitgirl-repacks
-
dudect-bencher
DudeCT constant-time function tester
-
neuedu-cryptos
包含国密算法的密码库。 A library include SM3, SM4 (Chinese ShangMi) crypto algos
-
rust-rsa-tool
sophisticated encryption utility employing a hybrid cryptographic system. It integrates RSA and AES algorithms, supports both CBC and ECB operational modes, and utilizes Base64-encoded…
-
trojan-cert
Certificate generation utilities for trojan-rs
-
cx448
A pure-Rust implementation of Ed448 and Curve448 and Decaf. This crate also includes signing and verifying of Ed448 signatures, and x448
-
viadkim
DomainKeys Identified Mail (DKIM) specification
-
ntrulp
Pure implementation of high-security prime-degree large-Galois-group inert-modulus ideal-lattice-based cryptography
-
wasefire-stub
Stubs for the Wasefire applet API
-
poseidon-rs
Poseidon hash implementation
-
tlock
Rust encryption library for practical time-lock encryption
-
prefixed-api-key
module for generating a Prefixed API Key
-
black-bagg
Secure password manager with RAM-only execution, fixed contact display, and post-quantum cryptography
-
aft-crypto
Cryptography library for aft
-
test-cert-gen
generate certificates for tests (e. g. for TLS)
-
rsfn-file
Utilitário para arquivos que trafegam na RSFN (Rede do Sistema Financeiro Nacional)
-
dleq
single and cross-curve Discrete Log Equality proofs
-
openentropy-server
HTTP entropy server with an ANU-style random endpoint
-
jpki
Read certificates, sign and verify documents using your JPKI card
-
vrf-mod
An extensible rust library for building VRF functionality with support for Elliptical Curve VRFs (secp256k1, secp256r1 curves)
-
clubcard-crlite
An instantiation of Clubcard for use in CRLite
-
bevy_assets_bundler
Assets Bundler for bevy, with content encryption support
-
str0m-aws-lc-rs
aws-lc-rs backend for str0m WebRTC
-
redoubt-hkdf
HKDF-SHA512 implementation with secure memory handling
-
gpg-error
Libgpg-error bindings for Rust
-
hsh
Quantum-Resistant Cryptographic Hash Library for Password Encryption and Verification in Rust
-
sqisign-rs
Core types and traits for SQIsign post-quantum signature scheme
-
torrosion
A Tor library for Rust
-
clog_rs
A cryptographically secure content storing library. Provides simple APIs to create, read, and edit files without compromising security.
-
thieves-cant
Solitaire Cipher designed by Bruce Schneier
-
pinenut-log
An extremely high performance logging system for clients (iOS, Android, Desktop), written in Rust
-
keycrypt
AES-256-GCM encryption helpers backed by the OS keychain (auto-init key on encrypt, strict decrypt, Zeroize in-memory keys)
-
ferrocrypt
Core Ferrocrypt library: symmetric (XChaCha20-Poly1305 + Argon2id) and hybrid (RSA-4096) encryption utilities
-
const-sha1
A sha1 implementation for use in const contexts
-
pwgen-x
A feature-rich password generator with pronounceable, secure, passphrase, and PIN modes
-
base_custom
Use any characters as your own numeric base and convert to and from decimal
-
ufile-rus3
UFile Rust SDK
-
fsextra
collection of extensions to simplify working with Unix-based filesystems. With support for cryptographic operations (encryption, hashing)
-
vex-core
Core types for VEX: Agent, ContextPacket, MerkleNode, Evolution
-
botan-src
Sources of Botan cryptography library
-
star-constellation
Nested threshold aggregation built on the STAR protocol
-
sigmate
A modern, developer-focused CLI for cryptographic file signing and verification
-
kryptos
various older, insecure, cryptographic ciphers
-
atomic-id
Very fast and unique id generation
-
native-pkcs11-keychain
native-pkcs11 backend for macos keychain
-
tink-daead
Deterministic AEAD functionality for Rust port of Google's Tink cryptography library
-
str_crypter
A macro library for XOR encryption and decryption of strings at compile time, meaning no cleartext strings will be in your release binary (when using the macro). The encrypted strings will be decoded at runtime.
-
brass-aphid-wire-messages
structs and constants for TLS message and IANA constants
-
quantacore-sdk
Rust bindings for the QUAC 100 Post-Quantum Cryptographic Accelerator
-
crypto-seal
A small utility designed to securely "package" or seal serde-compatible data type that can passed around in an uncompromised manner
-
bls24-curves
A pure Rust framework for pairing-based cryptography using BLS24 curves
-
ssh-packet
implementing SSH packet reading/writing using
binrw -
enseal
Secure, ephemeral secret sharing for developers
-
gxt-extism-types
Minimal, encrypted, signed and copy-pasteable tokens for manual data exchange between games
-
rustpad
Multi-threaded Padding Oracle attacks against any service
-
gatewarden
Hardened Keygen.sh license validation infrastructure
-
variant-ssl
Bindings for OpenSSL variants such as BoringSSL / AWS-LC / Tongsuo
-
quantum-sign
post-quantum signatures, format, policy, and CLI in one crate
-
truelayer-signing
Produce & verify TrueLayer API requests signatures
-
azalea-crypto
Cryptography features used in Minecraft
-
syft-crypto-cli
Command-line interface for SyftBox cryptographic operations
-
nekohash
A multifaceted hashing library for Rust
-
why2-chat
Lightweight, fast and secure chat application powered by WHY2 encryption
-
pent_house
Pent-House resonance ledger engine built atop power_house cognition primitives
-
waterscape
Private communication layer for AI agents
-
scicrypt
Lightweight cryptographic building blocks for proof of concept implementations in multi-party computation
-
shamir_share
A secure and efficient Rust library for Shamir's Secret Sharing
-
message_verifier
Rust Message Verifier library compatible with Rails' MessageVerifier and MessageEncryptor
-
si-crypto-hashes
reusable functionality for working with typical cryptographic hashes
-
macarunes
macaroons
-
hanzo-identity
Crypto Identities for Hanzo AI platform
-
mlspp-sys
Messaging Layer Security system bindings crate in Rust
-
ovunto-security
secure end-to-end communication between clients through a server
-
tectonic-fn-dsa-sign
FN-DSA signature scheme
-
simplepir
A fast and efficient implementation of SimplePIR in Rust
-
fastn-id52
fastn ID52 identity and cryptographic key management
-
foctet
Top-level crate for Foctet APIs
-
cross-authenticode
Cross-platform implementation of Authenticode signature verification
-
git-simple-encrypt
Encrypt/decrypt files in git repo using one password
-
secure-string
A data type suitable for storing sensitive information such as passwords and private keys in memory, featuring constant time equality, mlock and zeroing out
-
oboron-cli
CLI tool for Oboron - general purpose encryption and encoding library
-
signal-backup-decode
decode signal backups
-
attestation-doc-validation
attesting enclaves according to the Evervault Attestation scheme. This crate is used to generate ffi bindings.
-
aescrypt-rs
AES Crypt (v0-v3) Rust encryption/decryption library
-
oximedia-cloud
Cloud storage and media services integration for AWS, Azure, and GCP
-
bergshamra-transforms
Transform pipeline for Bergshamra XML Security library
-
aesp
optional CLI for AES in parallel. Personal project -- use at your own risk.
-
cryptos
All cryptographic in one, make crypto easy
-
rustfs-utils
functions and data structures for RustFS, providing essential features like hashing, compression, and network utilities
-
smcrypto
China's Standards of Encryption Algorithms(SM2/SM3/SM4)
-
ysc1
YSC1 (Yeun's Stream Cipher 1) based on the Amaryllis-1024 specification
-
sfio-rustls-config
Configuration routines for Rustls used in libraries from Step Function I/O
-
oss-sdk-rs
Aliyun OSS SDK
-
rs_sha512
rs_sha512is a Rust implementation of the SHA-512 cryptographic hash algorithm, part of the largerrs_shieldproject. This package provides SHA-512 hashing functionality in a standalone manner… -
zymic_core
Core library providing the primitives and streaming APIs for the Zymic authenticated encryption format
-
sha3
Pure Rust implementation of SHA-3, a family of Keccak-based hash functions including the SHAKE family of eXtendable-Output Functions (XOFs), as well as the accelerated variant TurboSHAKE
-
rndc
BIND9 RNDC protocol implementation for Rust
-
stfx-crypto
Core cryptographic primitives for the Sovereign Trust Framework (STFx)
-
rustssh2
A client and server SSH library
-
kyberauth
Enable AES keys transfer on unsecure channel using quantum-resistant Kyber
-
frost-secp256k1
A Schnorr signature scheme over the secp256k1 curve that supports FROST
-
ntrust-native
Pure rust implementation of the PQC scheme Saber
-
authenticator-ctap2-2021
interacting with CTAP1/2 security keys for Web Authentication. Used by Firefox.
-
dcf
Distributed comparison function implementation
-
vanity-age-keygen
Generate vanity Age keys
-
avx-nucleus
Atomic-level operations - Foundation of avx cryptography stack
-
janus_messages
Distributed Aggregation Protocol message definitions used in Janus, the server powering ISRG's Divvi Up
-
health-backend
Daily wellness check‑in that handles PHI securely
-
pkce-std
Handling Proof Key for Code Exchange
-
kookie
A secure, local-first, encrypted secret manager for developers
-
saorsa-mls
Experimental Message Layer Security (MLS)-inspired library for P2P secure group communication
-
test-curve25519-dalek
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
wa-rs-libsignal
Signal Protocol implementation for the WhatsApp platform
-
chord-parser
parsing chord signatures
-
libsrtp
a pure rust implementation of SRTP
-
cifra
Console command to crypt and decrypt texts using classic methods
-
hbsx
file encryption tool with compression support
-
cocoonfs-cli
Cocoon TPM project - CLI utility for accessing CocoonFs images
-
ecdh-omr
ECDH based Oblivious Message Retrieval
-
icmptunnel-rs
Tunnel ip packets through icmp pings
-
auths
Decentralized identity for developers — cryptographic commit signing with Git-native storage
-
envcrypt
Encrypt environment variables at compile-time and decrypt them at runtime
-
conhash-ring
A consistent hashing ring implementation in Rust
-
nstack
Arity 4 stack for the kelvin merkle toolkit
-
arcanum-zkp
Zero-knowledge proofs: Bulletproofs, Schnorr proofs, commitments
-
rosenpass
Build post-quantum-secure VPNs with WireGuard!
-
debian-packaging
Debian packaging primitives
-
vade-didcomm
DIDComm communication helper for vade
-
aingle_zome_types
AIngle zome types
-
motorcortex-rust
Motorcortex Rust: A library for Rust client applications to control Motorcortex Core
-
encrypto_rsa
stunning-encrypto is cross platform end-to-end encryption dependency
-
guts-types
Common types used throughout Guts - a decentralized GitHub alternative
-
anse2
custom cipher for dumb messenger
-
sl-oblivious
OT protocols
-
ice
CTF tool store
-
coz-cli
CLI for Coz cryptographic JSON messaging
-
pqc_bridge
A lightweight Rust library for post-quantum cryptography providing secure key management, encryption, and digital signatures using NIST-standardized algorithms
-
tokio-rustls-acme2
TLS certificate management and serving using rustls (for use with Tokio)
-
bitchat-tui
A terminal user interface (TUI) chat application using Bluetooth and modern cryptography
-
sigstore-crypto
Cryptographic primitives for Sigstore
-
redact-client
Receives request for private data and decrypts it to display securely in browser
-
swift-secure-enclave-tool-rs
Swift secure enclave tool in Rust
-
ps-hkey
defines the hashkey format and provides methods for resolving them
-
lox-extensions
A reputation-based bridge distribution system that provides privacy protection to users and their social graph while remaining open to all users
-
novovault
An encrypted store for notes
-
sequoia-octopus-librnp
Reimplementation of RNP's interface using Sequoia for use with Thunderbird
-
qp-plonky2-field
Finite field arithmetic
-
flowerpassword
Flower Password implementation for Rust - Deterministic password generator using HMAC-MD5
-
coz-rs
Coz cryptographic JSON messaging specification
-
spatial-hasher
deterministic encryption and decryption using 3D spatial parameters with secure authenticated encryption
-
libthemis-sys
FFI binding to libthemis
-
moss-sdk
Cryptographic signing for AI agents using ML-DSA-44 (post-quantum)
-
web-push-native
Generic Event Delivery Using Http Push (web-push) components implemented according to RFC8030
-
astra-num
A wrapper lib around num_bigint, num_integer, and num_traits with extra utilities for handling incredibly large (astronomical) values
-
vusi
ECDSA signature vulnerability analysis library and CLI
-
adiantum
cipher, a fast encryption scheme optimized for mobile and embedded devices, designed by Google
-
filecoin-f3-certs
Data structures and utilities for handling F3 finality certificates
-
iori-ssa
Decrypt MPEG-TS encrypted using SAMPLE-AES
-
did-key
did:key method
-
subtle-ng
Pure-Rust traits and utilities for constant-time cryptographic implementations
-
decaf377-rdsa
randomizable signature scheme using the decaf377 group
-
ejson
Manage encrypted secrets using public key encryption
-
sequoia-cert-store
A certificate database interface
-
authy-cli
CLI secrets store & dispatch for AI agents — encrypted vault, scoped policies, run-only tokens, and audit logging
-
apksig
Decoding the APK Signing Block
-
memokey
CLI for memobuild key generation, signing, and verification
-
object-rainbow-encrypted
encryption for object-rainbow
-
ritualistic
nostr library
-
ipcrypt-rs
IP address encryption and obfuscation methods in pure Rust
-
ciphercore-base
The base package of CipherCore: computation graphs API, Secure MPC Compiler, utilities for graph evaluation and inspection
-
nethsm
A high-level library to interact with the API of a Nitrokey NetHSM
-
quantumcryptlib
Post-quantum secure communication primitives using Kyber KEM and AEAD
-
serde-encrypt
Encrypts all the Serialize
-
syncstate
A global synchronization library built for synchronizing states reliably, incrementally and fast
-
astrid-crypto
Cryptographic primitives for Astrid secure agent runtime
-
hashsum
CLI to print or verify cryptographic checksums (md5, sha1, sha2, belt-hash)
-
sam_encrypt
that provides a set of cryptographic primitives for building a proxy self re-encryption scheme
-
dcrypt-params
Constant values for dcrypt library
-
pdf2john
Extract a hash from an encrypted PDF for cracking with John the Ripper or Hashcat
-
ultra
Cryptanalysis of the Engima
-
rust-cryptoauthlib
Rust wrappers for CryptoAuthentication Library bindings
-
chromium-crypto
Chromium crypt
-
double-ratchet-2
Double Ratchet as specified by Signal
-
stfx
Sovereign Trust Framework: top-level crate wrapping stfx-crypto for initial release
-
mogh_encryption
encrypt and decrypt data
-
enchantress
AES-256 file encryption tool
-
rzfile
handle RZ game data parsing and name decoding
-
parmesan
Parallel ARithMEticS over ENcrypted data
-
s3etag
Calculate S3 ETag for multipart uploads
-
apple-security-framework
Apple
Security.frameworkbindings for macOS and iOS -
blackrock2
port of the Blackrock2 cipher
-
aelf-keystore
JS-compatible keystore support for AElf Rust SDK
-
kosalt
This package allows for quick encoding and decoding text
-
tdx_workload_attestation
generating attestations about virtual machine (VM) workloads using Intel Trust Domain Extensions (Intel TDX)
-
datex-crypto-native
Native implementation of the DATEX Crypto facade
-
tagotip-secure
TagoTiP/S crypto envelope — AEAD encryption for TagoTiP frames
-
greenpass
parse EU Digital Green Certificates for COVID-19
-
libsm_stzhang
China's Standards of Encryption Algorithms (SM2/3/4)
-
saorsa-seal
Threshold sealing for group data in the Saorsa network
-
ironseal
Lightweight identity-free attestation protocol
-
minimal-ed448
Unaudited, inefficient implementation of Ed448 in Rust
-
defendor
A secure file encryption tool with AES-GCM and Argon2 for password hashing
-
wring-twistree
Whole-message cipher and tree hash
-
sf-cli
Secure file encryption CLI/TUI tool with password protection
-
tholos-pq
Pure post-quantum multi-recipient encryption: Kyber-1024 + Dilithium-3 + XChaCha20-Poly1305 with a stable, versioned wire format
-
safeguard
Secure file and credential management CLI with collections and tags
-
zks
Zero Knowledge Swarm - Post-quantum secure networking SDK with built-in anonymity
-
aws-mpl-legacy
aws-mpl-rs is a low level library for implementing client side encryption
-
ssh-key
Pure Rust implementation of SSH key file format decoders/encoders as described in RFC4251/RFC4253 and OpenSSH key formats, as well as "sshsig" signatures and certificates (including…
-
enprot
command line tool for Engyon
-
upki
Platform-independent browser-grade certificate infrastructure
-
tink-hybrid
Hybrid encryption functionality for Rust port of Google's Tink cryptography library
-
halite-sys
Unsafe Rust bindings for libsodium stable
-
pake-kem
password-authenticated key exchange (PAKE) based from a key encapsulation mechanism (KEM)
-
pakery-crypto
Concrete cryptographic implementations for PAKE protocols
-
vme-pkix
TLS Certificate encoding and decoding helpers for the Fortanix VME environment
-
signcryption
implementing the Toorani-Beheshti signcryption scheme instantiated over Ristretto255 or Ed25519
-
hush-spine
Aegis Spine protocol for ClawdStrike — envelope signing, checkpoints, trust bundles, and NATS transport
-
enigma-cli
A command-line interface for an Enigma machine simulator. Configurable with any reflector, number of rotors, and plugboard pairs.
-
fng_api_wrapper
Crypto Fear and Greed API wrapper
-
lightspeed_hash
Hash functions
-
reed-solomon
BCH encoder and decoder with support of no_std environment
-
king
short cut functions
-
parco-ws-security
Parco Web Services Security
-
tiny_ed448_goldilocks
A lean, high performance, pure rust implementation of Ed448-Goldilocks for easy signatures and key exchange
-
osshkeys
read and write OpenSSH public and private keys
-
oram
Oblivious RAM
-
encrypted_images
Encrypt Text to Images and decrypt text from images
-
wormsign
Dilithium5 signature tool
-
parrotssugar
Software only implementations with no additional dependencies
-
aeonflux
Composable, lightweight, fast attribute-based anonymous credentials with infinite (aeon) rerandomised (flux) presentations using algebraic message authentication codes (aMACs), symmetric verifiable encryption…
-
zhc_crypto
Cryptographic primitives for homomorphic encryption
-
bacon-cipher
Bacon's cipher
-
xts-mode
XTS block mode implementation in rust
-
yadacha
symmetric cipher that combines chacha20 and very large private keys
-
chewie-crypto-gcp
Cryptographic primitives and secret management for Rust applications
-
cralgebra
A fast crypto algebra library
-
mc-oblivious-map
Oblivious Hash Map data structures on top of Oblivious RAM
-
hpke-rs
HPKE Implementation
-
aes-gcm-stream
AES GCM stream encrypt and decrypt library, supports AES128/192/256 bit keys
-
light-indexed-array
indexed (and concurrent) Merkle tree in Rust
-
trelent-hyok
implementing Hold Your Own Key (HYOK) encryption patterns with support for multiple cloud providers
-
tonelli-rs
Tonelli-Shanks algorithm for computing square roots modulo a prime
-
sare-lib
Hybrid post-quantum encryption library providing SARE standard primitives and APIs
-
gni
create a GPU Node ID
-
li2utils
signer/verifier for FIPS 204 / CRYSTALS-Dilithium post quantum cryptography (PQC). Not verified / audited (WIP)!
-
bp-pp
Bulletproofs++ - range-proof protocol in discret loggarithm setting
-
rsign2
A command-line tool to sign files and verify signatures
-
uhash-types
Shared proof/challenge/difficulty types for UniversalHash stacks
-
strx
A powerful string manipulation tool with JWT, hash, encoding, and crypto support
-
rust_ev_verifier_lib
Main library for the E-Voting system of Swiss Post
-
ironoxide
A pure-Rust SDK for accessing IronCore's privacy platform
-
cosmian_pkcs11_module
Cross-platform PKCS#11 module written in rust, originally forked from Google/native_pkcs11
-
pem-rfc7468
PEM Encoding (RFC 7468) for PKIX, PKCS, and CMS Structures, implementing a strict subset of the original Privacy-Enhanced Mail encoding intended specifically for use with cryptographic keys…
-
kuska-sodiumoxide
Fast cryptographic library for Rust (bindings to libsodium), with conversion from ed25519 to curve25519
-
mls-rs-crypto-traits
Crypto traits required to create a CryptoProvider for mls-rs
-
acme-client
Easy to use ACME client library to issue, renew and revoke TLS certificates
-
openadp-ocrypt
Rust SDK for OpenADP - Distributed secret sharing and advanced data protection
-
ssb-multiformats
Key, feed id, and message hash types used by Secure Scuttlebutt
-
deno_crypto_provider
Cryptography provider for Deno
-
kcipher2
KCipher-2 stream cipher
-
xkcp-rs
Safe wrappers to the XKCP library
-
spqr-syft
Vendored spqr crate for syft
-
rialo-s-secp256r1-program
Precompile implementation for the secp256r1 elliptic curve
-
seedpass
A secure password generation tool based on a single master key using Argon2 and BIP-39
-
ps-datalake
Encrypted flat storage
-
srv-session
Server-side session management core with Argon2 and KV abstraction
-
x402-kit-signer
X402 rust sdk
-
parasol_cpu
contains the Parasol CPU, which runs programs over a mix of encrypted and plaintext data
-
steganographyrs
Steganography
-
encrypt-me
Encrypt and encrypt files by shifting bytes
-
fpass
CLI Password Manager
-
vector_sdk
Rust SDK for building Vector bots
-
nova-scotia
Middleware to compile Circom circuits to Nova zkSNARK scheme
-
rift-core
Core types, identity, cryptography, and invites for the Rift P2P protocol
-
azure_mgmt_maps
generated REST API bindings
-
klave-connector
Module allowing easy connection to deployed Klave apps
-
basic-jwt
Basic JWT signing and verification library
-
wascap
wasmCloud Capabilities. Library for extracting, embedding, and validating claims
-
aucpace-conflux
AuCPace protocol implementation
-
sl-shamir
Shamir Secret Sharing
-
ecsimple
Elliptic Curve Cryptography
-
asport-hyphae-handshake
Noise protocol framework handshakes for QUIC
-
syft-crypto-protocol
Post-quantum cryptographic protocol implementation for SyftBox using Signal's PQXDH
-
oilelpqt
Post-quantum socks5 proxy that uses Kyber1024 and triple AES
-
graph-core
Common types and traits for the graph-rs-sdk crate
-
kassandra-client
Interact with an FMD service
-
mldsa-native-rs
FFI bindings and optional wrapper for the mldsa-native ML-DSA implementation
-
sponge-hash-aes256
A sponge-based secure hash function that uses AES-256 as its internal PRF
-
zsign
ipa sign
-
crypto-auditing
Client library for crypto-auditing project
-
fluent-hash
A lightweight library which provides a fluent interface for generating SHA-1 and SHA-2 digests
-
rustpq
Pure Rust post-quantum cryptography suite - ML-KEM, ML-DSA, and more
-
mushi
Point-to-point QUIC networking with application-defined mutual authentication
-
libcrux-aesgcm
Libcrux AES-GCM implementation
-
benaloh-challenge
Implements the Benaloh Challenge (also known as an Interactive Device Challenge), a crytographic technique to ensure the honesty of an untrusted device
-
rust-kbkdf
SP800-108 Key Based Key Derivation Using Pseudorandom Functions
-
arcium-primitives
Arcium primitives
-
test-dalek-docs
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
anypki
fully customizable PKI tool that allows your project to have a customized CA trust chain, blacklist/whitelist filtering root CAs by Country Code, Serial Number, SHA-1/SHA-256 fingerprint, or Issuer Name
-
asport-quinn-hyphae
Noise protocol framework handshakes for the Quinn QUIC library
-
gimli-hash
The Gimli-permutation based Hash
-
libcrux-secrets
Libcrux utilities for working with secrets
-
libsodium-sys-stable
Maintained FFI bindings for libsodium stable
-
mnemossh
CLI tool for generating and managing Ed25519 SSH keys using BIP-39 mnemonic phrases
-
mdbook-pagecrypt
Encrypt your mdbook-built site with password protection
-
cipha-cli
CLI for classical ciphers
-
rustls-pq-addon
A pure-rust implementation of post-quantum hybrid TLS key exchange groups for use with rustls
-
vitaminc-protected
Protected type wrappers for handling sensitive data. Part of the VitaminC cryptographic suite.
-
witnet-bls-signatures
Open source implementation of Bonneh-Lynn-Shacham (BLS) signatures written in Rust
-
pk11-uri-parser
A zero-copy library to parse and (optionally) validate PKCS#11 URIs in accordance to RFC7512 specifications
-
pkgar
Redox Package Archive
-
enigma-identity
Enigma Identity: local identity + X3DH bundle + shared secret derivation
-
keetanetwork-crypto
Cryptographic primitives and operations for Keetanetwork
-
akd_client
Client verification companion for the auditable key directory with limited dependencies
-
frost-secp256k1-evm
A Schnorr signature scheme over the secp256k1 curve that supports FROST and EVM
-
ksi-double-ratchet
Double Ratchet key management for exchanging encrypted messages between two parties
-
mbedtls-platform-support-smx
support library for the
mbedtlscrate, providing platform and target specific implementations of all necessary functions. By separating this logic into a separate crate, multiple… -
gen_pass
Secure password generation library and CLI
-
trivium
Small Rust implementation of the Trivium stream cipher
-
pqcrypto-falcon
Post-Quantum Signature Scheme falcon
-
gimli-permutation
Gimli: a cross-platform permutation
-
surrealdb-jsonwebtoken
Temporary
jsonwebtokenfork with Wasm support -
tafrah-falcon
Falcon (FIPS 206) scaffolding for the Tafrah PQC library
-
shippo_core
Core models and planning logic for Shippo
-
keyutils
Rust interface to the Linux keyring
-
rusty_secrets
threshold Shamir's secret sharing in the Rust programming language
-
jrn
a journal app
-
shared-aes-enc
A shared AES encryption library providing secure encryption and decryption functionality
-
gm-rs
China's Standards of Encryption Algorithms(SM2/SM3/SM4)
-
enocoro128v2
Safe, embedded-friendly Enocoro-128 (Version 2) stream cipher. Verified using Hitachi's official test vectors.
-
vmadm
Administer virtual machines in local libvirt
-
symbi-channel-adapter
Chat channel adapters for the Symbi platform — Slack, Teams, Mattermost
-
lox-zkp
A toolkit for auto-generated implementations of Schnorr proofs
-
taceo-groth16
Groth16 zkSNARK proof system
-
classified
High-assurance Operations for Number-theoretic Extension Sets and Theorems (Galois Fields)
-
ratchet-x2
Pure Rust Double Ratchet protocol implementation
-
fast_chacha
CPU-optimized ChaCha20 implementation with rust fallbacks
-
soft-aes
A Rust-based software library for AES
-
laza
Kanari Network Cryptographic Hashing Library
-
purecrypt
Minimal, readable, dependency-free implementations of modern cryptographic primitives in pure Rust
-
rust-keylock-ui
A password manager with goals to be Secure, Simple to use, Portable and Extensible
-
arcanum-hash
Hash functions and key derivation for the Arcanum cryptographic engine
-
kcr_jetstream_nats_io
Kubernetes Custom Resource Bindings
-
pakery-opaque
OPAQUE augmented PAKE protocol (RFC 9807)
-
skg-crypto
Cryptographic provider traits for skelegent
-
otplus-core
Core cryptographic library for OTPlus - A secure one-time password and key derivation system
-
uselesskey-rustls
rustls-pki-types and rustls config adapters for uselesskey X.509/key fixtures
-
ffsend-api
A fully featured Firefox Send API client
-
aranya-internal-rustls
Fork of rustls with PSK support for internal usage
-
kcapi
Official high-level rust bindings for libkcapi
-
rw-aes-gcm
std::io::{Read, Write} encrypted with AES-GCM
-
informalsystems-malachitebft-signing-ed25519
Ed25519 signing scheme for the Malachite BFT consensus engine
-
ndr
CLI for encrypted Nostr messaging using double ratchet
-
snowstorm
A minimalistic encryption protocol based on Noise protocol (snow)
-
xdid-method-key
xdid implementation of did:key
-
clasp-crypto
E2E encryption add-on for CLASP protocol - AES-256-GCM, ECDH P-256, ECDSA, TOFU
-
agentzero-storage
AgentZero — modular AI-agent runtime and tool framework
-
gel-jwt
JWT implementation for the Gel database
-
blastkids
Derive BLS12-381 child keys using Blastkids
-
uselesskey-token
API key, bearer, and OAuth access-token fixture generator for tests
-
unknown_order
working with finite fields where the modulus is of unknown order, typtical for RSA, Paillier, Hyperelliptic curves, etc
-
cocoon-tpm-tpm2-interface
Cocoon TPM project - autogenerated TPM2 interface definitions
-
rsa_heapless
Pure Rust RSA implementation - heapless version
-
uricrypt
Hierarchy-preserving deterministic URI encryption
-
openpgp-card-rpgp
Companion crate for using openpgp-card with rPGP
-
ocsp
encoding/decoding lib for Rust
-
crypt3_rs
Unix crypt(3) reimplemented in pure rust
-
sequoia-git
managing and enforcing a commit signing policy
-
lamport_sigs
Lamport one-time signature scheme
-
paseto-rs
A minimal, learning-focused PASETO v4 implementation in Rust
-
arcanum-agile
Cryptographic agility framework for the Arcanum cryptographic engine
-
sha_file_hashing
computing and validating SHA-1 file hashes with a clean, trait-based API
-
bh-jws-utils
TBTL's library for handling JSON Web Signatures (JWS)
-
rpm-sequoia
RPM PGP interface using Sequoia
-
hkd32
HMAC-based Hierarchical Key Derivation: deterministically derive a hierarchy of symmetric keys from initial keying material through repeated applications of the Hash-based Message Authentication Code…
-
ppaass-codec
The codec part for ppaass application
-
xwt-cert-fingerprint
Certificate fingerprint computation algorithms related to WebTransport. Not directly required to use xwt, but can be helpful. Also usable without xwt. Intended to work with both wasm and native.
-
relay-core
The core components of the Relay Protocol
-
relay-crypto
The crypto library for the Relay Ecosystem
-
aranya-client
Client library for using Aranya
-
sigstore-bundle
Bundle format handling for Sigstore
-
qslib
QuantStudio qPCR machine library
-
cryptoki-sys
FFI wrapper around the PKCS #11 API
-
dataparser_core
A flexible and efficient binary parsing and serialization library for Rust
-
chksum-cli
checksum calculator
-
pingap-util
Util for pingap
-
poly1305-nostd
Pure-Rust Poly1305 MAC implementation for no_std/bare-metal targets (avoids LLVM SIMD issues)
-
webpki-root-certs
Mozilla trusted certificate authorities in self-signed X.509 format for use with crates other than webpki
-
sha3-rust
Keccak (SHA-3) cryptographic hash function family
-
aingle-argon2
Pure Rust Argon2 password hashing - optimized for AIngle
-
az-tdx-vtpm
vTPM based TDX attestation for Azure Confidential VMs
-
x25519-nostd
Pure-Rust X25519 (Curve25519) ECDH implementation for no_std/bare-metal targets (avoids LLVM SIMD issues)
-
mas-jose
JSON Object Signing and Encryption (JWT & co) utilities
-
json-read
json-read是一个json读取工具，可以直接通过
x.y.z.w方式读取json中的内容，不用逐层解析 -
rialo-validator-registry-interface
Instructions and constructors for a registry containing validator identities
-
dotenvx
A secure environment variable management tool with built-in encryption
-
crypto-auditing-event-monitor
Event monitor for crypto-auditing project
-
polyfuzzy
Fuzzy message detection with randomized and compact keys
-
passay-rs
A password validation library inspired by the Java Passay library
-
module-lwe
Implements the module learning-with-errors public key encrpytion scheme
-
real_time_issue_board_api
self‑hosted, real‑time issue board with a Rust backend (high‑performance API + WebSocket sync) for Remote Teams
-
jwk_kit
JSON Web Keys (JWK)
-
dag-jose
ipld dag-jose codec
-
umbral-pre
Umbral proxy reencryption algorithm
-
tor-llcrypto
Low level cryptography wrappers used by Tor
-
zipher
Cryptography utilities and implementations including Argon2, bcrypt, post-quantum algorithms and JWT support
-
argentum_encryption_infrastructure
The infrastructure layer of encryption
-
oneseed
Deterministic cryptographic keys from a single seed
-
xoofff
Farfalle with Xoodoo: Parallel Permutation-based Cryptography
-
sigsum
using Sigsum transparency logs
-
northroot-proof-engine
Core proof computation and validation library for PoSH (Proof of Shape) and PoX (Proof of Execution)
-
ansible-vault
encrypt and decrypt ansible vault
-
md5-extensions
Use md5 as an extension function
-
signify
Command-line implementation of the signify signature scheme
-
awol2005ex_kerberos_asn1
Parse/Build Kerberos ASN1 DER To/From Rust structs
-
qfe
Experimental protocol for quantum-secure communications
-
wasmtime-wasi-tls-openssl
Wasmtime implementation of the wasi-tls API, using OpenSSL for TLS support
-
cggmp24-keygen
UC-secure DKG implementation based on CGGMP24 paper
-
ringspace
Trusted webring management
-
parsec-tool
Parsec Command Line Interface
-
bessie
an authenticated, chunked cipher based on BLAKE3
-
cryptotools
cryptography library
-
slahasher
Hashing functions
-
argon2rs
The pure Rust password hashing library that runs on Argon2
-
ssh2
Bindings to libssh2 for interacting with SSH servers and executing remote commands, forwarding local ports, etc
-
libsumatracrypt-rs
Cryptography
-
sl-verifiable-enc
Verifierable encryption
-
sigma-proofs
A toolkit for auto-generated implementations of Σ-protocols
-
forge-pfx
Forge is a cli tool for converting PFX/P12 certificate files to PEM format
-
gimli-crypto
A no_std implementation of Gimli AEAD cipher and hash function
-
ockam_transport_uds
Unix Domain Socket (UDS) Transport for the Ockam Routing Protocol
-
reqtls
A tls lib
-
lean-imt
A lightweight incremental Merkle tree library
-
cracken
a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool
-
drawbridge-jose
JOSE implementation
-
auths-sdk
Application services layer for Auths identity operations
-
cryptimitives
Cryptographic primitives collection
-
ghostkey_lib
working with Freenet's Ghost Keys
-
abe_gpsw
ABE GPSW scheme for BLS pairing implemented in rust
-
rsa-fdh
provably secure blind-signing signature scheme that uses RSA and a full domain hash and support blind signing / blind signatures
-
pq-transport-gateway
Post-Quantum secure proxy for QKD infrastructure, addressing vendor TLS vulnerabilities
-
dcrypt-kem
Key Encapsulation Mechanisms for the dcrypt library
-
himmelblau_kerberos_asn1
Parse/Build Kerberos ASN1 DER To/From Rust structs
-
libcrux-ml-tkem
Libcrux ML-KEM & Kyber & tkem implementations
-
async-acme
async ACME client for tls-alpn-01 challenge
-
lmrc-vault
HashiCorp Vault management library for the LMRC Stack - comprehensive library for managing Vault installations and secrets on K3s/Kubernetes clusters
-
xxxdh
Pure Rust X3DH key exchange protocol implementation
-
evpkdf
OpenSSL EVP_bytesToKey function
-
klukai-agent
Agent component for Klukai Corrosion
-
keycache
Seals a key using a secure element
-
sdjwt
SD-JWT support for Issuers, Holders, and Verifiers
-
encryptable-tokio-fs
A drop-in, API-identical replacement for
tokio::fswith transparent opt-in, non-framing stream cipher encryption -
quinn-noise
quinn noise implementation
-
tokmd-content
Content scanning helpers for tokmd analysis (TODOs, duplicates, imports)
-
boo-rs
Compile-time literal obfuscation that encrypts strings, numbers, arrays and tuples to protect binaries from static analysis and reverse engineering
-
trezor-noise-rust-crypto
Wrappers of dalek and RustCrypto crates for noise-protocol, customized
-
hashkitten
A purrfect hashing companion
-
crypto-bigint-asm
Assembly routines for big integers
-
boring-sys2
FFI bindings to BoringSSL
-
rsub
A high-performance message broker with QUIC transport and pub/sub messaging patterns
-
ff-cl-gen
OpenCL code generator for prime-fields
-
ts-crypto
Cryptography abstraction for my projects
-
rasn-its
ASN.1 implementations for Intelligent Transport Systems (ITS) V2X communications
-
chacha12-blake3
Secure, Simple and Fast encryption for any CPU
-
passwordmaker-rs
Rust reimplementation of the PasswordMaker Pro algorithm. This is partially a port, partially written from scratch. Compatibility is a goal, but not guaranteed.
-
did-scid
did:scid in Rust
-
ordinary-obfuscation
Obfuscation for Ordinary
-
risc0-sppark
Zero-knowledge template library
-
shadowsocks-rs
personal port of shadowsocks in rust
-
signature_ps
The Ockam PS signature impementation
-
sentc-crypto-common
Common shared values between sentc server api and the sentc client sdk
-
pwkit
A secure CLI password generator with template support for environment files
-
quickcert
For generating test key/certificate pairs
-
pq-mayo
MAYO post-quantum signature scheme
-
auths-keri
KERI CESR translation layer for Auths
-
flamethrower
Deterministic cognition ledger using power_house (and optional pent_house)
-
envvault-cli
A local-first encrypted environment variable manager
-
embedded-mbedtls
no_std Rust wrapper for Mbed TLS
-
redact-crypto
Crypto abstractions for the Redact framework
-
kyberlib
A Robust Rust Library for CRYSTALS-Kyber Post-Quantum Cryptography
-
zuc
ZUC Stream Cipher Algorithms
-
scion-sdk-common-types
SCION endhost SDK common types
-
arcanum-pqc
Post-quantum cryptographic algorithms for the Arcanum engine
-
superboring
A reimplementation of the 'boring' crate in pure Rust
-
uv-trampoline-builder
internal component crate of uv
-
emixcrypto
Cryptographic utilities for EssentialMix, providing encryption, hashing, encoding, and random number generation
-
bergshamra
— Pure Rust XML Security library (XML-DSig, XML-Enc, C14N)
-
sapphire-hash
A recursive, performant file hash calculator
-
tough-kms
Implements AWS KMS as a key source for TUF signing keys
-
concrete-csprng
Cryptographically Secure PRNG used in the TFHE-rs library
-
saltlick
encrypting and decrypting file streams using libsodium
-
skipjack
A straight-line implementation of Skipjack in Rust
-
rs_hasher_ctx
internal crate of the RustyShield library. It provides the HasherContext trait used across various cryptographic hash function implementations within RustyShield. The trait overloads the…
-
chaum-pedersen-zkp
Chaum-Pedersen zero-knowledge protocol implementation
-
filecoin-f3-merkle
Merkle tree implementation matching go-f3's merkle package
-
ppoprf
Puncturable Partially-Oblivious Pseudo-Random Function
-
timing-shield
Comprehensive timing leak protection for Rust
-
acme2
A Tokio and OpenSSL based ACMEv2 client
-
zki_sieve
SIEVE IR
-
keynest
offline, cross-platform secrets manager written in Rust
-
tls-api-openssl
TLS API implementation over openssl crate
-
lusl
Lossless Uncompressed Serializer Library
-
libcrux-kem
Libcrux KEM implementation
-
libgpg-error-sys
Raw bindings for libgpg-error
-
anubis-wormhole
A post-quantum secure file transfer tool based on the Magic Wormhole protocol
-
steamdepot
Steam depot downloader library — CM connection, authentication, PICS, CDN, and chunk downloading
-
redoubt-rand
Cross-platform cryptographic random number generation
-
rusty-saber
Pure rust implementation of the PQC scheme Saber
-
plexi
A flexible auditor companion client
-
nuts-tool-api
Code that helps you to implement a nuts tool plugin
-
pumpkin
A cryptographically secure prime number generator
-
ristretto_types
Types and traits for the Ristretto JVM
-
poulpy-core
A backend agnostic crate implementing RLWE-based encryption & arithmetic
-
num-primes
Generating Large Prime and Composite Numbers using num with a simplistic interface
-
rusty_vault
RustyVault is a powerful identity-based secrets management software, providing features such as cryptographic key management, encryption as a service, public key cryptography, certificates management…
-
monerochan-recursion-gnark-cli
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
mpc-protocol
Multi-party computation framework using the noise protocol for end-to-end encryption
-
openpgp-card-state
Experimental storage mechanism for openpgp-card device state
-
gencrypt
Personal usage hashing utility
-
zopp-crypto
Zero-knowledge cryptographic primitives for zopp secrets manager
-
scrypt
password-based key derivation function
-
pict-rs-repo
Metadata repo abstraction for pict-rs
-
pqc-combo
Pure Rust ML-KEM-1024 + ML-DSA-65 + AES-256-GCM for no_std
-
this-me
Encrypted identity store CLI tool (this.me)
-
libsignal-rust
Complete and Powerful Rust implementation of libsignal protocol
-
zk-aluvm
AluVM ISA extension for Galois fields
-
sodix
CLI tool providing libsodium-compatible cryptographic operations. Uses Ed25519 for signing and Curve25519 for encryption, with hex-encoded keys for easy scripting. SH/BASH friendly and user friendly vith -v and -h flags.
-
tink-mac
MAC functionality for Rust port of Google's Tink cryptography library
-
drogue-tls
TLS 1.3 client with no_std support and no allocator
-
keetanetwork-x509
X.509 certificate handling for Keetanetwork
-
stegano
The ultimate steganography swiss knife army CLI tool
-
htauth
managing htpasswd files
-
rust-license-key
A production-grade Rust library for creating and validating offline software licenses using Ed25519 cryptography
-
ps_sig
Pointcheval Sanders signatures
-
libdelve
interacting with the DelVe standard
-
simple-ssl-acme-cloudflare
SSL with ACME and CloudFlare is a tool to simply apply SSL certificates by using OpenSSL and ACME via CloudFlare DNS
-
paseto-v3-aws-lc
PASETO/PASERK V3 based on AWS-LC
-
zeroize
Securely clear secrets from memory with a simple trait built on stable Rust primitives which guarantee memory is zeroed using an operation will not be 'optimized away' by the compiler…
-
irmaseal-curve
Fork of the BLS12-381 pairing-friendly elliptic curve construction for IRMAseal
-
tc_tea
Tencent's varient of TEA (tc_tea)
-
foctet-archive
Foctet Secure Archive: encrypted manifest/chunks with recipient key wrapping
-
libcryptsetup-rs-sys
Low level bindings for libcryptsetup
-
runar_cli
Runar CLI for node initialization and management
-
enc_rust
A pure rust implementation of the Module-Lattice-based standards ML-KEM and (soon) ML-DSA, also known as the PQC scheme Crystals Kyber and Dilithium
-
aesus
CLI for AES-256-GCM encryption using memorable passphrases
-
ruma-signatures
Digital signatures according to the Matrix specification
-
ed25519_to_curve25519
Convert ed25519 keys and sign to curve25519
-
evidence
Type-level tags for cryptographic primitives
-
botan-sys
FFI wrapper for Botan cryptography library
-
nrc
Nostr Relay Chat - A terminal-based chat client using the Nostr protocol with MLS encryption
-
digestible
A more dynamic Hash and Hasher trait for Rust
-
btcturk_websockets
client for the BtcTurk WebSocket API with real-time ticker and orderbook channels
-
abhedya-core
Core library for Abhedya: Sanskrit-Encoded Post-Quantum Cryptography
-
auths-verifier
Minimal-dependency attestation verification library for Auths - supports FFI and WASM
-
fn-dsa-sign
FN-DSA signature scheme
-
repl-proto
JSON-RPC wire protocol types for the Symbi platform
-
rust_ev_verifier_application_lib
common elements to implement an application using the crate
rust_ev_verifier_lib -
bssl-cmake-sys
FFI bindings to BoringSSL (cmake incorporated)
-
pvcrypt
System level data encryption using aes_gcm
-
dpf-fss
Distributed point function implementation
-
httpsig-hyper
Hyper extension for http message signatures (RFC9421)
-
sett
Rust port of sett (data compression, encryption and transfer tool)
-
tsumiki-cli
Command-line tool for X.509 certificate inspection and PKCS handling
-
sigstore-fulcio
Fulcio certificate authority client for Sigstore
-
artisan_keystore
A keystore server designed for AH
-
libsignify-rs
OpenBSD-compatible file signing & verification library
-
snowflake-jwt
Snowflake JWT token generator
-
wasmsign2-cli
CLI tool to sign and verify WebAssembly modules
-
permutation-xoodoo
Xoodoo permutation in the
crypto-permutationframework -
portable-rustls
fork of rustls: a modern TLS library written in Rust
-
roughenough-merkle
SHA-512 Merkle tree implementation
-
aranya-keygen
generating crypto keys
-
rust-keyvault
A secure, modern cryptographic key management library for Rust
-
git-crypt
transparent encryption of files in a git repository
-
awol2005ex_kerberos_crypto
Cryptography algorithms for Kerberos
-
eznacl
A wrapper around NaCl which makes working with cryptography even easier
-
lakers-crypto-rustcrypto
EDHOC crypto library backend based on the RustCrypto crates
-
hctr2-rs
HCTR2 and HCTR3 length-preserving encryption with format-preserving variants
-
wcce-rs
[MS-WCCE] certificate enrollment protocol
-
ironcore-documents
working with IronCore Labs documents and header formats
-
colorhash256
Like Chroma-Hash, but with ANSI terminal colors
-
shielded
Memory. Memory protection from speculation and side-channel attacks like Spectre, Meltdown, Rowhammer and Rambleed.
-
ibe
Identity Based Encryption schemes on the BLS12-381 pairing-friendly elliptic curve
-
arachnid-net
networking utilities for arachnid
-
opentalk-roomserver-types-e2ee
Opentalk RoomServer E2EE Types
-
wacore-binary
Binary data and constants for WhatsApp protocol
-
x509-cert
Pure Rust implementation of the X.509 Public Key Infrastructure Certificate format as described in RFC 5280
-
databoxer
Fast and easy to use CLI-based file encryption program
-
sofapub
A minimally functional ActivityPub server
-
mogh_pki
Public key identification utilities using Noise
-
openentropy-core
Core entropy harvesting library — hardware noise sources, raw or SHA-256 conditioned
-
voa-openpgp
using OpenPGP verifiers in VOA
-
acme_commander
一个全面的ACME客户端，用于SSL/TLS证书管理
-
gnostr-types
gnostr: a git+nostr workflow utility
-
signstar-request-signature
executable for creating, reading and writing of signing requests for files
-
kryoptic-lib
A PKCS #11 software token written in Rust
-
himmelblau_kerberos_crypto
Cryptography algorithms for Kerberos
-
ucan
Implement UCAN-based authorization with conciseness and ease!
-
cloudproof
Cosmian Cloudproof library
-
cas-lib
A function wrapper layer for RustCrypto and Dalek-Cryptography. Intended to be used in FFI situations with a global heap deallactor at the top level project.
-
rustls-symcrypt
rustls crypto provider model for SymCrypt
-
ferric_crypto_lib
Ferric Crypto
-
cosmian_pkcs11
HSM PKCS#11 provider for Cosmian KMS
-
ruipmi
An asynchronous IPMI client library implemented in Rust using Tokio
-
generic-schnorr
Schnorr signature implementation generic over the underlying group
-
cloakpipe-core
Core detection, pseudonymization, and rehydration engine for CloakPipe
-
s2n-tls-sys
A C99 implementation of the TLS/SSL protocols
-
credibil-infosec
Credibil information security utilities
-
nist-pqc-seeded-rng
RNG used to produce the KATs in NIST PQC competition
-
enquo-core
Core library providing encrypted querying operations
-
cipher
Traits for describing block ciphers and stream ciphers
-
openmls_traits
Traits used by OpenMLS
-
ssb-crypto
Crypto primitives used by Secure Scuttlebutt
-
ssskit
Fast, small and secure Shamir's Secret Sharing library crate
-
sirrd
— ephemeral secret vault server daemon
-
browser-crypto
A safe Rust interface to browser-based cryptographic operations using the Web Crypto API
-
speck
block cipher
-
libpasta
All-inclusive password hashing library
-
ciphern
Enterprise-grade cryptographic library
-
rustls-fork-shadow-tls
Rustls is a modern TLS library written in Rust
-
falcon-rust
Falcon post-quantum digital signature scheme
-
xxblake3
encryption and decryption based on xxh3 and blake3
-
keetanetwork-account
Account management and cryptographic identities for Keetanetwork
-
fire-crypto
Crypto library providing encryption and signing
-
ssb-validate
Verify Secure Scuttlebutt (SSB) hash chains (in parallel)
-
qux-pqc
Post-Quantum Cryptography library implementing NIST FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA)
-
kemkem
Unverified, unoptimized, and downright dirty implementation of the ML-KEM
-
ck-meow
STROBE using KitTen
-
s2n-quic-crypto
Internal crate used by s2n-quic
-
cliff3-util
SHA(256/512) hash, AES/RSA 암복화, 한글, I/O 및 날짜 관련 함수 모음 입니다
-
self-signed-cert
generate self-signed root CA, web server certs and keys
-
stout-index
SQLite index management for stout
-
cde
A universal encoding scheme for all cryptographic data
-
rdedup-lib
Data deduplication with compression and public key encryption. - library
-
mc-oblivious-ram
Implementations of Oblivious RAM data structures
-
hashing
A robust, production-ready hashing library and CLI tool supporting multiple algorithms
-
apple_srp_client
Apple Secure Remote Password Client
-
ed25519-bip32
Ed25519 BIP32
-
enchanter
XChaCha20Poly1305 AEAD file encryption tool
-
ark-crypto-primitives-zypher
useful cryptographic primitives
-
noctahash
Memory-hard password hashing algorithm designed to resist GPU, ASIC, and side-channel attacks
-
varsig
signature metadata
-
tafrah-slh-dsa
SLH-DSA (FIPS 205) implementation for the Tafrah PQC library
-
classified_shamir
shamir secret sharing using the honest and classified crates
-
davey
Discord Audio & Video End-to-End Encryption (DAVE) Protocol
-
crypt_guard_lite
compact and intuitive library that wraps the crypt_guard crate, making its core functionalities easily accessible and manageable. This library provides essential cryptographic operations…
-
pkcs11
Rust PKCS#11 Library
-
crypto_api_chachapoly
ChaCha20-IETF, Poly1305 and ChachaPoly-IETF for
crypto_api -
frost-ristretto255
A Schnorr signature scheme over the prime-order Ristretto group that supports FROST
-
kyber-pke
Kyber encryption library for arbitrary plaintext inputs. Mitigates kyberslash.
-
age-plugin-yubikey
YubiKey plugin for age clients
-
lox-library
Main Lox library with protocols and functions that make up Lox
-
aranya-fast-channels
High throughput, low latency encryption protected by Aranya Policy
-
neuron-crypto
Cryptographic provider traits for neuron
-
identity_account_storage
Secure storage for Decentralized Identifiers and Verifiable Credentials
-
cosmian_sse_memories
Symmetric Searchable Encryption
-
acmer
ACME TLS certificates management library
-
halo2_poseidon
The Poseidon algebraic hash function for Halo 2
-
simplestcrypt
Simplest way to perform a symmetric encryption, using a preshared key. Very small wrapper around aes-siv crate, with randomly generated nonces, for anything more advanced, use aes-siv instead
-
sgx_tcrypto
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
rs_shield
comprehensive Rust library providing robust and efficient implementations of cryptographic hash functions including SHA and Keccak families, and HMAC, suitable for no_std environments…
-
merkle-tree-bulletin-board-backend-mysql
A mysql backend for merkle-tree-bulletin-board
-
securo
Cryptographic impl for hybrid classical-post-quantum authentication and secure communication
-
libes
Collection of Elliptic Curve Integrated Encryption Scheme(s)
-
mostro-webtool
A web-based tool for generating deterministic keys and building Mostro protocol messages
-
str0m-openssl
OpenSSL backend for str0m WebRTC
-
mozilla/nss_sys
Firefox Application Services
-
kylix-ml-dsa
ML-DSA (FIPS 204) implementation for the Kylix post-quantum cryptography library
-
agentic-identity-cli
CLI tool for AgenticIdentity — create identities, sign actions, manage trust
-
tpm2
Pure Rust TPM2 TSS
-
chie-crypto
Cryptographic primitives for CHIE Protocol
-
confium
Open-source distributed trust store framework
-
srisum
Compute and check subresource integrity digests
-
br-crypto
crypto
-
caramel-client
A caramel client, to generate keys, requests and fetch updated certificates from a caramel server
-
portal-lib
Secure file transfer library, written in Rust. The library utilizes SPAKE2 for key negotiation over an insecure channel, and ChaCha20Poly1305 Authenticated Encryption to encrypt the…
-
kkv
A Peer-to-Peer Decentralized, Temporary and Anonymous Message System
-
xaeroid
decentralized identity with Ed25519 and hash commitments
-
pq-msg
Pure Rust abstractions for higher-level implementations of post-quantum cryptography in secure messaging protocols
-
ring_signature_verifier
ring signatures generated by an Alice's Ring library
-
ssi-jws
JWS for the ssi library
-
immutable-trace
Tamper-evident immutable audit trace: signing, verification, ingestion and CLI
-
deno_node_crypto
Node crypto compatibility for Deno
-
ppvss
An implmentation of Pre-constructed Publicly Verifiable Secret Sharing
-
crypto_api_blake2
Implements Blake2b for
crypto_api -
rops-cli
SOPS CLI alternative in pure Rust
-
bn-curves
A pure Rust framework for pairing-based cryptography using BN curves
-
pheno-crypto
AES-256-GCM encryption utilities for phenotype-config
-
zopp-storage
Storage abstraction layer for zopp secrets manager
-
totp-sm-rs
A TOTP (Time-based One-Time Password) implementation in Rust with SM3 support
-
kuznechik
Synchronous encryption algorithm "Kuznechik" (GOST R 34.12-2015, GOST R 34.13-2015)
-
firecloud-core
Core types and traits for FireCloud distributed storage
-
dcrypt-api
Public API traits and types for the dcrypt library
-
find_hash
A high-performance, offline hash type identification tool
-
rsa-der
encode and decode public RSA keys using DER
-
otrr
otrr — OTR protocol version 3 and 4
-
rmls
Messaging Layer Security in Rust
-
decanter
implements basic cryptographic primitives native to the ecosystem
-
line-bot-sdk-utils
functions for LINE Bot SDK, including webhook signature validation
-
ntied-server
stable messenger
-
ckks-engine
that provides an implementation of the CKKS (Cheon-Kim-Kim-Song) homomorphic encryption scheme. This enables encrypted computations on real numbers and strings while preserving the privacy of the underlying data…
-
auths-infra-git
Git client adapter for Auths - enables communication with Auths services over Git
-
rcssl
generating X.509 certificates with support for CA, server, client and peer certificate profiles
-
p256k1
Rust wrappers around libsecp256k1 which expose internal scalar and point APIs
-
librqbit-sha1-wrapper
Common interface around various sha1 implementations used in rqbit torrent client
-
vanity-ssh-rs
Generate SSH key pairs with custom patterns in the public key
-
sl-compute-common
secure compute
-
ssh-tresor
Encrypt and decrypt secrets using SSH agent keys
-
rustfuscator
A text obfuscation library using AES-GCM encryption
-
ssclient
SecureStore client for managing user secrets
-
nu_plugin_x509
A nushell plugin for working with x509 certificates
-
disco-rs
A no-std, pure Rust impl of Disco Noise Protocol extension
-
rama-boring-sys
FFI bindings to BoringSSL for Rama
-
openssl-kdf
OpenSSL KDF function abstraction
-
circomkit-rs
A Circom testing & development environment for Rust
-
tibba-util
util for tibba
-
str0m-rust-crypto
Pure Rust crypto backend for str0m WebRTC
-
byte-aes
wrapper around the popular aes crate. The goal is to perform Encrypt and Decrypt operations using the Advanced Encryption Standard 256 bit Algorithm conveninent to use instead of use Low level functions of the aes crate
-
wacore-noise
Noise Protocol implementation for WhatsApp with AES-256-GCM
-
sha2-extensions
Use sha2 as an extension function
-
tk-rand-core
NSA-standard CSPRNG string generation core
-
uselesskey-tonic
tonic transport TLS adapters for uselesskey X.509 certificate fixtures
-
paillier-lsc
Efficient pure-Rust library for the Paillier partially homomorphic encryption scheme
-
rsa_keygen
generating rsa keys with a 12 word seedphrase
-
grain-128aeadv2
stream cipher
-
ncrypt-me
Dead simple encryption library
-
scoop-hash
Hashing library for libscoop
-
zears
AEZ v5 cipher
-
scram
provider library
-
bls_dkg
DKG
-
redoubt-secret
High-level Secret wrapper with automatic zeroization
-
yggdrasil-keys
Quickly generate yggdrasil keys
-
ossuary
establishing secure communication channels between two hosts
-
bls12_381_relic
Bindings for BLS12-381 implemented by relic
-
tectonic-oqs
interface to Open-Quantum-Safe's liboqs
-
ubl-types
UBL types: IDs + DIM, Display/FromStr, validator & helpers for Universal Business Ledger
-
cipher_magma
Block Cipher Magma (GOST R 34.12-2015, former GOST 28147-89)
-
kr
Development Toolkit
-
turing-cipher
A fast Rust implementation of Qualcomm's Turing stream cipher
-
voa-config
configuration of technology backends in VOA
-
uselesskey-jsonwebtoken
jsonwebtoken adapter traits for uselesskey fixtures (EncodingKey/DecodingKey)
-
sheesy-cli
The 'share-secrets-safely' CLI to interact with GPG/pass-like vaults
-
tough-ssm
Implements AWS SSM as a key source for TUF signing keys
-
rustls-ccm
CCM and CCM-8 cipher suites for rustls (TLS 1.2 and TLS 1.3)
-
ockam_transport_websocket
WebSocket Transport for the Ockam Routing Protocol
-
renc
Rust Encryption Engine compatible with the zenc file format
-
ootp
(Open One-time Password) is a supports multiple programming languages. The generated one-time passwords are fully compliant with HOTP (HMAC-based One-time Password) and TOTP (Time-based One-time Password)…
-
lhash
Minimal hashing library
-
mbedtls-sys-auto
Rust bindings for MbedTLS. This version generates the correct bindings at compile time using bindgen
-
pem-iterator
Iterate over PEM-encoded data
-
file_endec
Secure file encryption and decryption from the command line
-
mls-rs-crypto-openssl
OpenSSL based CryptoProvider for mls-rs
-
circomspect
A static analyzer and linter for the Circom zero-knowledge DSL
-
ruqu-qflg
Quantum Federated Learning with Byzantine Tolerance - Privacy-preserving distributed quantum ML
-
ark-ff-zypher
finite fields
-
gm-sm2
China's Standards of Encryption Algorithms SM2
-
vitaminc-aead
Authenticated Encryption with Associated Data (AEAD) primitives. Part of the Vitamin-C cryptographic suite.
-
irmaseal-core
Core library for IRMAseal communication and bytestream operations
-
x509
X.509 certificate serialization
-
street-cred
Manage encrypted secrets for your applications
-
randomorg
A random.org client library. The randomness comes from atmospheric noise, which for many purposes is better than the pseudo-random number algorithms typically used in computer programs.
-
yule-attest
Cryptographic attestation: signed inference logs, audit trails
-
nspm
A password manager i made for fun and learning (don't use this for real and not guaranteed to work)
-
mlkem-fips203
MLKEM [512, 768, 1024] module-lattice key encapsulation mechanism following the FIPS 203 standard
-
dcrypt-pke
Public Key Encryption schemes for the dcrypt library
-
parasol_runtime
supports the Parasol CPU, providing key generation, encryption, and FHE evaluation functionality
-
EZDB
Easy little database
-
openpgp-card-tool-git
Git signing and verification with a focus on OpenPGP cards
-
easy-hasher
Easy hashing library
-
sylow
BLS signature scheme using the alt-bn128 curve
-
packc
Greentic pack builder CLI
-
mozilla/rc_crypto
Firefox Application Services
-
abhedya-kem
Key Encapsulation Mechanism (KEM) for Abhedya PQC
-
sifredb-key-file
File-based key provider for SifreDB
-
ark-poly-zypher
efficient polynomial arithmetic via FFTs over finite fields
-
crown-bin
A cryptographic library
-
bhx5chain
TBTL's library for handling X.509 certificate chains
-
minivault
Local-only, light-weight Encryption as a Service
-
rand_jitter_kernel
interface to Linux kernel jitterentropy_rng
-
foodshare-crypto
Cryptographic utilities for webhook verification and HMAC
-
wireapp/proteus
Axolotl protocol implementation
-
uzkge
App-specific PlonK with various gadgets & primitives
-
xwt-web-sys
xwt that runs in the browser. Powered by wasm-bindgen and web-sys
-
cylinder
high-level cryptographic signing library
-
tafrah-ml-dsa
ML-DSA (FIPS 204) implementation for the Tafrah PQC library
-
ntied-transport
stable messenger
-
bananapeel
A darn-slippery obfuscator algorithm!
-
rinkey
Keyset manipulation command-line tool for Rust port of Google's Tink cryptography library
-
libcipher
Advanced Encryption Standard (AES) for secure data encryption and decryption
-
morf
authenticated encryption layer over RF
-
zvault-cli
ZVault CLI — AI-native secrets manager. Import .env files, inject secrets at runtime, MCP server for AI coding assistants
-
str0m-apple-crypto
Apple CommonCrypto/Security framework backend for str0m WebRTC
-
emissary-util
I2P protocol stack
-
mbedtls-sys-auto-smx
Rust bindings for MbedTLS. This version generates the correct bindings at compile time using bindgen
-
frost-core-myecoria
Types and traits to support implementing Flexible Round-Optimized Schnorr Threshold signature schemes (FROST)
-
rustls-lite
Experimental unsafe non-affiliated rustls lite fork. Don't use please.
-
shamir-3-pass
Shamir 3-pass protocol (commutative encryption)
-
anubis-age
Post-quantum secure encryption library with hybrid X25519+ML-KEM-1024 mode (internal dependency for anubis-rage)
-
black-bagg-sigs
Quantum-Sign detached signature, trust, and crate bundle for black-bagg 0.4.10 (crates.io-only)
-
dusk-safe
Sponge API for Field Elements
-
aes-gcm-siv
Pure Rust implementation of the AES-GCM-SIV Misuse-Resistant Authenticated Encryption Cipher (RFC 8452) with optional architecture-specific hardware acceleration
-
aman
The definitive, high-performance binary integrity & signing platform. Supports P-256, Ed25519, Multi-sig, and Anti-tamper.
-
dcrypt-hybrid
Hybrid cryptography schemes for the dcrypt library
-
neuedu-cryptos-wasm
包含国密算法的密码库。 A library include SM3, SM4 (Chinese ShangMi) crypto algos
-
aws-mpl-cxx
C++ bindings for aws-mpl
-
yaml-reader
yaml-reader是一个yaml读取工具，可以直接通过
x.y.z.w方式读取yaml中的内容，不用逐层解析 -
akv-cli
Azure Key Vault CLI (unofficial) can read secrets from Key Vault, securely pass secrets to other commands or inject them into configuration files, encrypt and decrypt secrets, and managed keys and secrets in Key Vault
-
cryptox
Centralized crypto utilities for rust
-
oskr
High performance distributed works collection
-
boring-sys-vendit
FFI bindings to BoringSSL
-
ssh-portkey
Secure SSH credential manager with a fast ratatui-based TUI, fuzzy search, and encrypted vault
-
quickcrypt
Fast, offline encryption & key management. No cloud. No complexity. Military-grade security.
-
pqcrypto-mldsa
Post-Quantum Signature Scheme mldsa
-
umbral-rs
A pure-Rust implementation of the Umbral threshold Proxy Re-encryption scheme
-
fhe-traits
Traits for the fhe.rs library
-
ReXOR
Cross-platform library with CLI app for encoding and decoding files using XOR encryption
-
nuts-directory
A backend implementation for nuts
-
sgx_tseal
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
ockam_app_lib
Ockam's desktop application library
-
identity_eddsa_verifier
JWS EdDSA signature verification for IOTA Identity
-
tss-keyfile
Decoding of TPM 2.0 TSS Keyfiles from PEM/DER/(ASN.1)
-
syftbox-crypto-protocol
Cryptographic protocol implementation for SyftBox using X3DH key agreement
-
subsoil-crypto-hashing
Hashing primitives
-
amcl_wrapper
Wapper over Milagro Cryptographic Library (version 3)
-
tlog_tiles
c2sp.org/tlog-tiles and c2sp.org/tlog-checkpoint
-
uselesskey-core-seed
Seed parsing and redaction primitives for uselesskey
-
hyphae-handshake
Noise protocol framework handshakes for QUIC
-
s3p-cli
CLI for BlockNet S³P (encrypt→erasure→merkle, fountain tools)
-
sra-wasm
A wasm implementation of the SRA protocol
-
helpers
self use helper library
-
kcr_s3_services_k8s_aws
Kubernetes Custom Resource Bindings
-
rustls-cert-gen
Rust X.509 certificate generator CLI
-
harmonia-vault
Encrypted secret vault with SQLite backend for the Harmonia agent
-
generic-ec-curves
Elliptic curves for
generic-eccrate -
tuple-hash
TupleHash per NIST SP 800-185
-
aes-256-gcm
AES-GCM (Aes 256 Gcm) with some enhancement
-
affinidi-crypto
Cryptographic primitives and JWK types for Affinidi TDK
-
ctr
CTR block modes of operation
-
keetanetwork-asn1
ASN.1 definitions and utilities for Keetanetwork
-
psa-crypto
Wrapper around the PSA Cryptography API
-
pqc_dilithium_edit
Modified version. A post-quantum cryptographic signature scheme based on the hardness of lattice problems over module lattices
-
tweetnacl
api for using tweetnacl
-
rivvend
Rivven broker server with Raft consensus and SWIM membership
-
picky-test-data
Test data for the picky crates
-
stegano-seasmoke
Providing cryptography functionality as library for stegano-core
-
ironcore-search-helpers
Search helpers for working with encrypted values, particularly on the IronCore platform
-
noise-framework
Noise protocol framework in functional style
-
kangarootwelve
BlaKE12: Blazing-fast KEccak on 12 rounds
-
coyote
Embeddable ACME server with programmable challenges and storage
-
frost-adaptor-signature
A Schnorr adaptor signature scheme over the secp256k1 curve that supports FROST and Taproot
-
threshold-secret-sharing
A pure-Rust implementation of various threshold secret sharing schemes
-
rs_internal_state
package serves as an essential building block within the
rs_shieldcryptographic library. It is focused on providing foundational functionality and infrastructure for various cryptographic operations within the… -
fencryption
A program to encrypt/decrypt text, files and directories
-
tls_codec
A pure Rust implementation of the TLS (de)serialization
-
pwsec
Support for password-based encryption
-
whatsapp-rust-tokio-transport
Tokio-based WebSocket transport for whatsapp-rust
-
detsurtnu
Automated mirror of untrusted - Safe, fast, zero-panic, zero-crashing, zero-allocation parsing of untrusted inputs in Rust
-
sequoia-sqv
OpenPGP signature verification program
-
merkle_sigs
Merkle signing
-
wecanencrypt
OpenPGP library for encryption, signing, and key management (includes rpgp)
-
curve25519-parser
Curve25519 Parser - DER/PEM parser for OpenSSL Ed25519 / X25519 keys
-
tangy-lib
Tang protocol library implementation
-
rustls-mbedcrypto-provider
Mbedtls based crypto provider for rustls
-
otp-pass-import
import OTP secret files extracted using
extract-otp-secrets(https://github.com/scito/extract_otp_secrets) intopass(https://www.passwordstore.org) -
sealwd
Secure password and token management library for Rust, featuring hashing, encryption, and random generation
-
datex-crypto-web
Web implementation of the DATEX Crypto facade for WASM targets
-
ring-lwe
Implements the ring learning-with-errors public key encrpytion scheme
-
sunscreen_curve25519
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
sgxencrypt
Cli tool for encrypting content for fleek network sgx enclaves
-
matrix-lite-rs
Production-ready Matrix protocol implementation with Redis backend, E2EE (Olm/Megolm), and WASM support for scalable real-time messaging
-
hiae
High-throughput Authenticated Encryption (HiAE) algorithm implementation
-
pipebuf_rustls
PipeBuf wrapper for Rustls
-
armature-acme
ACME protocol support for automatic TLS certificates in Armature
-
oboron-py
Python bindings for Oboron - general purpose encryption and encoding library
-
mbedtls-platform-support
support library for the
mbedtlscrate, providing platform and target specific implementations of all necessary functions. By separating this logic into a separate crate, multiple… -
pgjwt_rs
PostgreSQL extension for JWT verification with RS256 and Ed25519 support
-
sidh
An efficient supersingular isogeny-based cryptography library
-
p47h-cli
CLI tool for P47H policy validation and DID management
-
p12_q3
pure rust pkcs12 tool
-
mal_dev_core
Core cryptographic and transport utilities for loader
-
ristretto_jit
JVM JIT Compiler
-
akd_core
Core utilities for the akd crate
-
wa-rs-tokio-transport
Tokio-based WebSocket transport for whatsapp-rust
-
argon2-rs
Argon2 password hashing library for Rust
-
dlog-group
Unified wrapper around different prime-order cryptographic groups where the discrete log, computational Diffie–Hellman, and decisional Diffie–Hellman problems are believed to be hard
-
ubl-ledger
UBL Ledger: append-only NDJSON with async writer, WAL, verify for Universal Business Ledger
-
p47h-open-core
Cryptographic primitives and policy engine for secure identity management
-
XPManager
A fast and efficient CLI tool for managing passwords and encrypting sensitive data
-
atlas-generic-token
Atlas Program Library Generic Token
-
monerochan-recursion-compiler
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
rs-builder-signing-sdk
Polymarket Builder API authentication with HMAC-SHA256 signatures
-
featherdb-crypto
AES-256-GCM encryption with hardware acceleration for FeatherDB
-
nostro2-nips
Nostro2 is a simple toolset for interacting with the Nostr protocol
-
phalanx-crypto
🛡️ Phalanx - General-purpose group E2E encryption protocol
-
xkcp-sys
Native bindings to the XKCP library
-
dalek-test-curve-docs
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
pbkdf2
Generic implementation of PBKDF2
-
miracl32
version of miracl/core for 32-bit no_std platforms
-
git_vault
A simplified version control system built in Rust for local files, quite similar to how git functions
-
podman-sequoia
A polyfill to use Sequoia as a signing backend for containers
-
kcr_cert_manager_io
Kubernetes Custom Resource Bindings
-
spl-elgamal-registry-interface
SPL ElGamal Registry Interface
-
ec25519
Small, self-contained, wasm-friendly elliptic curve algorithms for 25519 curve family
-
checkpipe
Perform a computation over some bytes passing through some struct
-
plexi-cli
A flexible auditor companion client
-
pqcrypto-picnic
Picnic implementation for
pqcrypto -
chamox
procedural macro to inject obfuscated, meaningless code to increase reverse engineering complexity
-
checkasum
A small utility to verify the data integrity of a downloaded file with its expected checksum
-
getmyconfig
Read encrypted config and secrets from remote storage
-
gcm-nonceless
Decrypts GCM encrypted data without access to the nonce
-
mls-rs-crypto-awslc
AWS-LC based CryptoProvider for mls-rs
-
trifid-pki
Nebula PKI system
-
leancrypto-sys
Rust language binding for leancrypto, a cryptographic library with stack-only support and PQC-safe algorithms
-
kg_passgen
Password generator that hashes an input master password and a service url
-
device-agent
Device-side helpers to build and sign immutable trace records
-
nethsm-backup
binary for working with encrypted NetHSM backups
-
uselesskey-ring
ring 0.17 adapter traits for uselesskey RSA/ECDSA/Ed25519 fixtures
-
ristretto_cli
A Java Virtual Machine (JVM) CLI
-
bunker
Dead simple, secure password management
-
chacha20stream
A writable wrapper stream for encryption and decryption with the stream cipher chacha20_poly1305
-
bls_ringct
A pure-Rust implementation of Ring Confidential Transactions
-
lock_box
A command-line tool for generating and managing passwords
-
libaes
AES cipher in safe Rust with no dependencies
-
sec1
Pure Rust implementation of SEC1: Elliptic Curve Cryptography encoding formats including ASN.1 DER-serialized private keys as well as the Elliptic-Curve-Point-to-Octet-String encoding
-
pqc_kyber_kyberslash
post-quantum Kyber KEM algorithm
-
azure_mgmt_fist
generated REST API bindings
-
shippo_publish
GitHub release publisher for Shippo
-
hmac-sha1-compact
A small, self-contained SHA1 and HMAC-SHA1 implementation
-
libcrux-aead
Formally verified AEAD library
-
ts-token
JSON web token library for my projects
-
soteria-rs
Wrapper around a secret that is stored in memory with the goal to protect against side-channel and speculative attacks
-
mp4decrypt
Decrypt CENC protected MP4 content using Bento4
-
curve420
elliptic curve in Rust
-
frost-p256
A Schnorr signature scheme over the NIST P-256 curve that supports FROST
-
curveforge
Optimised, secure, and generalised algorithms for elliptic curve arithmetic
-
pg-core
PostGuard core library communication and bytestream operations
-
obfs4
Pure rust implementation of the obfs4 pluggable transport
-
gitclaw
Official GitClaw SDK for Rust - The Git Platform for AI Agents
-
angulu-cli
password tool
-
frost-core-unofficial
Types and traits to support implementing Flexible Round-Optimized Schnorr Threshold signature schemes (FROST)
-
wechat-api-rs
SDK for WeChat Official Account and Mini Program APIs
-
secret-store-sdk
Rust SDK for XJP Secret Store Service
-
rustls-aws-lc-rs
An aws-lc-based crypto provider for rustls
-
abe_policy
Policy and attributes definition for ABE cryptosystems
-
roughenough-common
Shared cryptography and encoding utilities for Roughenough
-
curveforge-traits
Optimised, secure, and generalised algorithms for elliptic curve arithmetic
-
sfynx
General-purpose onion routing packet construction and processor based on Sphinx
-
trackone-constants
Shared constants for TrackOne crates
-
tectonic-fn-dsa-comm
FN-DSA signature scheme
-
lllv-core
LLLV — Cryptographic capsules for verifiable retrieval
-
eccoxide
elliptic curve cryptography (ECC) framework
-
enigma-aead
AEAD + framing + nonce transport layer for Enigma secure messaging
-
bls_bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
tongsuo
OpenSSL bindings
-
fn-dsa-kgen
FN-DSA signature scheme
-
tafrah
Native Rust Post-Quantum Cryptography library
-
silent-sparrow
A minimal, scheduled, cryptographically signed status beacon
-
tpksig
Decoding the TPK Signing Block
-
hdpki
Hierarchical deterministic key derivation for OpenSSH and X.509
-
azure_svc_attestation
generated REST API bindings
-
bssh-russh
Temporary fork of russh with high-frequency PTY output fix (Handle::data from spawned tasks)
-
ark-r1cs-std-zypher
A standard library for constraint system gadgets
-
gnip44
nostr NIP-44 encryption code
-
cosmian_openssl_provider
OpenSSL cryptographic provider
-
esdm-tool
small tool to query and use ESDM
-
str0m-wincrypto
Supporting crate for str0m
-
sekrit
Encrypt any file, decrypt anywhere. File encryption that doesn't suck.
-
seal-crypto-wrapper
A high-level, misuse-resistant cryptographic wrapper library for Rust, binding algorithms to keys to ensure type safety
-
obs-sdk
针对华为云的OBS工具封装rust版本的sdk
-
iso8583_rs
define/parse/assemble and send/receive (via TCP) an ISO8583 message
-
infolyt-ipc
IPC protocol types for Infolyt
-
kryoptic
A PKCS #11 software token written in Rust
-
rsa_ext
Pure Rust RSA implementation
-
userspace-rng
secure randomness with entropy generated in userspace
-
lattice-safe-suite
Post-quantum cryptography suite — ML-DSA (FIPS 204) + FN-DSA (FIPS 206) + ML-KEM (FIPS 203) + SLH-DSA (FIPS 205)
-
sppg
CLI passphrase generator using the diceware method
-
xitter-txid
Generate X (Twitter) client transaction IDs
-
rustls-spiffe
SPIFFE Integration with Rustls to provide Server and Client certs/keys and CA bundle
-
rs_sha224
rs_sha224is a Rust implementation of the SHA-224 cryptographic hash algorithm, part of the largerrs_shieldproject. This package provides SHA-224 hashing functionality in a standalone manner… -
enigma-double-ratchet
Standalone Signal-style double ratchet focused on deterministic, reusable async messaging primitives
-
bertie
Minimal TLS 1.3 implementation
-
ssi-dids-core
Core types and traits for DIDs for the ssi library
-
sentc-crypto
The main implementation of the sentc sdk
-
bergshamra-pkcs12
PKCS#12 parser for Bergshamra XML Security library
-
crab-gnupg
API for GNU Privacy Guard (GnuPG) written in rust. Manage gpg keys and secure files using rust.
-
paseto-v4-sodium
PASETO/PASERK V4 based on libsodium
-
quantum_cryptographic_toolkit
A toolkit for developing, testing, and deploying quantum-resistant cryptographic algorithms
-
passwordEncryption
一个安全的密码哈希库，使用 Argon2 算法保护用户密码
-
rscrypt
fast, and secure encryption tool written in Rust
-
libcrux-chacha20poly1305
Formally verified ChaCha20-Poly1305 AEAD library
-
mpc-relay-server
Noise protocol websocket relay server for MPC/TSS applications
-
wacore-libsignal
Signal Protocol implementation for the WhatsApp platform
-
ripemd
Pure Rust implementation of the RIPEMD hash functions
-
native-pkcs11-traits
Traits for implementing and interactive with native-pkcs11 module backends
-
kestrel-crypto
Cryptography backend for Kestrel
-
real_time_md_editor_api
Serves a Rust Actix‑Web backend to Implement the WebSocket sync logic,oauth2 and jsonwebtoken crates, DB
-
shamir-algorithm
Shamir's Secret Sharing algorithm using Galois Field arithmetic over GF(256)
-
yule-verify
Cryptographic integrity verification: Merkle trees, signatures, and model manifests
-
sidefuzz
Fuzzer to automatically find side-channel (timing) vulnerabilities
-
agentic-identity-ffi
C FFI bindings for AgenticIdentity
-
scion-sdk-utils
SCION endhost SDK utilities
-
chacha20poly1305-nostd
Pure-Rust ChaCha20-Poly1305 AEAD implementation for no_std/bare-metal targets (avoids LLVM SIMD issues)
-
hashtree-rs
Rust bindings for the hashtree library
-
gsw-rs
GSW (Gentry-Sahai-Waters) lattice-based fully homomorphic encryption in Rust
-
bessie_bin
a demo/test CLI for the Bessie cipher, NOT FOR PRODUCTION USE
-
openmls_rust_crypto
A crypto backend for OpenMLS implementing openmls_traits using RustCrypto primitives
-
concrete
open-source FHE Compiler that simplifies the use of fully homomorphic encryption (FHE)
-
pkgar-keys
Key management tool/library for pkgar
-
ecksport-auth
Native auth impl using NaCl-based signing key system
-
nuts-tool
A cmdline utility for the nuts container
-
qserde
a non-std rust library for serializing/deserializing ml-kem(aka kyber) public key, encapsulating/decapsulating 256 bit keys and so on
-
sha1-extensions
Use sha1 as an extension function
-
sequoia-ipc
Interprocess communication infrastructure for Sequoia
-
uselesskey-core-negative-pem
PEM-focused negative fixture corruption helpers for test fixtures
-
merkle-sdk
seamless integration with Merkle's services
-
credman
A little command line tool based on RustCrypto: RSA library
-
cosmian_crypto_base
Crypto lib for hybrid encryption and pure crypto primitives
-
nrf-aes-gcm
AES-GCM support for nordic chips using the aead crate primitives
-
sentc-crypto-light
The main implementation of the sentc light sdk
-
arcanum-asymmetric
Asymmetric cryptography: RSA, ECIES, key exchange
-
anubis-vault
Post-quantum secure secrets manager with ML-KEM-1024, ML-DSA-87, zero-knowledge proofs, Shamir sharing, and memory protection. The ultimate security vault.
-
student-key-manager
Secure key management for student data anonymization with encryption and database integration
-
age-plugin-tlock
tlock plugin for age clients
-
age-plugin
[BETA] API for writing age plugins
-
mkserial
Serial number generator for X.509 certificates
-
arcanum-threshold
Threshold cryptography for the Arcanum cryptographic engine
-
wtfrost
Weighted Threshold implementation of FROST, a Schnorr aggregated threshold signature scheme
-
vrf_fun
RFC 9381 compliant Verifiable Random Function (VRF) for secp256k1
-
kychacha_crypto
A Post-Quantum Secure Encryption Protocol using chacha20poly1305 and CRYSTALS-kyber
-
chksum-md5
MD5 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
envcipher
Encipher .env files to make accidental leaks harmless
-
brsl2
Cayley hashing as in 'Navigating in the Cayley Graph of SL₂(𝔽ₚ)'
-
he-ring
that provides fast implementations of rings commonly used in homomorphic encryption, built on feanor-math
-
cryptsetup-rs
Rust wrapper around the libcryptsetup library, allowing manipulation of LUKS devices in Linux
-
acme-micro
requesting certificates from an ACME provider (acme-lib fork)
-
ciphercore-adapters
An auxiliary crate to bridge CipherCore with its C bindings
-
spki
X.509 Subject Public Key Info (RFC5280) describing public keys as well as their associated AlgorithmIdentifiers (i.e. OIDs)
-
zk-paillier
Collection of Paillier cryptosystem zero knowledge proofs written in Rust
-
signstar-sign
Signstar signing responses for Signstar signing requests
-
lwbc
Compact implementations of small block ciphers (SPECK, SIMON, SIMECK)
-
tafrah-abi
C ABI layer for Tafrah PQC primitives
-
loopring_sign
generates an eddsa signature for loopring
-
tor-key-forge
Low level cryptography wrappers used by Tor
-
sh-secgen
secret key generator
-
kcr_trino_stackable_tech
Kubernetes Custom Resource Bindings
-
cbc
Cipher Block Chaining (CBC) block cipher mode of operation
-
ssh-agent
implementing an SSH agent
-
modular_math
modular arithmetic crate for U256
-
tcrypt
A secure cryptographic library for key exchange and encryption
-
chacha_box_ietf
Sealed boxes using X25519 and ChaCha20-Poly1305 (RFC 8439): anonymously send unforgeable messages to a recipient given their public key
-
zvault-core
Core library for ZVault — AES-256-GCM barrier, Shamir seal, token auth, policy engine, audit logging
-
sl-mpc-traits
small utility traits
-
tink-awskms
AWS-KMS integration for Rust port of Google's Tink cryptography library
-
maybenot-cli
A CLI tool for defense generation using Maybenot
-
gennaro-dkg
The Gennaro Distributed Key Generation Algorithm
-
variant-ssl-sys
FFI bindings to OpenSSL variants such as BoringSSL / AWS-LC / Tongsuo
-
tsumiki-x509
X.509 certificate parsing and handling with full v3 extensions support
-
cryptraits
Cryptographic primitives traits collection
-
pg-curve
Fork of the BLS12-381 pairing-friendly elliptic curve construction with target group serialization
-
isap-aead
Pure Rust implementation of ISAP v2 with Ascon and Keccak
-
krow
key derivation function
-
tink-signature
Signature functionality for Rust port of Google's Tink cryptography library
-
pezsc-keystore
Keystore (and session key management) for ed25519 based chains like Pezkuwi
-
zkcg-halo2-prover
Prover crate for ZKCG — generate Halo2 proofs for off-chain computation + policy compliance
-
alpine-protocol-rs
Authenticated Lighting Protocol (alpine): secure control-plane + streaming guard for lighting data
-
redoubt
Systematic encryption-at-rest for in-memory sensitive data in Rust
-
ansivault
CLI tool ansible-vault 1.1 implementation
-
kjwt
mini JSON Web Token library
-
mc-rand
A platform abstraction layer providing a cryptographic RNG,
McRng -
sequoia-policy-config
Configure Sequoia using a configuration file
-
sha-to-hex
function to encode string using secret and return hex string
-
paspio
A password entropy calculator
-
rustls-ring
A *ring*-based crypto provider for rustls
-
ratrod
A TCP / UDP tunneler that uses public / private key authentication with encryption
-
sare-core
Core library for the SARE encryption standard
-
kylix-core
Core traits and utilities for the Kylix post-quantum cryptography library
-
rs-password-utils
Password utilities, writen in Rust
-
craftls
Rustls is a modern TLS library written in Rust
-
rustls-ffi
Rustls bindings for non-Rust languages
-
builder_signing_sdk_rs
Small signing utilities for Builder API auth and EIP-712 helpers used by Polymarket clients
-
libfortress
Fortress library
-
hrp
generate human-readable passwords
-
volaris-cli
Efficient, robust, and verified command-line file encryption
-
mcircuit
tools for working with arithmetic circuits on generic fields
-
x509lint
X.509 linter (RFC 5280 certificates and CRLs)
-
wedpr_l_bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
rusty_crypto
cryptographic suite for Rust
-
logcrypt
CLI tool for encrypting private data in log files
-
animo-secure-env
secure-env is a wrapper library around the Android KeyStore and the iOS Security Framework for key creation and sign operations using the Secure Element
-
libsignify
Create cryptographic signatures for files and verify them
-
didcomm
DIDComm for Rust
-
key_value_service
A refreshingly simple data-driven game engine and app framework
-
linux-crng-ioctl
wrapper for Linux kernel kernel RNG ioctls
-
wa-rs-appstate
Appstate for WhatsApp protocol
-
jwt2
JSON Web Tokens done right... hopefully.
-
mc-oblivious-traits
Traits and interfaces for components related to Oblivious data structures
-
presence
Privacy friendly presence tokens
-
aes-keywrap
AES Key Wrap construction (AES-KW, RFC 3394 / RFC 5649)
-
postio
Encrypted file sender/queue/receiver using an AWS S3 backend
-
commit-reveal
SHA256-based commit-reveal scheme for fair P2P verification
-
vitaminc-encrypt
Secure, flexible and fast encryption for Rust types. Part of the Vitamin-C cryptographic suite.
-
ark-serialize-zypher
serializing types in the arkworks ecosystem
-
firecloud-crypto
Encryption and key management for FireCloud distributed storage
-
dumb-crypto
Dumb, but easily verifiable implementations of crypto algorithms
-
rustls-post-quantum
Experimental support for post-quantum key exchange in rustls
-
openpgp-ca
OpenPGP CA is a tool for managing and certifying OpenPGP keys
-
wechat_work_crypto
Pure Rust implementation of WeChat Work (企业微信) message encryption/decryption library
-
semaphore-rs-keccak
Rust support library for Semaphore
-
yohu
A versatile command-line cryptography tool implementing multiple cipher algorithms for educational and practical use
-
r255b3
Short Schnorr signatures using Ristretto255 and Blake3
-
bls_acml
BLS signatures. 2 variations. Multi-signature, Threshold signature, batch verification support
-
zerocaf
A pure-Rust implementation of elliptic curve operations over the Doppio-curve
-
libcrux-ecdh
Libcrux ECDH implementation
-
ssh-parser
Parser for the SSH protocol
-
helvetia
API server that allows anonymous storage of secrets, with a simple rule; any user can create a secret using a token, and they can only access it using the same token
-
medallion
JWT library for rust using serde, serde_json and openssl
-
opaque-borink
configuration of OPAQUE, a passowrd-authenticated key exchange protocol
-
bergshamra-dsig
XML Digital Signatures for Bergshamra XML Security library
-
avila-crypto
Criptografia nativa - substitui sha2, hmac, base64, argon2
-
kyber-nz
A pure Rust, secure and robust implementation of FIPS 203 (ML-KEM)
-
ark-relations-zypher
rank-one constraint systems
-
quasor
A high-security AEAD based on a Duplex Sponge construction with SHAKE256, Argon2id, and BLAKE3
-
ore-rs
Order-revealing encryption library used by the CipherStash searchable encryption platform
-
portal-client
Secure file transfer utility, written in Rust. The protocol utilizes SPAKE2 for key negotiation over an insecure channel, and ChaCha20Poly1305 Authenticated Encryption to encrypt…
-
bip32
hierarchical key derivation implemented in a generic, no_std-friendly manner. Supports deriving keys using the pure Rust k256 crate or the C library-backed secp256k1 crate
-
pqcrypto-mlkem
Post-Quantum Key-Encapsulation Mechanism mlkem
-
uselesskey-core-hash
Length-prefixed hashing helpers shared by deterministic fixture derivation paths
-
rust_keylock
A password manager with goals to be Secure, Simple to use, Portable and Extensible
-
elliptic-curve
General purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof
-
click
A command-line REPL for Kubernetes that integrates into existing cli workflows
-
pqc_kyber_edit
post-quantum Kyber KEM algorithm, with a fix for pqc_kyber KyberSlash
-
credx
Anonymous Credentials 2.0 implemention
-
sta-rs
Distributed Secret-Sharing for Threshold Aggregation Reporting
-
lazy-locker
A secure local secrets manager with TUI interface and SDK support
-
tor-hsclient
Arti's implementation of an onion service client
-
tectonic-fn-dsa-vrfy
FN-DSA signature scheme
-
bt_secure_storage
lightweight Secret Vault and Encryption Library for Rust to store secrets
-
signature_bls
The Ockam BLS signature impementation
-
rust-elgamal
A straightforward implementation of ElGamal homomorphic encryption using the ristretto255 elliptic curve group
-
rustls-graviola
graviola is a modern, fast cryptography library
-
clia-rustls-mod
Rustls is a modern TLS library written in Rust. This is clia-mod using ring.
-
safe_paillier_rust
Paillier cryptosystem with homomorphic properties, leveraging Rust's type system and safety guarantees
-
hashtree-blossom
Blossom protocol client for hashtree - upload/download blobs with NIP-98 auth
-
certbot-dns01-hook
Hook for certbot to serve the DNS01 challenge secret TXT record
-
amcl
The Apache Milagro Cryptographic Library (version 3)
-
elliptic-curve-tools
Extra Rust-Crypto elliptic-curve adaptors, functions, and macros
-
septid
Pure Rust implementation of the spiped protocol
-
frost-ed448
A Schnorr signature scheme over Ed448 that supports FROST
-
reverie-zk
An efficient implementation of the NIZKPoK outlined in KKW 2018
-
threatflux-hashing
High-performance async file hashing library supporting MD5, SHA256, SHA512, and BLAKE3
-
d7s_auth
Credential storage for d7s using platform keyrings
-
ssi-claims-core
Core types and traits for Verifiable Claims in the
ssilibrary -
ark-ec-zypher
elliptic curves and pairings
-
tink-prf
PRF functionality for Rust port of Google's Tink cryptography library
-
xs_ed25519-dalek
Fast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust
-
crypter_project_sk
A secure file encryption tool using AES-GCM and Argon2
-
vrf-r255
A Verifiable Random Function built on the ristretto255 group
-
pqc-ml-kem
Module-Lattice Key Encryption Mechanism (ML-KEM)
-
nuts-backend
A secure storage library
-
blake-hash
BLAKE hash functions
-
ramp-primes
Generating Large Prime and Composite Numbers using ramp with a simplistic interface
-
ostring_auth
A license authentication module
-
pw_hash
A collection of password hashing routines in pure Rust. Fork of pwhash by inejge.
-
cosmian_findex_client
Cosmian Findex REST Client
-
hakanai-lib
Client library for Hakanai, a secure secret sharing service
-
p47h-engine
Core engine for p47h governance - pure library, no WASM artifact
-
aes_frast
lib for AES encryption and decryption, coded in pure safe Rust-lang
-
cthash
const fn implementation of hash functions including MD4, MD5, SHA-1, SHA-2, SHA-3, Keccak
-
keygate-jwt
Easy to use, secure, and opinionated JWT (JSON Web Tokens) implementation for Rust
-
hpke-rs-crypto
Traits and types for HPKE crypto backends
-
monerochan-primitives
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
simple-ecdh
ecdh implementation for rust
-
pflow-zk
ZK proof traits and incidence matrix extraction for Petri nets
-
lamport_signature_plus
Lamport one-time signature scheme
-
simple_sign
signing library
-
sunscreen_bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
sthash
A very fast cryptographic hash function for large data
-
wolf-crypto
Safe and thin API for wolfSSL's wolfcrypt
-
rust_notes_app
encrypted Notes App I developed as a project
-
bee2-rs
Bindings for cryptographic library Bee2
-
password_policy
A comprehensive password generator and strength analyzer with configurable policies
-
nostro2-signer
Nostro2 is a simple toolset for interacting with the Nostr protocol
-
plonky2_monolith
Use Monolith hash to generate Plonky2 proofs and to write Plonky2 circuits
-
hashery
A flexible and efficient async file hashing library supporting multiple hash algorithms (MD5, SHA1, SHA2, SHA3, BLAKE2, BLAKE3)
-
paseto-v4
PASETO/PASERK V4 based on RustCrypto
-
file_encryptor
libsodium-based file encryption/decryption CLI
-
vks_client
Client implementation of the Verifying Keyserver (VKS) interface
-
aead-gcm-stream
Pure Rust implementaion of AES GCM cipher for data streams
-
eme-mode
EME block cipher mode of operation
-
group-math
Group (mathematics) interface and implementations
-
sl-paillier
Paillier encryption
-
webcryptobox
Convenient opiniated wrappers around OpenSSL to use WebCrypto compatible cryptography
-
bellare-micali
1-out-of-2 Oblivious Transfer Protocol
-
dcrypt-symmetric
Symmetric encryption algorithms for the dcrypt library
-
sigma-proof-compiler
creating and verifying sigma protocols (zero-knowledge proofs of knowledge) using symbolic computation over elliptic curves
-
sha3-kmac
KMAC per NIST SP 800-185
-
proxy-signatures
Proxy signatures with delegation by warrant
-
paillier
A pure-Rust implementation of the Paillier encryption scheme
-
pqc-nostd
PQC no_std no_alloc Kyber Dilithium embedded 100% Rust
-
zkinterface
An implementation of zkInterface
-
rpgpie-sop
Experimental SOP implementation based on rpgpie
-
Cupcake
lattice-based additive homomorphic encryption scheme
-
lowmc-rs
LowMC block cipher implementation in Rust
-
sharks
Fast, small and secure Shamir's Secret Sharing library crate
-
plain-aes
Rijndael's cipher, commonly known as AES
-
s2n-quic-rustls
Internal crate used by s2n-quic
-
awol2005ex_kerberos_constants
Constants used by different objects and actors of the Kerberos protocol
-
hasher
Package hasher provides a Hasher trait
-
ockam_transport_ble
Bluetooth Low Energy (BLE) Transport for the Ockam Routing Protocol
-
mls-rs-crypto-webcrypto
SubtleCrypto based CryptoProvider for supporting mls-rs in a browser
-
vitaminc-permutation
Secure Permutation functions. Part of the Vitamin-C cryptographic suite.
-
mpc-client
Noise protocol websocket relay client for MPC/TSS applications
-
simple_comms
communication protocol for AH
-
wacore-appstate
Appstate for WhatsApp protocol
-
tollway-core
Post-quantum cryptographic primitives with forward secrecy and authentication
-
chksum-sha2-224
SHA-2 224 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
aerovault-cli
CLI for AeroVault v2 encrypted vaults
-
rsop-oct
SOP CLI tool for OpenPGP card devices based on rPGP
-
lakers-shared
EDHOC crypto library constants crate
-
sha2-compress
SHA2 compress function
-
xwt-test-assets
Static test assets for xwt
-
cosmian_kyber
post-quantum Kyber KEM algorithm. This is a fork of the
pqc_kybercrate -
voided-core
Core cryptographic primitives for the Voided encryption library
-
curve25519-entropic
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
libpaillier
The Paillier cryptosystem is a public key crytosystem based on composite degree residuosity classes. Paillier ciphertexts are homorphic in that the can be added
-
fn-dsa-comm
FN-DSA signature scheme
-
certify
Generate client cert with CA cert
-
libcold
High-assurance crypto protocol library for Coldwire messenger (Strandlock implementation)
-
rand_jitterentropy
rand implementation for jitterentropy-library in Rust
-
open-agent-id
Open Agent ID Rust SDK - Register, sign, and verify AI agent identities
-
pakery-core
Shared utilities for PAKE protocol implementations
-
picnic-sys
Declarations for using Picnic's shared library
-
wasi-crypto
Experimental implementation of the WASI cryptography APIs
-
schnorr
Signatures
-
nethsm-config
working with application configuration files for Nitrokey NetHSM devices
-
sqisign-core
Core types and traits for SQIsign post-quantum signature scheme
-
concrete-core
Concrete is a fully homomorphic encryption (FHE) library that implements Zama's variant of TFHE
-
oqs-safe
Stable, minimal, safe Rust wrapper over libOQS for PQ KEM/SIG (ML-KEM/Dilithium) with explicit mock-only dev mode
-
jwt-rustcrypto
encoding, decoding, and validating JSON Web Tokens (JWTs) implemented using Rust Crypto libraries
-
eternaltwin_password
Password implementation
-
lib2fas
Unofficial implementation of 2fas for Rust (as a library)
-
freebird-crypto
Cryptographic primitives for the Freebird privacy-preserving authentication system, including VOPRF implementation
-
semaphore-rs-hasher
Rust support library for Semaphore
-
chacha20
stream cipher (RFC 8439) implemented in pure Rust using traits from the RustCrypto
ciphercrate, with optional architecture-specific hardware acceleration (AVX2, SSE2). Additionally provides the ChaCha8… -
secret-box
Safe boxing mechanism for sensitive values with automatic zeroization
-
apfsds-crypto
Cryptographic primitives for APFSDS (X25519, AES-GCM, Ed25519)
-
x509cert
anypki fork of X.509 certificate parser and utility functionality
-
bcrypt-no-getrandom
Easily hash and verify passwords using bcrypt without getrandom or zeroize, providing near-complete functionality without alloc or std
-
neuron-crypto-hardware
Stub crypto provider for PKCS#11 / YubiKey PIV hardware tokens
-
shadow-messaging
End-to-end encrypted messaging with secure channels and offline queues for Shadow Network
-
hashes
cryptographic hash function algorithms
-
lsx
A pure, safe Rust implementation of the Twofish block cipher and the SHA-256 cryptographic hash function
-
test_findex_server
Run a test Findex server for testing purposes
-
argonautica
Idiomatic Argon2 password hashing for Rust
-
phasher
CLI program hashing passwords into PHC strings
-
p12_polyfill
Allows to use pkcs12 generated by openssl v1 in rustls and native-tls (vendored openssl-src v3)
-
rs_sha1
rs_sha1is a Rust implementation of the SHA-1 cryptographic hash algorithm, part of the largerrs_shieldproject. This package provides SHA-1 hashing functionality in a standalone manner… -
aead-io
A wrapper around Write/Read interfaces with AEAD
-
openpgp-cert-d
Shared OpenPGP Certificate Directory
-
infisical
Official Rust SDK for Infisical
-
poly1305
universal hash function and message authentication code
-
zerovault
Fort-Knox document encryption vault with defense-in-depth security
-
fuzzytags
a probabilistic cryptographic structure for metadata resistant tagging
-
openmls_libcrux_crypto
A crypto backend for OpenMLS based on libcrux implementing openmls_traits
-
ipcrypt2
format-preserving encryption of IP addresses. Supports both deterministic and non-deterministic encryption modes
-
cryptirust
A flexible password generator that creates pronounceable passwords with adjustable entropy and custom patterns
-
sunscreen_tfhe
contains the Sunscreen Torus FHE (TFHE) implementation
-
rustls-openssl
Rustls crypto provider for OpenSSL
-
arcanum-symmetric
Symmetric encryption algorithms for the Arcanum cryptographic engine
-
des
Triple DES (3DES, TDES) block ciphers implementation
-
pkloong-kcapi-sys
Low-level Rust FFI bindings and build integration for libkcapi
-
simple-encrypt
file encryption tool using AES-GCM
-
uselesskey-core-negative-der
DER-focused negative fixture builders for deterministic corruption in uselesskey
-
pki
Public key infrastructure tools for Rust
-
ilari_l/btls
Relatively bare-bones TLS (Transport Layer Security) implementation
-
centipede
A scheme for instantiating KMS's with recovery
-
dstu8845
Strumok (DSTU 8845:2019)
-
ockam_node
Ockam [Ockam][main-ockam-crate-link] Node and is intended for use by crates that provide features and add-ons to the main [Ockam][main-ockam-crate-link] library. The main [Ockam][main-ockam-crate-link]…
-
sha3_ce
SHA-3 (Keccak) hash function
-
libcrux-poly1305
Formally verified Poly1305 MAC library
-
aes256ctr_poly1305aes
Pure Rust implementation of the AES256CTR-Poly1305AES Authenticated Encryption with optional architecture-specific hardware acceleration
-
secr
secret manager
-
hpke_pq
Fork of hpke that adds PQ modes
-
agent-uri-attestation
PASETO v4.public attestation for agent-uri
-
tafrah-ml-kem
ML-KEM (FIPS 203) implementation for the Tafrah PQC library
-
bergshamra-enc
XML Encryption for Bergshamra XML Security library
-
lockman
A secure implementation for managing encrypted files
-
pqcrypto-hqc
Post-Quantum Key-Encapsulation Mechanism hqc
-
threefish-cipher
Threefish block cipher
-
tsumiki-pkcs
PKCS standards (PKCS#1, PKCS#8, PKCS#9, SEC1) for cryptographic key handling
-
envvault
A secure environment variable management tool with encryption and team collaboration features
-
randompass
🔑 A simple static password generator
-
star-sharks
Shamir's Secret Sharing library for the STAR protocol
-
tafrah-traits
Shared traits and error types for the Tafrah PQC library
-
oqs-sys
Bindings to liboqs
-
vitaminc-random
Secure Random Number Generation. Part of the Vitamin-C cryptographic suite.
-
chksum-sha2-384
SHA-2 384 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
chewie-crypto
Cryptographic primitives and secret management for Rust applications
-
secrets-nats-kv
A secrets backend for wasmCloud that uses NATS as a key-value store
-
rust-sign
Document signing library using BLAKE3 hashing and Ed25519 signatures
-
rust-config-secrets
encrypting and decrypting secrets within configuration files
-
kyber-rs
A toolbox of advanced cryptographic primitives for Rust
-
p521
Pure Rust implementation of the NIST P-521 (a.k.a. secp521r1) elliptic curve as defined in SP 800-186
-
ysfed
encrypting and decrypting files using a password
-
QuantCrypt
post-quantum cryptography and PKI
-
srp-conflux
Secure Remote Password (SRP) protocol implementation
-
neo-crypto
An encryption algorithm library written in Rust
-
stegosaurust
A steganography tool, written in rust
-
kemeleon
encoding algorithms for obfuscating ML-KEM handshake elements
-
ironcrypt
secure password hashing, RSA key generation, and managing the encryption and verification of passwords and binary files
-
test-x25519-dalek
X25519 elliptic curve Diffie-Hellman key exchange in pure-Rust, using curve25519-dalek
-
curve25519-dalek-organism
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
tfhe-cuda-backend
Cuda implementation of TFHE-rs primitives
-
babyjubjub-rs
BabyJubJub elliptic curve implementation
-
crabcrypt
A work in progress cryptographic library that currently supports hashing
-
maybenot-machines
A collection of useful Maybenot machines (e.g., as parts of defenses)
-
timely-pass-sdk
A secure, time-based password policy manager SDK
-
monerochan-curves
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
libhydrogen
A modern and easy to use cryptography library
-
pgp-cleartext
PGP cleartext framework implementation
-
frost-secp256k1-tr-unofficial
A Schnorr signature scheme over the secp256k1 curve that supports FROST and Taproot
-
sequoia-keystore
Sequoia's private key store server
-
wasi-crypto-guest
Example WASI-Crypto guest bindings for Rust
-
remolab-passgen
A secure, deterministic password generator with both CLI and interactive modes
-
kimberlite-crypto
Cryptographic primitives for Kimberlite
-
secure-vault
A secure memory vault that protects sensitive data from memory dumps and swap disk attacks
-
libcrux-psq
Libcrux Pre-Shared post-Quantum key establishement protocol
-
base16ct
Pure Rust implementation of Base16 a.k.a hexadecimal (RFC 4648) which avoids any usages of data-dependent branches/LUTs and thereby provides portable "best effort" constant-time operation…
-
carbon-curve25519-dalek
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
tor-relay-crypto
Cryptography types and helpers for a Tor relay
-
ecdsa_verify
ECDSA signature verification
-
sopass
command line password manager using SOP
-
pwned
Have I Been Pwned checker
-
rust-auth-utils
port of @better-auth/utils
-
c255b3
Schorr signatures based Curve25519 and Blake3
-
x25519-dalek-ng
fork x25519-dalek , update rand_core
-
mls-rs-crypto-rustcrypto
RustCrypto based CryptoProvider for mls-rs
-
vial-core
Crypto primitives for encrypting / decrypting for Vial
-
enigma-protocol
High-level orchestrator that composes the Enigma crates into a production-ready messaging protocol
-
pakery-spake2
SPAKE2 balanced PAKE protocol (RFC 9382)
-
lockboxer
Configurable fork of Lockbox encryption library
-
rust_mobile_secrets_vault
A secure, encrypted secrets vault for mobile-backend or embedded Rust services with versioning and key rotation
-
fash
cross-platform GUI-app for calculating hashes of files and comparing them to supplied hashes
-
tsumiki
Core traits for X.509 certificate parsing and handling
-
uselesskey-core-id
Core identity and derivation primitives for uselesskey
-
cryptographic_primitives
that provides cryptographic primitives
-
cargo-sealed
CLI for storing encrypted environment variables in .env files
-
nonce-extension
Derive-Key-AES and Double-Nonce-Derive-Key-AES nonce extension mechanisms (DNDK-GCM)
-
sqisign-lvl3
SQIsign post-quantum signature scheme - NIST Security Level 3
-
iron_secrets
Secrets management and encryption for Iron Cage
-
stormdl-integrity
BLAKE3 incremental hashing and content verification
-
rust-aes-proofs
Various AES-based Proof-of-Replication and Proof-of-Time implementations and benchmarks
-
dusk-hades
Hades252 permutation algorithm over the Bls12-381 Scalar field
-
kcr_gateway_networking_x_k8s_io
Kubernetes Custom Resource Bindings
-
block-buffer
Buffer types for block processing of data
-
ockam_multiaddr
multiformats.io/multiaddr
-
sgx_ucrypto
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
aead
Traits for Authenticated Encryption with Associated Data (AEAD) algorithms, such as AES-GCM as ChaCha20Poly1305, which provide a high-level API
-
polyval
GHASH-like universal hash over GF(2^128) useful for constructing a Message Authentication Code (MAC)
-
secret_integers
Wrapping around Rust's integers to allow only constant-time operations
-
neuron-crypto-vault
Stub crypto provider for Vault Transit engine
-
paseto-v1
PASETO/PASERK V1 based on RustCrypto
-
kcr_trust_cert_manager_io
Kubernetes Custom Resource Bindings
-
kcr_kafka_services_k8s_aws
Kubernetes Custom Resource Bindings
-
normfs-crypto
Cryptographic primitives for NormFS (AES-256-GCM encryption, Ed25519 signatures)
-
penis
Protocol
-
anubis-core
Common functions used across the anubis crates (hybrid PQC support)
-
cosmian_fpe
Format-preserving encryption
-
test-ed25519-dalek
Fast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust
-
hash-gen
A command-line tool for generating cryptographic hashes (MD5, SHA1, SHA-256, SHA-512)
-
libcrux-curve25519
Formally verified curve25519 ECDH library
-
sop
Rust Interface for the Stateless OpenPGP Interface
-
sigillum-daemon
Sigillum vault daemon with web UI and REST API
-
acme-v2
requesting certificates from an ACME V2 provider
-
auths-id
Multi-device identity and attestation crate for Auths
-
fn-dsa-vrfy
FN-DSA signature scheme
-
sigma-protocols
SIGMA zero-knowledge proof protocols
-
jws
JSON Web Signature for Rust
-
uselesskey-core-jwk-builder
JWKS builder with deterministic, stable key ordering
-
digestify
Verify a file against a provided digest/hash/checksum
-
const-ciphers
Ciphers implemented as constant expressions in Rust for use in payload generation. Not for regular use.
-
digest-hash
Cryptography-grade data structure hashing
-
static-dh-ecdh
Pure Rust implementations of static Diffie-Hellman and elliptic curve Diffie-Hellman key-exchange
-
vk-separate
A CLI tool to remove Committer key from Verification key in Nova protocol
-
tectonic-fn-dsa
FN-DSA signature scheme
-
age-plugin-simplepq
Post-Quantum plugin for age clients based on ML-KEM
-
portal-relay
The relay for Portal, a secure file transfer protocol
-
cloudproof_fpe
Cosmian Cloudproof FPE library
-
uselesskey-ecdsa
ECDSA P-256/P-384 key fixtures (PKCS#8/SPKI, PEM/DER) for tests
-
fermah-config
Fermah configuration profiles utility
-
sumatradigest
A Memory-Safe Hash Digest Tool Written In Rust
-
cosmian_rust_nist_ec_provider
Pure-Rust NIST elliptic-curves provider
-
semaphore-rs-depth-config
Rust support library for Semaphore
-
jwt-next
JSON Web Token library
-
shadow-crypto
Cryptographic primitives for Shadow Network: ChaCha20-Poly1305, X25519, Ed25519, BLAKE3
-
kylix-slh-dsa
SLH-DSA (FIPS 205) implementation for the Kylix post-quantum cryptography library
-
cloakpipe-vector
Vector encryption (ADCPE) for CloakPipe — future scope
-
novault
vaultless password management cli
-
edcert
can be used to sign and verify content based on Ed25519
-
dcap-provider
DCAP quote provider using the Intel Trusted Services API as a backend. This crate compiles into
libdcap_quoteprov.so, which is needed as a backend when usinglibsgx_dcap_ql. To use this library… -
runar-keys
Standards-compliant X.509 certificates and ECDSA P-256 key management for Runar
-
fdh
Full Domain Hash (FDH) for extending the size of a hash digest to an arbitrary length
-
iroh-localops
Iroh specific process management
-
rusterpassword
Master Password algorithm
-
btls-sys
FFI bindings to BoringSSL
-
clevis
A preliminary Rust implementation of the clevis protocol
-
blake3_aead
an experimental authenticated cipher
-
frost-ed25519-blake2b
A Schnorr signature scheme over Ed25519 that supports FROST
-
sequoia-sop
Stateless OpenPGP Interface using Sequoia
-
sshd-openpgp-auth
Command-line tool for creating and managing OpenPGP based trust anchors for SSH host keys
-
dcrypt-common
Common implementations and shared functionality for the dcrypt library
-
arcturus
zero-knowledge proofs for confidential transactions
-
cms
Pure Rust implementation of the Cryptographic Message Syntax (CMS) as described in RFC 5652 and RFC 3274
-
tycho-crypto
Cryptography primitives for Tycho node
-
yafo
file obfuscator
-
deterministic-pgp-keys
Generate PGP keys from a 12 word seed phrase
-
dasher
reducing a whole directory tree to a single hash digest
-
concrete-boolean
Homomorphic Boolean circuit interface for the concrete FHE library
-
cosmian_ffi_utils
Cosmian FFI tools library
-
uselesskey-core-sink
Tempfile-backed artifact sinks used by uselesskey
-
lit-p384
Pure Rust implementation of the NIST P-384 (a.k.a. secp384r1) elliptic curve as defined in SP 800-186 with support for ECDH, ECDSA signing/verification, and general purpose curve arithmetic support.
-
envelopers
A very simple envelope encryption library using aes-gcm
-
etsi014-client
ETSI GS QKD 014 client library
-
tiny-curve
Small-order elliptic curves for testing
-
primeorder
Pure Rust implementation of complete addition formulas for prime order elliptic curves (Renes-Costello-Batina 2015). Generic over field elements and curve equation coefficients
-
valinor-identity
Cryptographic identity and key management for MudWorld platform
-
llm-config-crypto
Cryptography primitives for LLM Config Manager - AES-256-GCM encryption, key derivation, and secure key management
-
mux_circuits
contains the Sunscreen Torus FHE (TFHE) implementation
-
picnic-bindings
Bindings for the Picnic digital signature scheme
-
lit-frost-schnorrkel25519
A Schnorr signature scheme over the prime-order Ristretto group that supports FROST
-
sealed-env
Read and decrypt sealed environment variables
-
sec-store
encrypted storage
-
rand_hash
Cryptographically-secure pseudo-random generator based on cryptographic hash function
-
oberon
multi-factor zero-knowledge capable token without requiring email, SMS, or authenticator apps. The proof of token validity is only 96 bytes while the token itself is only 48 bytes
-
tink-gcpkms
AWS-KMS integration for Rust port of Google's Tink cryptography library
-
groestl-aesni
Hardware-accelerated Groestl hash for x86-64 systems with AES extensions
-
pqcrypto-classicmceliece
Post-Quantum Key-Encapsulation Mechanism classicmceliece
-
hpke-rs-libcrux
Crypto backend for HPKE using formally verified code from libcrux
-
x509-parser
Parser for the X.509 v3 format (RFC 5280 certificates)
-
zkp
A toolkit for auto-generated implementations of Schnorr proofs
-
tfhe-csprng
Cryptographically Secure PRNG used in the TFHE-rs library
-
fluxencrypt-cli
Command line interface for FluxEncrypt encryption SDK
-
fips203-ffi
C shared library exposing FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism
-
pakery-spake2plus
SPAKE2+ augmented PAKE protocol (RFC 9383)
-
idevice-srp
Secure Remote Password (SRP) protocol implementation for the idevice crate
-
ockam_transport_udp
UDP Transport for the Ockam Routing Protocol
-
votate-ed25519-dalek
Fast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust
-
sequoia-keystore-softkeys
A soft key (in-memory key) backend for Sequoia's private key store
-
burrito-secrets
storing secrets in BSON format
-
ec-generic
A generic use elliptic curve library
-
core-identity
Identity management and DID resolution for P47H
-
af-pqc
Production-ready post-quantum cryptographic framework with hybrid Dilithium3 + Ed25519 signatures
-
cosmian_abe_gpsw
ABE GPSW scheme for BLS pairing implemented in rust
-
generic-ec-zkp
ZK-proofs and primitives built on top of
generic-eccrate -
ed25519
Edwards Digital Signature Algorithm (EdDSA) over Curve25519 (as specified in RFC 8032) support library providing signature type definitions and PKCS#8 private key decoding/encoding support
-
networking
secure RSA + AES network implementations in a peer to peer enabled manner
-
c2pa-crypto
Cryptography internals for c2pa-rs crate
-
sn_bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
vaultkey
A secure and customizable password generator library for Rust, designed to create strong, random passwords with various configuration options
-
rustls-pemfile
Basic .pem file parser for keys and certificates
-
ibs
Identity-Based Signature schemes
-
libsignal-protocol-syft
Vendored libsignal protocol crate for syft
-
ockam_identity
Ockam is a library for building devices that communicate securely, privately and trustfully with cloud services and other devices
-
obfustr
compile-time obfuscation of string literals (also byte and C strings)
-
secret_handshake
secret-handshake protocol
-
ocb3
Pure Rust implementation of the Offset Codebook Mode v3 (OCB3) Authenticated Encryption with Associated Data (AEAD) Cipher as described in RFC7253
-
age-plugin-openpgp-card
Age plugin for using ed25519 on OpenPGP Card devices (Yubikeys, Nitrokeys)
-
vios_app
Small JSON vaults: Argon2id + AES-GCM, with optional AAD binding
-
ed448-goldilocks
A pure-Rust implementation of Ed448 and Curve448 and Decaf. This crate also includes signing and verifying of Ed448 signatures
-
salsa20
Pure Rust implementation of the Salsa20 stream cipher
-
sgx_crypto_helper
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
chksum-sha2-512
SHA-2 512 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
uselesskey-pgp
OpenPGP key fixtures (armored and binary) for deterministic and random tests
-
hips
Manage secrets alongside your code
-
aranya-aqc-util
Aranya QUIC Channels
-
cyphergraphy
Implementation-independent abstractions for main cryptographic algorithms (part of cyphernet suite)
-
sentc-crypto-fips-keys
Fips compliant key impl with openssl
-
seedstore-tool
Store a secret (such as a private key) in an encrypted file
-
keynesis
General purpose key management and associated cryptographic protocols
-
talktosc
talk to smartcards for OpenPGP operations
-
vitaminc-kms
AWS KMS implementation for Vitamin C traits
-
rfc6979
Pure Rust implementation of RFC6979: Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA)
-
aes-kw
NIST 800-38F AES Key Wrap (KW) and Key Wrap with Padding (KWP) modes
-
blahaj
Fast, small, and secure Shamir's Secret Sharing
-
cmac
Generic implementation of Cipher-based Message Authentication Code
-
sqisign-lvl5
SQIsign post-quantum signature scheme - NIST Security Level 5
-
chksum-sha2
SHA-2 hash functions with a straightforward interface for computing digests of bytes, files, directories, and more
-
block-padding
Padding and unpadding of messages divided into blocks
-
pq-envelope
Post Quantum Hybrid Encryption for multiple recipients
-
tdln-proof
TDLN — proof bundle (deterministic translation proof + optional DV25 signatures)
-
kcr_kms_services_k8s_aws
Kubernetes Custom Resource Bindings
-
cosmian_rust_curve25519_provider
Pure-Rust Curve25519 provider
-
rcrypto
cryptography library
-
yage
manage encrypted secrets in YAML files with age encryption
-
xoodyak
/ Xoodoo - A versatile cryptographic scheme that can be used for hashing, encryption, MAC computation and authenticated encryption
-
chacha20-poly1305-stream
A pure Rust implementation of the ChaCha20-Poly1305 AEAD from RFC 7539
-
paseto-v3
PASETO/PASERK V3 based on RustCrypto
-
eczkp
Zero Knowledge Proof protocols using elliptic curves
-
sure25
hashing algorithm
-
seekable-stream-cipher
Seekable stream cipher and encryption/decryption
-
cose-rust-plus
COSE Rust implementation
-
capy_kem
ML-KEM with MAL-BIND Security
-
semaphore-rs-ark-zkey
Rust support library for Semaphore
-
layer-crypto
Cryptographic primitives for Telegram MTProto: AES-IGE, RSA, SHA-1/256, auth key derivation
-
primefield
Generic implementation of prime fields built on
crypto-bigint, along with macros for writing field element newtypes including ones with formally verified arithmetic usingfiat-crypto -
nma4
Rust bindings for the libnma library
-
wot-network-rpgpie
Transform OpenPGP certificate sets into a wot-network structure
-
cyfs-sha2
Pure Rust implementation of the SHA-2 hash function family including SHA-224, SHA-256, SHA-384, and SHA-512
-
jh-x86_64
Portable JH with optimizations for x86-64 cpus
-
pakery-cpace
CPace balanced PAKE protocol (draft-irtf-cfrg-cpace)
-
keyden
CLI and library for managing, rotating, and generating secret keys safely
-
jwt-simple-no-nbf-fork
Easy to use, secure, non opinionated JWT (JSON Web Tokens) implementation for Rust
-
libcrux-digest
Digest library
-
lit-frost-ristretto255
A Schnorr signature scheme over the prime-order Ristretto group that supports FROST
-
libjitterentropy-sys
interface to jitterentropy-library (ffi-bindings)
-
monerochan-core-machine
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
lit-sdk
Low level SDK for interfacing with Lit Protocol. Clients should use lit-rust-sdk instead.
-
sunscreen_gpu_runtime
GPU support for Sunscreen's Torus FHE (TFHE) implementation
-
nostr-types
Types for nostr protocol handling
-
pqcrypto-ntru
Post-Quantum Key-Encapsulation Mechanism ntru
-
uselesskey-core-jwk-shape
Core JWK shape types used by JWK/JWKS fixtures
-
ml-kem
Pure Rust implementation of the Module-Lattice-Based Key-Encapsulation Mechanism Standard (formerly known as Kyber) as described in FIPS 203
-
ssh-cipher
Pure Rust implementation of SSH symmetric encryption including support for the modern aes128-gcm@openssh.com/aes256-gcm@openssh.com and chacha20-poly1305@openssh.com algorithms as well as legacy support for older…
-
psa-crypto-sys
Wrapper around the PSA Cryptography API
-
zks_types
Core types and data structures for ZKS Protocol
-
fcp_cryptoauth
Futuristic Connectivity Protocol's CryptoAuth layer (cryptographic authentication and encryption over unreliable channels)
-
ssh-to-age
Convert OpenSSH Ed25519 keys to age encryption keys
-
tsumiki-der
DER (Distinguished Encoding Rules) parser for ASN.1 structures
-
spake2
password-authenticated key-exchange algorithm
-
uselesskey-core-x509-spec
X.509 fixture spec models and stable encoders for uselesskey
-
ark-ed-on-bn254-zypher
A Twisted Edwards curve defined over the scalar field of the BN254 curve
-
ecies-ed25519
ECIES on Twisted Edwards Curve25519 using AES-GCM and HKDF-SHA256
-
p384
Pure Rust implementation of the NIST P-384 (a.k.a. secp384r1) elliptic curve as defined in SP 800-186 with support for ECDH, ECDSA signing/verification, and general purpose curve arithmetic support.
-
bulletproof-kzen
Bulletproofs and Bulletproofs+ aggregated range proofs with multi-exponent verification
-
sequoia-net
Network services for OpenPGP
-
pake-cpace
CPace, a balanced PAKE
-
best-encrypt
A top-level secrets orchestrator. Not just another .env tool — this one encrypts, locks, and sets you up for secure local and team dev.
-
sunscreen_fhe_program
data format for Sunscreen FHE programs
-
yubikey
Pure Rust cross-platform host-side driver for YubiKey devices from Yubico with support for hardware-backed public-key decryption and digital signatures using the Personal Identity Verification (PIV)…
-
chksum-sha2-256
SHA-2 256 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
uselesskey-core-negative
Compatibility facade for negative fixture builders used by uselesskey
-
crev-ed25519-dalek
Fork of ed25519-dalek for
crev(until mainline is usable for us again) -
ockam_abac
Attribute based authorization control
-
fluxencrypt-async
Async/await support for FluxEncrypt encryption SDK
-
miracl_amcl
The Apache Milagro Cryptographic Library (version 3.2)
-
dlog-sigma-primitives
Collection of cryptographic primitives built on top of Elliptic Curve groups, with a focus on Zero-Knowledge Proofs
-
cryptojs_rust
CryptoJS encryption/decryption functionality
-
sqisign-lvl1
SQIsign post-quantum signature scheme - NIST Security Level 1
-
vitaminc-traits
Vitamin C traits
-
cryptohelpers
Collection of helpers and simplifying functions for cryptography things
-
p384_rs
NIST P-384 (secp384r1), with correct arithmetic
-
mls-rs-core
Core components and traits for mls-rs
-
krb5-sys
Bindings to the krb5 library, incomplete state
-
frodo-kem-rs
A pure rust implementation of FrodoKEM and eFrodoKEM
-
sequoia-gpg-agent
interacting with GnuPG's gpg-agent
-
aes-siv
Pure Rust implementation of the AES-SIV Misuse-Resistant Authenticated Encryption Cipher (RFC 5297) with optional architecture-specific hardware acceleration
-
plonkup
A pure-Rust implementation of the PLONK ZK-Proof algorithm
-
softaes
Fast software implementation of the AES round function in pure Rust
-
ark-ed-on-bls12-381-zypher
A Twisted Edwards curve defined over the scalar field of the BLS12-381 curve
-
bcrypt-pbkdf
password-based key derivation function
-
paseto-v2
PASETO/PASERK V2 based on RustCrypto
-
uselesskey-hmac
HMAC HS256/HS384/HS512 secret fixtures for deterministic and random tests
-
pkcs1
Pure Rust implementation of Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.2 (RFC 8017)
-
pvss
Publicly verifiable secret sharing implementations
-
bulletproofs-bls
A pure-Rust implementation of Bulletproofs
-
monerochan-verifier
Verifier for MONEROCHAN Groth16 and Plonk proofs
-
openssl-errors
Custom error library support for the openssl crate
-
sigillum-server
Sigillum vault server library for custom deployments
-
md-5
MD5 hash function
-
askrypt
Password manager without master password
-
uselesskey-core-token-shape
Token shape generation primitives shared across uselesskey token crates
-
concrete-commons
Common tools for the concrete FHE library
-
ockam_vault
A software-only Ockam Vault implementation
-
dsa
Pure Rust implementation of the Digital Signature Algorithm (DSA) as specified in FIPS 186-4 (Digital Signature Standard), providing RFC6979 deterministic signatures as well as support for added entropy
-
uselesskey-ed25519
Ed25519 key fixtures (PKCS#8/SPKI, PEM/DER) with deterministic generation
-
vitaminc-async-traits
Vitamin C async traits
-
lit-frost-ed25519
A Schnorr signature scheme over Ed25519 that supports FROST
-
gcrypt
Libgcrypt bindings for Rust
-
chksum-reader
A convenient interface for calculating hash digests on the fly while reading data from a reader
-
ssh-encoding
Pure Rust implementation of SSH data type decoders/encoders as described in RFC4251
-
rudric
CLI tool for managing secrets in a secure way
-
lit-frost-decaf377
A Schnorr signature scheme over the Decaf377 curve that supports FROST
-
pasta-tokens
Platform Agnostic SEcurity TOkens (PASETO) is a secure alternative to JOSE/JWT
-
libcrux
The Formally Verified Cryptography Library
-
nostr_rust
Nostr protocol
-
chksum-sha1
SHA-1 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
sigillum-sdk
Embeddable SDK for Sigillum vault integration
-
libcrux-rsa
Formally verified RSA signature library
-
sha1-checked
SHA-1 hash function with collision detection
-
nettle
Rust bindings for the Nettle cryptographic library
-
ctutils
Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports
const fnwhere appropriate. Built on thecmovcrate which provides… -
blowfish
block cipher
-
sigillum-cli
Command-line interface for Sigillum vault management
-
seal_fhe
contains Rust bindings for Microsoft's SEAL Fully Homomorphic Encryption (FHE) library
-
sequoia-keystore-backend
Traits for private key store backends
-
ubl-crypto
UBL crypto helpers: SK wrapper, KID, HMAC, did:key, batch verify for Universal Business Ledger
-
tsumiki-asn1
ASN.1 object representation and parser for X.509 certificates
-
chksum-writer
A convenient interface for calculating hash digests on the fly while writing data to a writer
-
pep_engine_sequoia_backend
p≡p Engine's cryptotech interface using Sequoia
-
ockam_transport_tcp
TCP Transport for the Ockam Routing Protocol
-
pqcrypto-frodo
Post-Quantum Key-Encapsulation Mechanism frodo
-
libpass
interacting with pass managed data
-
tectonic-oqs-sys
Bindings to liboqs
-
tsumiki-pem
PEM format parser and encoder for X.509 certificates
-
uselesskey-jwk
Compatibility facade re-exporting typed JWK/JWKS models and builders
-
libcrux-blake2
Formally verified blake2 hash library
-
ockam_entity
Ockam is a library for building devices that communicate securely, privately and trustfully with cloud services and other devices
-
monerochan-cuda
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
keylock
A CLI application starter template
-
pqcrypto-rainbow
Post-Quantum Signature Scheme rainbow
-
ockam_vault_test_suite
Ockam Vault test suite
-
redoubt-vault
Encrypted vault with field-level access and automatic zeroization
-
uselesskey-core-kid
Deterministic key-id helpers for uselesskey fixture crates
-
yubihsm
Pure Rust client for YubiHSM2 devices with support for HTTP and USB-based access to the device. Supports most HSM functionality including ECDSA, Ed25519, HMAC, and RSA.
-
serdect
Constant-time serde serializer/deserializer helpers for data that potentially contains secrets (e.g. cryptographic keys)
-
jwt-compact-preview
Minimalistic JWT implementation with focus on type safety and secure cryptographic primitives
-
rustcrypto-group
Elliptic curve group traits and utilities
-
ascon-aead
authenticated encryption schemes Ascon-AEAD128
-
evercrypt
Crypto library using formally verified code from HACL/Evercrypt
-
secretik
Opinionated cli tool for encrypting secrets
-
universal-hash
Traits which describe the functionality of universal hash functions (UHFs)
-
lit-frost-taproot
A Schnorr signature scheme over the secp256k1 curve that supports FROST
-
finneo_crypto
Cross-platform AES-256-GCM encryption with Argon2id key derivation used in Finneo
-
crypto_secretbox
Pure Rust implementation of the XSalsa20Poly1305 (a.k.a. NaCl crypto_secretbox) authenticated encryption cipher as well as the libsodium variant of XChaCha20Poly1305
-
concrete-npe
Noise parameter estimator for the concrete FHE library
-
sealed_box
Libsodium sealed_box construction for Rust/WebAssembly
-
uselesskey-core-x509-derive
Deterministic X.509 derivation helpers for uselesskey fixture crates
-
rocca
ROCCA-S authenticated cipher
-
monerochan-build
Build an MONEROCHAN program
-
concrete_lib
Concrete is a fully homomorphic encryption (FHE) library that implements Zama's variant of TFHE
-
md4
MD4 hash function
-
ockam_executor
Ockam async executor crate
-
kcr_appprotect_f5_com
Kubernetes Custom Resource Bindings
-
lit-frost-secp256k1
A Schnorr signature scheme over the secp256k1 curve that supports FROST
-
sequoia-keystore-openpgp-card
An OpenPGP card backend for Sequoia's private key store
-
signatory
Multi-provider elliptic curve digital signature library with ECDSA and Ed25519 support
-
ccm
Generic implementation of the Counter with CBC-MAC (CCM) mode
-
sequoia-keystore-server
Sequoia keystore daemon
-
lit-frost-redjubjub
A Schnorr signature scheme over the NIST P-256 curve that supports FROST
-
sm3
SM3 (OSCCA GM/T 0004-2012) hash function
-
uselesskey-core-keypair-material
PKCS#8/SPKI key-material helpers shared by key fixture crates
-
ockam_vault_aws
An AWS KMS Ockam Vault implementation
-
vsss-rs-std
Verifiable Secret Sharing Schemes for splitting, combining and verifying secret shares
-
cfb-mode
Cipher Feedback (CFB) block cipher mode of operation
-
password-auth
Password authentication library with a focus on simplicity and ease-of-use, including support for Argon2, PBKDF2, and scrypt password hashing algorithms
-
sequoia-keystore-gpg-agent
A gpg-agent backend for Sequoia's private key store
-
xaes-256-gcm
Pure Rust implementation of the XAES-256-GCM extended-nonce Authenticated Encryption with Associated Data (AEAD)
-
hash2curve
algorithm implementation
-
ghash
Universal hash over GF(2^128) useful for constructing a Message Authentication Code (MAC), as in the AES-GCM authenticated encryption cipher
-
pqcrypto-saber
Post-Quantum Key-Encapsulation Mechanism saber
-
uselesskey-core-jwks-order
Stable kid-based ordering helper for JWKS-like collections
-
sequoia-keyring-linter
A linter for keyrings
-
sparx
block ciphers implementations
-
ockam_node_no_std
Ockam library types that do not need
std -
monerochan-recursion-core
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
keccak
Pure Rust implementation of the Keccak sponge function including the keccak-f and keccak-p variants
-
xaes-gcm
The simplest and safest way to encrypt data using AES-GCM in Rust (AES256-DNDK-GCM)
-
signature_core
Signature core types of the Ockam library
-
idea
IDEA block cipher
-
uselesskey-aws-lc-rs
aws-lc-rs adapter traits for uselesskey RSA/ECDSA/Ed25519 fixtures
-
p224
Pure Rust implementation of the NIST P-224 (a.k.a. secp224r1) elliptic curve as defined in SP 800-186
-
pkcs5
Pure Rust implementation of Public-Key Cryptography Standards (PKCS) #5: Password-Based Cryptography Specification Version 2.1 (RFC 8018)
-
lit-frost-rerandomized
Types and traits to support implementing a re-randomized variant of Flexible Round-Optimized Schnorr Threshold signature schemes (FROST)
-
base32ct
Pure Rust implementation of Base32 (RFC 4648) which avoids any usages of data-dependent branches/LUTs and thereby provides portable "best effort" constant-time operation and embedded-friendly no_std support
-
uselesskey-rustcrypto
RustCrypto adapter traits for uselesskey RSA/ECDSA/Ed25519/HMAC fixtures
-
camellia
block cipher
-
libcrux-ecdsa
Formally verified ECDSA signature library
-
ockam_vault_sync_core
Syncronous wrapper that allows to have multiple Vault instances, that talk to the same Vault implementation without need for synchronization primitives
-
pqcrypto-ntruprime
Post-Quantum Key-Encapsulation Mechanism ntruprime
-
ockam_key_exchange_core
The Ockam Key Exchange trait
-
monerochan-prover
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
lit-frost-p384
A Schnorr signature scheme over the NIST P-256 curve that supports FROST
-
twofish
block cipher
-
whirlpool
hash function
-
sigillum-client
Client SDK for connecting to a Sigillum vault daemon
-
hacl-star
HACL*, a formally verified cryptographic library for Rust (binding to hacl-c)
-
nettle-sys
Low-level Rust bindings for the Nettle cryptographic library
-
uselesskey-core-jwk
Compatibility façade for typed JWK/JWKS models used by uselesskey fixture crates
-
phc
Pure Rust implementation of the Password Hashing Competition (PHC) string format which is used for storing password hashes
-
sequoia-tpm
Machinery for working with TPM from Sequoia