-
curve25519-dalek
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
rustls
modern TLS library written in Rust
-
blake3
hash function
-
sha2
Pure Rust implementation of the SHA-2 hash function family including SHA-224, SHA-256, SHA-384, and SHA-512
-
rsa
Pure Rust RSA implementation
-
webpki-roots
Mozilla's CA root certificates for use with webpki
-
openssl
bindings
-
rcgen
Rust X.509 certificate generator
-
pem
Parse and encode PEM-encoded data
-
bcrypt
Easily hash and verify passwords using bcrypt
-
security-framework
Security.framework bindings for macOS and iOS
-
secrecy
Wrapper types and traits for secret management which help ensure they aren't accidentally copied, logged, or otherwise exposed (as much as possible), and also ensure secrets are securely wiped from memory when dropped
-
sequoia-openpgp
OpenPGP data types and associated machinery
-
snow
A pure-rust implementation of the Noise Protocol Framework
-
aes
Pure Rust implementation of the Advanced Encryption Standard (a.k.a. Rijndael)
-
constant_time_eq
Compares two equal-sized byte strings in constant time
-
subtle
Pure-Rust traits and utilities for constant-time cryptographic implementations
-
der
Pure Rust embedded-friendly implementation of the Distinguished Encoding Rules (DER) for Abstract Syntax Notation One (ASN.1) as described in ITU X.690 with full support for heapless
no_std/no_alloctargets -
coset
Set of types for supporting COSE
-
base64ct
Pure Rust implementation of Base64 (RFC 4648) which avoids any usages of data-dependent branches/LUTs and thereby provides portable "best effort" constant-time operation and embedded-friendly no_std support
-
aws-lc-rs
cryptographic library using AWS-LC for its cryptographic operations. This library strives to be API-compatible with the popular Rust library named ring.
-
hmac-sha256
A small, self-contained SHA256, HMAC-SHA256, and HKDF-SHA256 implementation
-
group
Elliptic curve group traits and utilities
-
vsss-rs
Verifiable Secret Sharing Schemes for splitting, combining and verifying secret shares
-
blst
Bindings for blst BLS12-381 library
-
ct-codecs
Constant-time hex and base64 codecs from libsodium reimplemented in Rust
-
aws-sigv4
SigV4 signer for HTTP requests and Event Stream messages
-
cryptoki
Rust-native wrapper around the PKCS #11 API
-
fiat-crypto
generated Rust
-
tiny-keccak
Keccak derived functions
-
schannel
bindings for rust, allowing SSL/TLS (e.g. https) without openssl
-
pgp
OpenPGP implementation in Rust
-
asn1
ASN.1 (DER) parser and writer for Rust
-
tfhe
TFHE-rs is a fully homomorphic encryption (FHE) library that implements Zama's variant of TFHE
-
boring
BoringSSL bindings
-
crypto-primes
Random prime number generation and primality checking library
-
pairing
Pairing-friendly elliptic curve library
-
matrix-sdk-crypto
Matrix encryption library
-
libcrux-ml-kem
Libcrux ML-KEM & Kyber implementations
-
sha256
crypto digest
-
light-poseidon
Poseidon hash implementation in Rust
-
secret-vault
secure vault to store securely application secrets in memory from Google/AWS/K8S and environment variables
-
ring
An experiment
-
gridiron
Rust finite field library with fixed size multi-word values
-
tss-esapi
Rust-native wrapper around TSS 2.0 Enhanced System API
-
rustls-platform-verifier
supports verifying TLS certificates in rustls with the operating system verifier
-
pasetors
PASETO: Platform-Agnostic Security Tokens (in Rust)
-
x509-certificate
X.509 certificate parser and utility functionality
-
authenticator
interacting with CTAP1/2 security keys for Web Authentication. Used by Firefox.
-
ed25519-dalek
Fast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust
-
age
[BETA] A simple, secure, and modern encryption library
-
ed25519-compact
A small, self-contained, wasm-friendly Ed25519 implementation
-
cryptoxide
pure implementation of various common modern cryptographic algorithms, WASM compatible
-
hmac-sha512
A small, self-contained SHA512, HMAC-SHA512, HKDF-SHA512, SHA384, HMAC-SHA384, and HKDF-SHA384 implementation
-
recrypt
A pure-Rust implementation of Transform Encryption, a Proxy Re-encryption scheme
-
bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
w3f-bls
Aggregate BLS-like signatures
-
opaque-ke
OPAQUE password-authenticated key exchange protocol
-
mls-rs
Messaging Layer Security (RFC 9420)
-
openmls
Messaging Layer Security (MLS) protocol, as defined in RFC 9420
-
picky-asn1-x509
ASN1 types defined by X.509 related RFCs
-
snmp2
SNMP v1/v2/v3 sync/async client library with traps and MIB support
-
cosmian_crypto_core
Cosmian base cryptographic library
-
curve25519-dalek-ml
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
azure_security_keyvault_keys
Rust wrappers around Microsoft Azure REST APIs - Azure Key Vault Keys
-
p12-keystore
Convenient API to work with PKCS#12 files
-
hpke
hybrid encryption standard (RFC 9180) in pure Rust
-
kbs2
A secret manager backed by age
-
ppv-lite86
Cross-platform cryptography-oriented low-level SIMD library
-
hashguard
Command-Line tool for ensuring the integrity of files using hash sums
-
dbus-secret-service
interface with Secret Service API over DBUS
-
rusty_paseto
A type-driven, ergonomic alternative to JWT for secure stateless PASETO tokens
-
cryptographic-message-syntax
A pure Rust implementation of Crypographic Message Syntax (RFC 5652)
-
self_encryption
Self encrypting files (convergent encryption plus obfuscation)
-
sha1_smol
Minimal dependency-free implementation of SHA1 for Rust
-
openssl-sys
FFI bindings to OpenSSL
-
libpep
polymorphic encryption and pseudonymization
-
sshkeys
parsing OpenSSH certificates and public keys
-
digest
Traits for cryptographic hash functions and message authentication codes
-
sequoia-chameleon-gnupg
Sequoia's reimplementation of the GnuPG interface
-
rabbitmq_http_client
RabbitMQ HTTP API client
-
sigstore
An experimental crate to interact with sigstore
-
fips204
FIPS 204: Module-Lattice-Based Digital Signature
-
tor-keymgr
Key management for the Arti Tor implementation
-
rustls-pki-types
Shared types for the rustls PKI ecosystem
-
zkryptium
Rust crypto library for zero-knowledge proofs
-
cosmian_cover_crypt
Key Policy attribute encryption based on subset cover
-
vnc-rs
An async implementation of VNC client side protocol
-
c2pa
Rust SDK for C2PA (Coalition for Content Provenance and Authenticity) implementors
-
djpass
A command-line tool to generate and verify passwords used in Django project
-
yara-x
A pure Rust implementation of YARA
-
gst-plugin-sodium
GStreamer plugin for libsodium-based file encryption and decryption
-
crystals-dilithium
Pure Rust implementation of CRYSTALS-Dilithium and ML-DSA (FIPS 204) digital signatures
-
mbedtls
Idiomatic Rust wrapper for MbedTLS, allowing you to use MbedTLS with only safe code while being able to use such great Rust features like error handling and closures. Building on MbedTLS's focus on embedded use…
-
nkeys
NATS nkeys library
-
hakanai
CLI client for Hakanai, a secure secret sharing service
-
orion
Usable, easy and safe pure-Rust crypto
-
openssl-probe
helping to find system-wide trust anchor (“root”) certificate locations based on paths typically used by
openssl -
g2p
create types that implement fast finite field arithmetic
-
vrf
Fast and extensible Verifiable Random Function (VRF) library; currently supporting secp256k1, secp256r1 and sect163k1 curves
-
apr
Rust bindings for Apache Portable Runtime
-
noise-protocol
Noise Protocol Framework implementation
-
mla
Multi Layer Archive - A pure rust encrypted and compressed archive file format
-
akd
auditable key directory
-
napa
secure command line password manager
-
tokio-openssl
SSL streams for Tokio backed by OpenSSL
-
qrc-opensource-rs
The free opensource version of the Quantum Secure Cryptographic library in Rust (QRC)
-
sframe
pure rust implementation of SFrame (RFC 9605)
-
zipsign-api
Sign and verify
.zipand.tar.gzfiles with an ed25519 signing key -
dusk-poseidon
Poseidon hash algorithm over the Bls12-381 Scalar field
-
russh-keys
Deal with SSH keys: load them, decrypt them, call an SSH agent
-
delsum
Reverse Engineer's Toolbox for Checksums
-
fips203
FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism
-
keccak-asm
wrappers for SHA-3 algorithms written in assembly
-
lrwn
encoding / decoding LoRaWAN frames
-
keccak-hash
keccak-hashis a set of utility functions to facilitate working with Keccak hashes (256/512 bits long) -
aws-lc-fips-sys
AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. This is the FIPS validated version of AWS-LC.
-
dryoc
Don't Roll Your Own Crypto: pure-Rust, hard to misuse cryptography library
-
classic-mceliece-rust
Pure rust implementation of the PQC scheme Classic McEliece
-
oo7-daemon
Server side implementation of the freedesktop Secret Service
-
p2panda-core
Extensible data-types for secure, distributed and efficient exchange of data
-
frost-core
Types and traits to support implementing Flexible Round-Optimized Schnorr Threshold signature schemes (FROST)
-
wdcrypt
CLI to encrypt the current working directory with Fernet encryption
-
mwa_giant_squid
MWA ASVO command line client
-
gf256
containing Galois-field types and utilities
-
s2n-tls
A C99 implementation of the TLS/SSL protocols
-
gpg-tui
Manage your GnuPG keys with ease!
-
sigstore-verification
Sigstore, Cosign, and SLSA attestation verification library
-
ap-relay
activitypub relay
-
blind-rsa-signatures
RSA blind signatures in pure Rust
-
sirr
CLI client for Sirr — push, get, and manage ephemeral secrets
-
rbw
Unofficial Bitwarden CLI
-
pqcrypto-traits
Shared traits for post-quantum cryptographic primitives
-
x25519-dalek
X25519 elliptic curve Diffie-Hellman key exchange in pure-Rust, using curve25519-dalek
-
halo2curves
Elliptic curve implementations and wrappers for halo2 library
-
rsop
SOP CLI tool based on rPGP and rpgpie
-
opa-wasm
OPA policies compiled to WASM
-
paper-age
Easy and secure paper backups of secrets
-
pdfk
Modern PDF password CLI
-
ecb
Electronic Codebook (ECB) block cipher mode of operation
-
blsful
BLS signature implementation according to the IETF spec on the BLS12-381 curve
-
kanidm_lib_crypto
Kanidm cryptographic functionality
-
tdigests
An efficient Rust implementation of the t-digest algorithm
-
crypt_guard
CryptGuard is a post-quantum cryptography library with support for Kyber, Falcon, Dilithium in combination with AES and XChaCha20
-
shadowsocks-crypto
Shadowsocks Crypto
-
jaz
Find secrets hidden in commits
-
quichash
High-performance cryptographic hash utility with SIMD optimization
-
saorsa-pqc
Post-Quantum Cryptography library for Saorsa Labs projects
-
dimpl
DTLS 1.2/1.3 implementation (Sans‑IO, Sync)
-
safecloset
Secret Keeper
-
boring2
BoringSSL bindings
-
envbroker
Secure your
.envfile from coding agent doing stupid execution -
rufendec
lightweight CLI tool for AES-256 encryption and decryption, preserving file names and directory structure. With support for ECB/GCM modes, it simplifies securing and restoring files with ease, all powered by Rust.
-
underskrift
PDF digital signing library — PAdES B-B through B-LTA, PKCS#7, visible/invisible signatures, LTV, and verification
-
rattler_digest
used by rattler crates to compute different hashes from different sources
-
shad3
App for hashing entries in blocklists
-
openssl-src
Source of OpenSSL and logic to build it
-
sigstore-verify
Sigstore signature verification
-
internal-russh-forked-ssh-key
Pure Rust implementation of SSH key file format decoders/encoders as described in RFC4251/RFC4253 and OpenSSH key formats, as well as "sshsig" signatures and certificates (including…
-
product-os-security
Product OS : Security provides a suite of helper tools to easily perform cryptographic operations including generating hashes, encrypting and decrypting content
-
ieee80211
A parser for IEEE 802.11 frames
-
rust_keylock_shell
Shell access to the rust-keylock. rust-keylock is a password manager with goals to be Secure, Simple to use, Portable and Extensible.
-
apple-cryptokit-rs
wrapper around Apple's native CryptoKit framework for App Store compliant cryptography
-
aws-db-esdk
implementing client side encryption with DynamoDB
-
x509-verify
Pure Rust library that verifies X.509 signatures based on the algorithm identifiers
-
signify-rs
OpenBSD-compatible file signing & verification tool
-
crtshmon
Monitor crt.sh for new certificates
-
ssh-agent-client-rs
Pure rust implementation of the ssh-agent protocol. It can be used to write clients that interact with the ssh agent.
-
p12
pure rust pkcs12 tool
-
rsacracker
Powerful RSA cracker for CTFs. Supports RSA, X509, OPENSSH, PKCS#12, PKCS#7, and CSR in PEM and DER formats.
-
nam-blstrs
High performance implementation of BLS12 381
-
aws-nitro-enclaves-cose
aims to provide a safe Rust implementation of COSE, with COSE Sign1 currently implemented
-
kms-aead
KMS/AEAD envelope encryption for GCP/AWS KMS and Ring AEAD encryption
-
tor-cert
Non-standard certificate formats used by Tor
-
openssh-keys
read and write OpenSSH public keys
-
ece
Encrypted Content-Encoding for HTTP Rust implementation
-
openpgp-card-tools
inspecting, configuring and using OpenPGP cards
-
encrypt_config
manage, persist and encrypt your configurations
-
threema-gateway
A client library for the Threema Gateway
-
generic-ec
General elliptic curve cryptography
-
b3sum
a command line implementation of the BLAKE3 hash function
-
fluxencrypt
A high-performance, secure encryption SDK for Rust applications
-
rustls-webpki
Web PKI X.509 Certificate Verification
-
arq-restore
A program to restore backups created with Arq 6 and 7
-
dnssec-prover
allows for the creation and validation of transferrable proofs of entries in the DNS
-
inspect-cert-chain
OpenSSL-like text output for debugging certificate chains
-
prople-did-core
A set of core libraries to manage the DID data and objects based on Prople system requirements
-
vodozemac
Olm and Megolm
-
libcrux-hmac
Libcrux HMAC implementation
-
matrix-sdk-store-encryption
Helpers for encrypted storage keys for the Matrix SDK
-
clawdentity-cli
Clawdentity Rust CLI for identity onboarding, provider setup, and connector operations
-
jaws
JSON Algorithms and Web Signing
-
circom-witness-rs
Fast witness generator for Circom circuits
-
bergshamra-c14n
XML Canonicalization (C14N) for Bergshamra XML Security library
-
ensync
A flexible ENcrypted file SYNChroniser suitable for uses where the central location is not fully trusted
-
giant-spellbook
cryptographic multi-tool with file analysis, encoding, bitflipping, splitting, hashing, encryption, signing, and more
-
prolock
securely storing secrets like passwords and plain text snippets in a password-protected file
-
oqs
interface to Open-Quantum-Safe's liboqs
-
nest-data-source-api
NEST Data Source API Service
-
minisign-verify
A small, zero-dependencies crate to verify Minisign signatures
-
aegis_vm
Advanced Rust code virtualization and obfuscation framework
-
hekate-math
A high-performance, constant-time implementation of binary tower fields (F(2^k)) optimized for GKR-based provers, Virgo, and Binius protocols
-
keygen-rs
Unofficial Rust SDK for integrating with the keygen.sh licensing service
-
nethsm-sdk-rs
Rust SDK to communicate with Nitrokey NetHSM
-
strobe-rs
Strobe protocol framework in pure Rust
-
red_asn1
A little library to encode/decode ASN1 DER
-
multihash-codetable
Default multihash code-table with cryptographically secure hash implementations
-
udigest
Unambiguously digest structured data
-
gloves
seamless secret manager and handoff
-
enc_file
Password-based file encryption tool with a versioned header, AEAD, Argon2id KDF, and streaming mode. Library + CLI + GUI.
-
paq
Hash file or directory recursively
-
nuts-container
A secure storage library
-
aws-esdk
implementing client side encryption
-
secrets
Protected-access memory for cryptographic secrets
-
zff
interact with zff, a file format for forensic images
-
hyper-openssl
Hyper TLS support via OpenSSL
-
picky
Portable X.509, PKI, JOSE and HTTP signature implementation
-
hanko
Keeps your Git allowed signers file up to date with signing keys configured on software development platforms like GitHub and GitLab
-
hunt-scan
MCP agent scanning and vulnerability detection for clawdstrike hunt
-
mls-spec
repository of MLS / RFC9420-related data structures
-
cuaimacrypt
symmetric hybrid cipher engine — block cipher and stream cipher combined
-
nethsm-cli
A CLI for the Nitrokey NetHSM
-
wycheproof
test vectors
-
l-s
Summary any file‘s meta
-
secure-gate
Zero-cost secure wrappers for secrets — heap for dynamic, stack for fixed
-
pq-key-encoder
Post-quantum key encoding (DER, PEM, JWK) for ML-KEM, ML-DSA, SLH-DSA
-
rust-argon2
Argon2 password hashing function
-
shiguredo_srt
SRT (Secure Reliable Transport) library
-
moq-token
Media over QUIC - Token Generation and Validation
-
biscuit-cli
a CLI to manipulate biscuit tokens
-
verifysign
cargo used to verify digital code signature on files
-
cross-krb5
Safe cross platform Kerberos v5 interface
-
toolkit-zero
A feature-selective Rust utility crate — a modular collection of opt-in utilities spanning encryption, HTTP networking, geolocation, and build-time fingerprinting. Enable only the features your project requires.
-
qp-rusty-crystals-dilithium
Pure Quantus RUST implementation of CRYSTALS-Dilithium digital signature scheme
-
ort-openrouter-cli
Open Router CLI
-
dumpy
A web frontend to Suricata full packet capture
-
rescue_poseidon
Sponge construction based Algebraic Hash Functions
-
odoh-rs
Oblivious DNS over HTTPS (ODoH) protocol version 1
-
kcr_kyverno_io
Kubernetes Custom Resource Bindings
-
jubjub-plus
Jubjub elliptic curve group
-
playfair_cipher
Playfair, Two square and Four square cipher
-
jwt-hack
Hack the JWT (JSON Web Token) - A tool for JWT security testing and token manipulation
-
jacs-binding-core
Shared core logic for JACS language bindings (Python, Node.js, etc.)
-
b4ae
B4AE (Beyond For All Encryption) - Quantum-resistant secure communication protocol
-
glass_pumpkin
A cryptographically secure prime number generator based on rust's own num-bigint and num-integer
-
sketches
Probabilistic data structures for scalable approximate analytics
-
libcrux-ml-dsa
Libcrux ML-DSA implementation
-
sha1
SHA-1 hash function
-
turboshake
A family of extendable output functions (XOFs) based on 12-rounds Keccak[1600] permuation
-
murk-cli
Encrypted secrets manager for developers — one file, age encryption, git-friendly
-
mpvss-rs
Publicly Verifiable Secret Sharing Library
-
product-os-random
Product OS : Random provides a suite of random generator tools for different contexts. This includes random text, number and key generators including cryptographically secure random generation.
-
cryptostream
Transparent encryption and decryption for Read and Write streams
-
pgen
Passphrase Generator
-
midnight-curves
BLS12 381 and Jubjub curves
-
fernet
in Rust
-
ubiq-rust
SDK for the Ubiq Security platform
-
gxt-cli
Minimal, encrypted, signed and copy-pasteable tokens for manual data exchange between games
-
tap-agent
Transaction Authorization Protocol (TAP)
-
webpki
Web PKI X.509 Certificate Verification
-
sha3sum
compute and check SHA3 message digest
-
pkix
TLS Certificate encoding and decoding helpers
-
lakers
EDHOC (RFC 9528)
-
jubjub-schnorr
A pure-Rust implementation of Schnorr signatures with a PLONK circuit module additionally
-
sd-jwt-payload
Selective Disclosure JWTs (SD-JWT)
-
fatoora-core
Rust Fatoora/ZATCA SDK with C ABI and multi-language bindings
-
edgee-server
The full-stack edge platform for your edge oriented applications (server part)
-
az-cvm-vtpm
Package with shared code for Azure Confidential VMs
-
libp2p-noise
Cryptographic handshake protocol using the noise framework
-
sequoia-wot
OpenPGP's web of trust
-
tangy
Tang server implementation
-
cognitum-gate-tilezero
Native arbiter for TileZero in the Anytime-Valid Coherence Gate
-
jwk-simple
JWK/JWKS for Rust and WASM (RFC 7517, 7518, 7638, 8037, 9864) with jwt-simple integration
-
cose-rust
COSE Rust implementation
-
c5store
A comprehensive Rust library for unified configuration and secret management, supporting various sources, typed access, and local encryption
-
keyquorum
Shamir secret sharing daemon for distributed key quorum
-
aef
An encrypted file archiver
-
confidential-ml-transport
Attestation-bound encrypted tensor transport for confidential ML inference
-
instant-acme
Async pure-Rust ACME client
-
minio-rsc
minio, api is compliant with the Amazon S3 protocol
-
rgp
Enabling E2EE for a range of applications
-
happy-cracking
A fast, comprehensive CTF toolkit for cryptographic encoding/decoding, classic ciphers, hash operations, and analysis tools
-
dnsimple
API client for Rust
-
oboron
Encryption and encoding library for developer ergonomics: prefix entropy, compact outputs, high performance
-
yimi-rutool
A comprehensive Rust utility library inspired by Hutool
-
winter-rand-utils
Random value generation utilities for Winterfell crates
-
ristretto_classfile
reading, writing and verifying Java classfiles
-
rustgenhash
generate hashes from the command line
-
kanidm-hsm-crypto
easily interacting with a HSM or TPM
-
dco3_crypto
Symmetric and asymmetric encryption for DRACOON in Rust
-
magic-crypt
MagicCrypt is a Java/PHP/NodeJS/Rust library to encrypt/decrypt strings, files, or data, using Data Encryption Standard(DES) or Advanced Encryption Standard(AES) algorithms. It supports CBC block cipher mode…
-
elf2tab
Compiles from ELF to TAB (a Tock Application Bundle using the Tock Binary Format)
-
curve25519-dalek-ng
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
crabapple
iOS backup decryption and encryption
-
minisign
sign files and verify signatures
-
flexible-transcript
transcript trait definition, along with viable options
-
embedded-tls
TLS 1.3 client with no_std support and no allocator
-
dcap-qvl-webpki
Fork of rustls-webpki to support single cert CRL check
-
tfhe-zk-pok
zero-knowledge proofs of encryption for TFHE
-
clatter
no_std compatible implementation of Noise protocol framework with Post-Quantum extensions
-
tbz-cli
TBZ command-line tool: pack, unpack, verify, inspect
-
deterministic-hash
Create deterministic hashes regardless of architecture
-
web-bot-auth
Web Bot Authentication using HTTP Message Signatures
-
ascon-core
Pure Rust implementation of the Ascon permutation
-
rshc
compile shell script(or expect script) to Rust code and binary
-
siguldry-pkcs11
A minimal PKCS#11 module that implements the interfaces required to sign content using the Siguldry server
-
datasynth-fingerprint
Privacy-preserving synthetic data fingerprinting for DataSynth
-
rsecure
file encryption and decryption tool using AES-GCM
-
aws-sdk-paymentcryptography
AWS SDK for Payment Cryptography Control Plane
-
zfuel
types used for a mutual credit accounting system
-
cryptocol
cryptographic library that includes big number arithmetic operations, hash algorithms, symmetric-key cryptographic encryption/decryption algorithms, asymmetric-key (public-key) cryptographic…
-
astrid-audit
Chain-linked cryptographic audit logging for Astrid
-
news-backend
Personalized article recommendations without profiling or cookies
-
dilithium-rs
Pure Rust implementation of ML-DSA (FIPS 204) / CRYSTALS-Dilithium post-quantum digital signature scheme
-
sequoia-sq
Command-line frontends for Sequoia
-
grammers-crypto
Several cryptographic utilities to work with Telegram's data
-
paas-client
PEP Authorization API Service client
-
Mademoiselle_Entropia
Extremely strong, stupidly simple and relatively fast symmetric cipher.. check out the Readne for explanation. Have a great day, Dear User 💯❤️
-
crypto_bastion
Hardened post-quantum cryptographic primitives with zero-trust architecture
-
biscuit-parser
Datalog parser used in the biscuit-auth and biscuit-quote crates
-
lockstitch
incremental, stateful cryptographic primitive for symmetric-key cryptographic operations in complex protocols
-
frost-ed25519
A Schnorr signature scheme over Ed25519 that supports FROST
-
agentic-identity
Cryptographic identity anchor for AI agents — persistent identity, signed actions, revocable trust
-
libvault
modified from RustyVault
-
lxmf-core
Core LXMF message format, constants, and stamp validation (no_std)
-
t-rust-less-lib
Password manager library
-
bdrck
Generic common foundational utilities
-
certradar-cli
Certificate transparency and SSL/TLS security analysis CLI tool
-
lumenx-score
7-dimension quality scoring system for LumenX
-
tough
The Update Framework (TUF) repository client
-
mero-sign
CLI tool for signing Calimero bundle manifests
-
vmprotect
Unofficial VMProtect SDK for Rust
-
cocoon
protected container with strong encryption and format validation
-
kestrel-cli
Kestrel file encryption program
-
localsend-rs
LocalSend protocol - cross-platform file transfer tool
-
img4-dump
Extracts payloads and metadata from IMG4/IM4P/IM4M; decrypts with user-supplied IV+Key; optional LZFSE/LZSS decompress
-
readable-hash
Human-readable hash representations for easy verification and data obfuscation
-
cryptovec
A vector which zeroes its memory on clears and reallocations
-
tdx-quote
Parses and verifies Intel TDX quotes
-
pqc_kyber
post-quantum Kyber KEM algorithm
-
kitty-rc
controlling kitty terminal emulator via its remote control protocol
-
c2patool
displaying and creating C2PA manifests
-
json-proof-token
based on the new JOSE Working Group draft specifications: JSON Web Proof (JWP), JSON Proof Token (JPT) and JSON Proof Algorithm (JPA)
-
nu_plugin_nw_ulid
Production-grade ULID (Universally Unique Lexicographically Sortable Identifier) utilities plugin for Nushell with cryptographically secure operations, enterprise-grade security, and streaming support
-
cesride
Cryptographic primitives for use with Composable Event Streaming Representation (CESR)
-
bitbottle
a modern archive file format
-
ssh-vault
encrypt/decrypt using ssh keys
-
muddy
literal string obfuscation library
-
wa-rs-proto
Protocol Buffers definitions for WhatsApp
-
jwtk
JWT signing (JWS) and verification, with first class JWK and JWK Set (JWKS) support
-
cert-dump
High-performance X.509 certificate scanner and extractor for binary files
-
qcicada
SDK for the QCicada QRNG (Crypta Labs) — macOS-first, works on Linux too
-
sl-mpc-mate
secure multi-party computation
-
qfall-schemes
Collection of prototype implementations of lattice-based cryptography
-
wolfssl
High-level bindings for WolfSSL
-
s3-simple
fast and efficient s3 client for bucket operations
-
sphinx-packet
A Sphinx packet implementation in Rust
-
rust_ev_crypto_primitives
Crypto Primitives necessary for E-Voting Applications
-
arcanum-primitives
Native cryptographic primitives for Arcanum
-
tindercrypt
Data encryption with symmetric cryptographic keys or passwords/passphrases, and self-contained encryption metadata
-
caesar_cipher_enc_dec
can easily use caesar cipher
-
binstalk-types
The binstall toolkit that contains basic types for binstalk crates
-
voprf
verifiable oblivious pseudorandom function (VOPRF)
-
elastic-elgamal
ElGamal encryption and related zero-knowledge proofs with pluggable crypto backend
-
cryptotensors
extension of safetensors that adds encryption, signing, and access control (Rego-based policy engine) while maintaining full backward compatibility with the safetensors format. It…
-
zipsign
Sign and verify
.zipand.tar.gzfiles with an ed25519 signing key -
libherokubuildpack
Opinionated common code for buildpacks implemented with libcnb.rs
-
aranya-daemon-api
IPC API between the Aranya client and daemon
-
sigstore-trust-root
Sigstore trusted root management and parsing
-
pqc-binary-format
Standardized binary format for post-quantum cryptography encrypted data interchange
-
korrosync
A KOReader Sync Server
-
rustls-cng
Windows CNG API bridge for rustls
-
qatsi
Stateless secret generation via hierarchical memory-hard key derivation using Argon2id
-
hkdf
HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
-
htauth-cli
A CLI tool for managing htpasswd files
-
darkbio-crypto
Cryptography primitives and wrappers
-
mdk-core
A simplified interface to build secure messaging apps on nostr with MLS
-
krill
Resource Public Key Infrastructure (RPKI) daemon
-
compass-cli
Interactive README runner and onboarding guide
-
ruscrypt
⚡ Lightning-fast cryptography toolkit built with Rust - A comprehensive CLI tool for classical and modern cryptographic operations
-
bl4
Borderlands 4 save editor library - encryption, decryption, and parsing
-
ashcore
ASH (Application Security Hash) — RFC 8785 compliant request integrity verification with anti-replay protection
-
devolutions-crypto
An abstraction layer for the cryptography used by Devolutions
-
p3ak-vault
P3AK vault CLI — encrypted portable AI knowledge store. Create, ingest, search, and serve .vault files. 35 formats, hybrid BM25+vector search, 98% accuracy.
-
rust_helpers
help with projects
-
rooster
password manager
-
why2
Lightweight, fast, secure, and easy to use encryption system
-
libsmx
Pure-Rust, no_std, constant-time SM2/SM3/SM4/SM9 Chinese cryptography (GB/T 32918/32905/32907/38635)
-
qasa
Post-quantum cryptography implementation using CRYSTALS-Kyber and CRYSTALS-Dilithium for quantum-safe communications
-
rust_tokio_kcp
A kcp implementation for tokio
-
reishi-handshake
Pure, sans-IO implementation of the Noise IK handshake with optional post-quantum hybrid mode
-
concryptor
A multi-threaded AEAD encryption engine
-
salty
Small, sweet, swift Ed25519 signatures for microcontrollers
-
naru-config
A security-first configuration manager with encryption and audit logging
-
vmadm
Administer virtual machines in local libvirt
-
printwell-pdf
PDF manipulation features (forms, signing) for Printwell
-
httpsig
IETF RFC 9421 of http message signatures
-
nitro-tpm-attest
Retrieve a signed attestation document from the NitroTPM
-
fract
A Hyperchaotic, Quantum-Resistant, Minimalist Cryptographic Hash
-
cipherstash-client
The official CipherStash SDK
-
byte-array-ops
no_std-compatible library for security-by-default byte array operations. Includes automatic memory zeroization, constant-time utilities, multiple input formats (hex, binary, UTF-8)…
-
challenge-bypass-ristretto
implemention of the privacy pass cryptographic protocol using the Ristretto group (WIP)
-
yubirs-tools
Command line tools for interacting with YubiKeys, based upon yubirs
-
polytune
Maliciously-Secure Multi-Party Computation (MPC) Engine using Authenticated Garbling
-
sha1collisiondetection
SHA-1 hash function with collision detection and mitigation
-
wkd-server
A WKD server
-
proofmode
Capture, share, and preserve verifiable photos and videos
-
witnet-bn
Pairing cryptography with the Barreto-Naehrig curve
-
pf8
encoding and decoding artemis PF8 archive files
-
fynx-proto
Production-ready SSH and IPSec/IKEv2 protocol implementations with comprehensive testing and high-level APIs
-
merkle-search-tree
A data structure for efficient state-based CRDT replication and anti-entropy
-
secure-crypt
Ultra secure encryption/decryption tool using Rust + libsodium with zero secret leakage
-
saorsa-gossip-groups
MLS group management wrapper for Saorsa Gossip (RFC 9420 compliant)
-
mitoo
toolkit library that encapsulates methods such as configuration reading, file operations, encryption and decryption, transcoding, regular expressions, threading, collections, trees…
-
geneos-toolkit
building Geneos Toolkit compatible applications
-
bls48581
BLS signature implementation using the BLS48-581 curve with KZG commitments
-
qcrypto
design, simulation and validation of Quantum Cryptography protocols
-
ruma-common
Common types for other ruma crates
-
hpke-dispatch
runtime algorithmic selection for hybrid public key encryption
-
tss-esapi-sys
FFI wrapper around TSS 2.0 Enhanced System API
-
datafusion-postgres-cli
Command-line tool for DataFusion's Postgres Protocol frontend
-
async-hash
Traits and helper functions for SHA256 hashing of async data types
-
ds-rom
extracting/building Nintendo DS ROMs
-
librnxengine
implement robust software licensing, activation, and validation systems
-
recipe
Dynamic binary composition and low level manifest orchestration. Defines the blueprints and deterministic procedures for the Honest-Classified security ecosystem.
-
typelock
Enforce security boundaries at the Type level
-
lorawan
structures and tools for reading and writing LoRaWAN messages from and to a slice of bytes
-
saorsa-fec
Quantum-safe erasure coding with post-quantum cryptography using saorsa-pqc
-
paseto-pq
Post-quantum PASETO tokens with RFC-compliant footer authentication using ML-DSA signatures
-
fhe
Fully Homomorphic Encryption in Rust
-
prollytree
A prolly (probabilistic) tree for efficient storage, retrieval, and modification of ordered data
-
dotenvage
Dotenv with age encryption: encrypt/decrypt secrets in .env files
-
ironhide
easily encrypt and decrypt files to users and groups. Similar to GPG, but usable at scale.
-
uselesskey
Deterministic cryptographic key and certificate fixtures for Rust tests. Seed-stable, cached, scanner-safe.
-
fheanor
that provides fast implementations of rings commonly used in homomorphic encryption, built on feanor-math
-
trustless-provider-filesystem
Filesystem-based key provider for trustless
-
dugout
Git-native secrets manager for development teams, written in Rust
-
shamirsecretsharing
Shamir secret sharing library for Rust
-
affinidi-secrets-resolver
Common utilities for Affinidi Trust Development Kit
-
kangarootwelve_xkcp
An FFI wrapper for the XKCP implementation of the KangarooTwelve hash function
-
appattest
Verification of Apple App Attestations and Assertions, to help enforce iOS App Integrity Checks
-
klave
SDK for the Klave platform
-
pact_verifier_cli
Standalone pact verifier for provider pact verification
-
ret2script
Checker script runner for Ret2Shell - A feature-riches CTF challenge platform
-
yubikey-signer
YubiKey code signing utility
-
sl-messages
Message exchange for MPC protocols
-
hmac
Generic implementation of Hash-based Message Authentication Code (HMAC)
-
mbedtls-smx
Idiomatic Rust wrapper for MbedTLS, allowing you to use MbedTLS with only safe code while being able to use such great Rust features like error handling and closures. Building on MbedTLS's focus on embedded use…
-
bizinikiwi-bn
Pairing cryptography with the Barreto-Naehrig curve
-
ssi-vc-jose-cose
Securing Verifiable Credentials using JOSE and COSE with the
ssilibrary -
ockam
End-to-end encryption and mutual authentication for distributed applications
-
tauri-plugin-secure-element
Tauri plugin for secure element use on iOS (Secure Enclave) and Android (Strongbox and TEE)
-
omnibor
Reproducible software identity and fine-grained build dependency tracking
-
pkcs11-sys
Generated bindings for pkcs11.h. Useful for building PKCS#11 modules in rust.
-
fiscal
Brazilian fiscal document library (NF-e/NFC-e) — Rust port of sped-nfe
-
vitaminc
cryptographic suite by CipherStash
-
ypass
A secure password manager using YubiKey HMAC-SHA1 challenge-response
-
webrtc-dtls
A pure Rust implementation of DTLS
-
rskit
rust kit
-
cosmian_findex
Symmetric Searchable Encryption
-
secapi
bindings
-
symcrypt
Friendly and Idiomatic Wrappers for SymCrypt
-
barretenberg-rs
Rust bindings for Barretenberg, a C++ cryptographic library for zero-knowledge proofs
-
shield-core
EXPTIME-secure encryption library - Rust core implementation
-
wolfssl-wolfcrypt
Rust wrapper for wolfssl C library cryptographic functionality
-
rusty_paserk
Platform Agnostic Serializable Keys (PASERK) is an extension on PASETO for key management
-
atproto-plc
did-method-plc implementation for ATProto with WASM support
-
aes_crypto
A platform-agnostic library for the AES cipher (Rijndael)
-
jks
Java KeyStore (JKS) and PKCS12 encoder/decoder for Rust
-
botan
Rust wrapper for Botan cryptography library
-
xmlsec
Wrapper for xmlsec1 library
-
suit_validator
no_std-friendly Rust crate for decoding and verifying SUIT Manifest
-
oxigdal-security
Enterprise security features for OxiGDAL: encryption, access control, compliance
-
secrets-tweaked
Protected-access memory for cryptographic secrets
-
fastmurmur3
Fast non-cryptographic hash, with the benchmarks to prove it
-
pqready
A cross-platform CLI tool to test for quantum-secure TLS/HTTPS encryption support
-
negentropy
set-reconciliation protocol
-
c2-chacha
The ChaCha family of stream ciphers
-
topo-scanner
File walking with gitignore support and content hashing
-
xor_cryptor
A encryption/decryption library using bitwise xor
-
secret-tree
Hierarchical secret derivation with Blake2b
-
ciphersuite
Ciphersuites built around ff/group
-
peat-mesh
Peat mesh networking library with CRDT sync, transport security, and topology management
-
dcrypt
pure-Rust, software-only cryptography library providing both classical and post-quantum primitives with a focus on security, hybrid KEMs/signatures, and memory-safe, no-FFI design
-
infolyt-daemon
Background daemon for Infolyt
-
poulpy-schemes
A backend agnostic crate implementing mainsteam RLWE-based FHE schemes
-
edgesentry-rs
Tamper-evident immutable audit trace: signing, verification, ingestion and CLI
-
cubehash
(rev2/rev3) hashing with SIMD acceleration and portable fallback
-
fastcert
zero-config tool for making locally-trusted development certificates
-
tf-registry
A high-performance, asynchronous implementation of the Terraform Provider Registry protocol, powered by Tokio and Axum
-
chuchi-crypto
Crypto library providing encryption and signing
-
jacs
JACS JSON AI Communication Standard
-
nabla-cli
An OSS tool for reverse engineering and binary composition analysis
-
aws-lc-sys
AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.
-
eldenring
Structures, bindings, and utilities for From Software's title Elden Ring
-
opensecret
Rust SDK for OpenSecret - secure AI API interactions with nitro attestation
-
pq-oid
OID constants for all PQ algorithms (ML-KEM, ML-DSA, SLH-DSA)
-
acme-redirect
Tiny http daemon that answers acme challenges and redirects everything else to https
-
scryptenc
scrypt encrypted data format
-
fips205
FIPS 205: Stateless Hash-Based Digital Signature Standard
-
shashasha
SHA3
-
ngdp-crypto
Salsa20 and ARC4 encryption/decryption with key management for Blizzard's TACT files
-
exaf-rs
Extensible archiver format
-
djangohashers
port of the password primitives used in Django project
-
chacha
stream ciphers
-
tor-hscrypto
Basic onion service cryptography types used by Aerti
-
nacl
Rust version of NaCl Cryptographic library with Scrypt added
-
mozilla/jwcrypto
Firefox Application Services
-
hofmann-rfc
RFC 9380 (Hash-to-Curve), RFC 9497 (OPRF), and RFC 9807 (OPAQUE)
-
rops
SOPS-like library in pure Rust
-
ironcore-alloy
IronCore Labs SDK for all your different Application Layer Encryption needs
-
arwen-codesign
Ad-hoc code signing for Mach-O binaries
-
xmit
e2e encrypted messaging between agents
-
win-crypto-ng
Safe bindings to Windows Cryptography API: Next Generation
-
fast-des
implements DES encryption and NetNTLMv1 hashing in bitsliced form. a 10x-100x improvement in speed can be achieved depending on hardware.
-
mlar
A wrapper around the MLA library for common use cases
-
sgx_types
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
cyber-hemera
Hemera — Poseidon2 hash over Goldilocks field
-
deno_crypto
Web Cryptography API implementation for Deno
-
gstp
A secure, authenticated, transport-agnostic data exchange protocol with distributed state management via Encrypted State Continuations (ESC)
-
shelter
ROP-based sleep obfuscation to evade memory scanners
-
phala-tee-deploy-rs
Rust client for deploying and managing Docker containers on Phala TEE Cloud (dstack)
-
openentropy-cli
CLI for openentropy — your computer is a hardware noise observatory
-
kcr_argoproj_io
Kubernetes Custom Resource Bindings
-
light-openid
Lightweight OpenID primitives & client
-
bbjwt
well documented JWT validation library, mainly for validating OpenID Connect ID Tokens
-
schemapin
Cryptographic schema integrity verification for AI tools - Rust implementation
-
tongsuo-src
Source of Tongsuo and logic to build it
-
atlas-common
Common functionality for Atlas ML provenance system
-
vaultic
Secure your secrets. Sync your team. Trust your configs.
-
bergshamra-keys
Key management for Bergshamra XML Security library
-
rama-boring
BoringSSL bindings for Rama
-
tacet
Detect timing side channels in cryptographic code
-
kafkang
Rust client for Apache Kafka
-
psp_security
PSP Security Protocol
-
gun-rs
A realtime, decentralized, offline-first, graph data synchronization engine (Rust port)
-
libsui
A injection tool for executable formats (ELF, PE, Mach-O) that allows you to embed files into existing binary and extract them at runtime
-
tlpsign
A cryptographic protocol for time-locked signature verification with an optional revocation mechanism, requiring no trusted third party
-
yacme
ACME client
-
tink-streaming-aead
Streaming AEAD functionality for Rust port of Google's Tink cryptography library
-
appstoreconnect
client
-
eolib
A core rust library for writing applications related to Endless Online
-
neodata
Streaming fixed-memory 16-ary merkle tree with backend-agnostic storage
-
tlock_age
Rust encryption library for hybrid time-lock encryption
-
hayro
A rasterizer for PDF files
-
qcert
generating test key/certificate pairs
-
fp2
An efficient, flexible and constant time Rust implementation of the extension field Fp^2 with modulus x^2 + 1
-
latticearc
Production-ready post-quantum cryptography. Hybrid ML-KEM+X25519 by default, all 4 NIST standards (FIPS 203–206), post-quantum TLS, and FIPS 140-3 backend — one crate, zero unsafe.
-
breakmancer
Drop a breakpoint into any shell
-
iroh-blake3
the BLAKE3 hash function
-
tnid
A UUID compatible ID with static type checking
-
isomdl
ISO mDL implementation in Rust
-
hana-vault
used by the Hana SSH client for storing user data securely in encrypted SQLite
-
crrl
cryptographic research
-
flexiber
Encoding and decoding of BER-TLV as described in ISO 7816-4, without allocations
-
ockam_command
End-to-end encryption and mutual authentication for distributed applications
-
nuts-archive
A tar like archive on top of the nuts-container
-
chbs
providing secure passphrase generation based on a wordlist
-
hashtree-core
content-addressed merkle tree with KV storage
-
serde-encrypted-value
A Serde Deserializer wrapper which transparently decrypts encrypted values
-
jsonwebtoken-aws-lc
Create and decode JWTs in a strongly typed way
-
turnkey_api_key_stamper
Generate signatures over Turnkey API requests using a P-256 key
-
filecoin-hashers
Hashers used in filecoin and their abstractions
-
githubclaw
Near-autonomous AI agents that manage open-source projects end-to-end using GitHub as the single source of truth
-
wsc-cli
CLI tool to sign and verify WebAssembly modules
-
anyhide
Hide any data in any file(s) - steganography tool with hybrid encryption and plausible deniability
-
clock-hash
ClockHash-256: Consensus hash function for ClockinChain
-
clasp-registry
Entity registry for CLASP - persistent identity for devices, users, and services
-
tenuo
Agent Capability Flow Control - Rust core library
-
holecard-cli
A secure CLI password manager with dual-key encryption and TOTP support
-
rustls-mbedpki-provider
Implements rustls PKI traits using mbedtls
-
prople-crypto
A set of libraries and function helpers to maintain cryptography data based on Prople system requirements
-
kylix-ml-kem
ML-KEM (FIPS 203) implementation for the Kylix post-quantum cryptography library
-
smpl_jwt
Very simple JWT generation lib
-
adaptive-pipeline-domain
Domain layer for optimized, adaptive pipeline - pure reusable business logic, entities, value objects, and domain services following DDD principles
-
apns-h2
Async HTTP/2 APNs client based on hyper
-
laicrypto
Lemniscate-AGM Isogeny (LAI) Encryption – quantum‑resistant cryptography
-
deadrop
Zero-knowledge encrypted dead drop. One binary. One command. Gone.
-
zbus-lockstep
Keep types in lockstep with DBus XML definitions
-
claim169-core
ID Claim 169 QR Code decoder library
-
etebase
client library for Etebase
-
rdedup
Data deduplication with compression and public key encryption. - binary
-
env_encryption_tool
Rust-based .env (dotenv) file encryption & decryption tool - store & retrieve your app environment variables safely 😎 now Post-Quantum-safe!
-
sare-cli
Command-line interface for the SARE encryption standard
-
nacrypt
A secure and easy-to-use file encryption utility
-
citadel_pqcrypto
Lower-level cryptographic library for the Citadel Protocol
-
aranya-policy-text
The Aranya Policy Language textual types
-
zsign-rs
Cross-platform iOS code signing library - Rust port of zsign
-
polyhash
POLYVAL and GHASH per RFC 8452
-
rpgm-asset-decrypter-lib
decrypting/encrypting RPG Maker MV/MZ audio and image assets
-
blake2ya
The BLAKE2 cryptographic hash and message authentication code
-
pngyou
high-performance CLI tool to hide secret messages in a PNG file using steganography
-
tuf
Update Framework (TUF)
-
gpgme
bindings for Rust
-
icefast
A optimized parallel ICE encryption implementation with auto-dispatching logic and auto-vectorization
-
eidetica
Decentralized DB. Remember Everything. Everywhere. All At Once.
-
sha3-circuit
Lookup based midnight-proofs (halo2 fork) implementation of keccak-f[1600] permutation and gadgets for the sha3-256 and keccak-256 hash functions
-
assinador-livre-rs
Aplicacao desktop em Rust para assinatura digital de PDF com certificado A3 no Windows, com API WebSocket local
-
p256
Pure Rust implementation of the NIST P-256 (a.k.a. secp256r1, prime256v1) elliptic curve as defined in SP 800-186, with support for ECDH, ECDSA signing/verification, and general purpose curve arithmetic
-
pg_ecdsa_verify
A PostgreSQL extension for ECDSA signature verification
-
rana
Nostr public key mining tool
-
hfile
command-line interface (CLI) tool for generating hash values of files
-
hypercore-protocol
Replication protocol for Hypercore feeds
-
lupin
A blazing-fast, lightweight steganography tool for concealing secret data within normal files
-
accumulators
Complete package of multiple Accumulators with Stores and hashing functions (Hashers)
-
tectonic-fn-dsa-kgen
FN-DSA signature scheme
-
astrid-crypto
Cryptographic primitives for Astrid secure agent runtime
-
rust-dice
Rust wrapper for dice
-
agntcy-slim-config
Configuration utilities
-
cipherrun
A fast, modular, and scalable TLS/SSL security scanner written in Rust
-
e2eel
end-to-end encryption library for key management
-
okid
generating double clickable ids
-
envio
A secure command-line tool for managing environment variables
-
clear_on_drop
Helpers for clearing sensitive data on the stack and heap
-
xllm-proxy
TCP proxy server with AES-256-GCM encryption for xllm
-
tls-api
TLS API without implementation
-
bjorn-acme
Building blocks for an ACME server
-
parsec-service
A language-agnostic API to secure services in a platform-agnostic way
-
memo128
encoding and decoding 128-bit data as mnemonic sentences
-
scalable-rbe
A prototype of a scalable Registration-Based Encryption scheme based on standard lattice assumptions
-
tailscale-localapi
Client for the Tailscale local API
-
siguldry
Sigul protocol
-
edgee-cli
Edgee CLI to play with AI Gateway, tools, components
-
dev-tool
dev-tool(变更为mitoo)是一个Rust工具包类库，对文件、加密解密、转码、正则、线程池、sqlite等方法进行封装，组成各种Util工具类。
-
verkle_pq
Quantum-resistant Verkle tree library built on quilibrium-verkle with CRYSTALS-Dilithium3 (ML-DSA-65) post-quantum signatures and SHAKE-256 proof binding
-
stix-rs
STIX 2.1 types and helpers for Rust
-
msoffice_crypt
msoffice-crypt bindings for the Rust programming language
-
pingap-acme
ACME client for pingap
-
ferrocrypt-cli
Command-line interface for Ferrocrypt (installs the 'ferrocrypt' binary)
-
radicle-oid
Radicle representation of Git object identifiers
-
sigstore-sign
Sigstore signature creation
-
dhsd
SCION endhost SDK observability utilities
-
lattice-kyber
Pure Rust implementation of ML-KEM (FIPS 203) / CRYSTALS-Kyber post-quantum key encapsulation mechanism
-
hcl
high level cryptography library ready for production use
-
syftbox-crypto-cli
Command-line interface for SyftBox cryptographic operations
-
wechat-oa-sdk
WeChat Official Account API SDK for Rust
-
assemblyline-models
Data models for the Assemblyline malware analysis platform
-
chacha20poly1305
Pure Rust implementation of the ChaCha20Poly1305 Authenticated Encryption with Additional Data Cipher (RFC 8439) with optional architecture-specific hardware acceleration. Also contains…
-
qrptonote
AES-256-GCM encrypted terminal notebook. mlock'd cleartext buffer, Argon2id KDF, prctl-hardened.
-
antimatter
antimatter.io Rust library for data control
-
ssss
Shamir's Secret Sharing Scheme
-
dechdev_rs
by DECHDEV
-
gost-crypto
GOST 28147-89 block cipher and GOST R 34.11-94 hash — no_std, RustCrypto compatible
-
esk
Encrypted Secrets Keeper with multi-target deploy
-
ssri
Various utilities for handling Subresource Integrity
-
mozilla/neqo-crypto
Neqo, an implementation of QUIC written in Rust
-
dkimdo
DKIM command-line tool
-
weirwood
Privacy-preserving XGBoost inference via Fully Homomorphic Encryption
-
drand_core
A drand client library
-
blsttc
Pairing threshold cryptography
-
noise-rust-crypto
Wrappers of dalek and RustCrypto crates for noise-protocol
-
schnorr-rs
Schnorr Protocols
-
dtls
A pure Rust implementation of DTLS
-
oracle_omen_patches
Self-evolution patch system with gates for oracle.omen
-
midnight-ledger
transaction format and semantics for Midnight
-
secretsharing_shamir
Hardened Rust cryptographic library for Shamir's Secret Sharing with support for multiple prime sizes
-
xor-cipher
reusable and optimized XOR ciphers in Rust
-
cryptan
crypto playground (Caesar, Morse, ...)
-
tiny-encrypt
tiny file encrypt tool
-
zopp-secrets
Secret encryption and decryption for zopp secrets manager
-
shamir-vault
Shamir's Secret Sharing algorithm
-
fips204_rs
FIPS 204: Module-Lattice-Based Digital Signature
-
sifredb
Field-level encryption library with envelope encryption and blind indexes
-
altcha-lib-rs
Community implementation of the Altcha library in Rust for your own server application to create and validate challenges and responses
-
promocrypt-core
Core library for cryptographically secure promotional code generation
-
shrouded
Secure memory management with mlock, guard pages, and automatic zeroization
-
ockam_api
Ockam's request-response API
-
safe_pqc_kyber
Fork of pqc_kyber with some safety fixes
-
pasta-msm
Optimized multiscalar multiplicaton for Pasta moduli for x86_64 and aarch64
-
rswidevine
Widevine CDM (Content Decryption Module) implementation in Rust
-
meritocrab-github
GitHub API integration for the Meritocrab reputation system
-
cocoon-tpm-crypto
Cocoon TPM project - cryptographic primitives
-
ncm_core
core decoder for ncmc
-
rvf-crypto
RuVector Format cryptographic primitives -- SHA-3 hashing and Ed25519 signing
-
openpgp-card
A client implementation for the OpenPGP card specification
-
avila-nucleus
Atomic-level operations - Foundation of Avila cryptography stack
-
totpyx
Minimal, dependency-free RFC 6238 TOTP implementation
-
crypto-async-rs
High-performance pure Rust cryptographic library with async streaming support
-
zymic_cli
Encrypt and decrypt files using the Zymic format
-
staticrypt
Static encryption for string literals and binary data
-
sentinel-crypto
Cryptographic utilities for Cyberpath Sentinel, including hashing and signing
-
nats-io-jwt
Generate JWTs signed using NKEYs for use with https://nats.io
-
cipherscope
A high-performance, language-aware tool for scanning source code to detect cryptographic libraries and algorithms usage
-
amll-lyric
一个歌词解析/生成模块，着重于歌词内容解析，支持多种格式
-
tink-ffi
Safe Rust bindings to Google Tink cryptography library
-
agent-vault
Zero-trust credential manager for AI agents
-
ligerito-reed-solomon
Reed-Solomon erasure coding for Ligerito over binary fields
-
rustup-mirror
Setup a local rustup mirror
-
bab_rs
Bab family of hash functions, and its WILLIAM3 instantiation
-
rvf-federation
Federated RVF transfer learning -- PII stripping, differential privacy, federated averaging
-
garage_model
Core data model for the Garage object store
-
eenv
Encrypted Env Manager: encrypts .env files, manages examples, and enforces safety via git hooks
-
opensession-api
Shared API types, crypto, and SQL builders for opensession.io
-
atlas-rs
attested TLS (aTLS) core library for verifying TEE attestations over TLS connections
-
wechat-pay-rust-sdk-wf
微信支付 © Wechat Pay SDK Official (标准库)
-
isideload-cryptographic-message-syntax
A pure Rust implementation of Crypographic Message Syntax (RFC 5652)
-
symphony
Eclipse Symphony Target Provider Rust binding
-
openapi-rs
A type-safe Rust client library for building, signing, and sending API requests with minimal boilerplate
-
mls-rs-crypto-hpke
HPKE implementation based on mls-rs-crypto-traits used by mls-rs
-
waproto
Protocol Buffers definitions for WhatsApp
-
crypt-ro
Blazing-fast matrix-based encryption library with configurable transformations
-
sslenum
SSL certificate Extractor
-
argentum_encryption_business
Business layer of encryption
-
simple-cookie
Functions for creating and parsing signed & encrypted cookies
-
graviola
modern, fast cryptography library
-
pkcrack
Known-plaintext attack against PkZip encryption
-
pkcs12cracker
High-performance, multi-threaded PKCS#12 password cracker supporting dictionary, pattern-based, and brute force attacks
-
mini-sign
minisign in rust
-
spartan
High-speed zkSNARKs without trusted setup
-
a2
A native, asynchronous Apple push notification client
-
locker-backend
Self-hosted digital encrypted vault with immutable consent receipts for personal documents
-
donut-cli
CLI tool for libdonut-rs
-
zhc_langs
Language dialects for the ZHC compiler (IOP, HOP, DOP)
-
vrf-rfc9381
VRFs (Verifiable Random Functions) as described in RFC9381
-
atrium-crypto
Cryptographic library providing basic helpers for AT Protocol
-
ossl
OpenSSL version 3+ bindings to modern EVP APIs
-
jmix-rs
JMIX (JSON Medical Interchange) format - secure medical data exchange with cryptographic features
-
sm-crypto
China's Standards of Encryption Algorithms(SM2/SM3/SM4)
-
mpc-relay
Noise protocol websocket relay for MPC/TSS applications
-
sodalite
Tweetnacl in pure rust with no std dependency
-
rasn-cms
Data types for handling Cryptographic Message Syntax
-
jubjub-elgamal
ElGamal encryption scheme implemented on the JubJub curve with support for zero-knowledge circuits
-
corevpn-crypto
Cryptographic primitives for CoreVPN - secure key exchange, encryption, and certificate handling
-
rsa-magic-public-key
Converting between the Magic Public Key format and a RustCrypto RSA type
-
arcis-compiler
A framework for writing secure multi-party computation (MPC) circuits to be executed on the Arcium network
-
spideroak-crypto
SpiderOak's cryptography library
-
cfun
Tidy up common functions
-
argon2-kdf
Intuitive Rust bindings for Argon2
-
kmip-protocol
KMIP protocol object (de)serialization
-
cnfy-uint
Zero-dependency 256-bit unsigned integer arithmetic for cryptographic applications
-
rustls-jls
Rustls is a modern TLS library written in Rust
-
tink-aead
AEAD functionality for Rust port of Google's Tink cryptography library
-
yamid
Machine ID
-
herolib-crypt
secure asymmetric cryptography: signing and encryption using Ed25519
-
cryptid-rs
encrypt and decrypt integer IDs to URL safe strings
-
cert-helper
A helper library for managing certificates using OpenSSL, including support for generating CSRs and CRLs
-
cryptr
encrypted (streaming) values
-
arx-kw
ARX-KW-8-2-4 Key Wrap constructions
-
cortex-airlock
TIBET Cortex Airlock: zero-plaintext-lifetime processing with mlock and zeroize
-
nostringer_cli
Command-line interface for the nostringer ring signature library
-
openfhe
Rust package of the OpenFHE Fully Homomorphic Encryption Library
-
oxitoken
Fastest and most secure JWT encoding/validation library for Rust. Fully supports custom header/claims structs, an extendable validation pipeline, and is crypto-backend agnostic (built-in…
-
jtm
Just The Math Crypto Library
-
thrussh-keys
Deal with SSH keys: load them, decrypt them, call an SSH agent
-
identity_ecdsa_verifier
JWS ECDSA signature verification for IOTA Identity
-
a3s-box-runtime
MicroVM runtime engine — VM lifecycle, OCI images, attestation, networking
-
blake2b-rs
Rust bindings for the official Blake2b C implementation
-
sl-oblivious
OT protocols
-
confidential-ml-pipeline
Multi-enclave pipeline orchestration for confidential ML inference
-
codive-tunnel
Shared types and cryptography for secure tunneling
-
chachacha
SIMD optimized implementations of the Chacha stream cipher
-
mxlink
connecting (linking) to the Matrix Client Server API (for building bots, etc.)
-
pqc-fips
Imported pqc-combo v0.1.0
-
lambda-shield
A lightweight, energy-efficient stream cipher based on the Collatz Lemma 3 residue discovery
-
cmn
accessing a collection of mathematical and cryptographic constants
-
pam-ssh-agent
A PAM module that authenticates using the ssh-agent
-
axial
All in One web framework for Rust
-
tuftool
creating and signing The Update Framework (TUF) repositories
-
efficient-sm2
China's Standards of Signature Algorithms (SM2)
-
rssh-core
Core cryptography, encrypted key storage, and RAM key management for rssh-agent
-
pkcs8
Pure Rust implementation of Public-Key Cryptography Standards (PKCS) #8: Private-Key Information Syntax Specification (RFC 5208), with additional support for PKCS#8v2 asymmetric key packages (RFC 5958)
-
xwt-web
xwt that runs in the browser. Powered by wasm-bindgen and web-sys
-
rust_jarm
JARM fingerprinting in native Rust
-
payload-loader
Production-ready Rust loader with cryptography, configuration, and security features
-
keeper-secrets-manager-core
Rust SDK for Keeper Secrets Manager
-
ntdb_unwrap
Decrypt/decoded NTQQ database files
-
secp
A flexible and secure secp256k1 elliptic curve math library with constant-time support and superb ergonomics
-
starweft-protocol
Core protocol definitions and message types for starweft
-
gcm_rs
AES-256 GCM
-
subtle-encoding
Encoders and decoders for common data encodings (base64, bech32, hex) which avoid data-dependent branching/table lookups and therefore provide "best effort" constant time. Useful for encoding/decoding…
-
bupstash
Easy and efficient encrypted backups
-
paillier-zk
ZK-proofs for Paillier encryption scheme
-
btls
BoringSSL bindings
-
ecdsa
Pure Rust implementation of the Elliptic Curve Digital Signature Algorithm (ECDSA) as specified in FIPS 186-4 (Digital Signature Standard), providing RFC6979 deterministic signatures as well as support for added entropy
-
acme2-eab
A Tokio and OpenSSL based ACMEv2 client
-
mxdx-secrets
Age encryption and secret management for mxdx
-
paks
A light-weight encrypted archive inspired by the Quake PAK format
-
frost-secp256k1
A Schnorr signature scheme over the secp256k1 curve that supports FROST
-
encodex
cryptanalysis tool for legacy and modern codes, ciphers and hashes
-
datex-crypto-facade
DATEX Crypto Trait used by the datex crate
-
secry
AES-256-GCM / ChaCha20-Poly1305 / XChaCha20-Poly1305 token encryption CLI
-
saorsa-gossip-identity
Post-quantum identity management for Saorsa Gossip: ML-DSA-65 keypairs and PeerId derivation
-
kuska-handshake
Secure Scuttlebutt handshake + boxstream library
-
ps-datachunk
Chunk-based data encrypter
-
rust-secure-logger
Memory-safe security logging for financial systems and critical infrastructure with encryption, log forwarding, and compliance automation
-
srp6
A safe implementation of the secure remote password authentication and key-exchange protocol - SRP version 6 and 6a
-
cipher-salad
Implementations of classic ciphers
-
boring-sys
FFI bindings to BoringSSL
-
chip_as_code
Semantic Chips — deterministic boolean circuits as text DNA. Parse, evaluate, evolve, and prove policy gates with No-Guess constitutional checkpoints.
-
kcr_kustomize_toolkit_fluxcd_io
Kubernetes Custom Resource Bindings
-
wa-rs-binary
Binary data and constants for WhatsApp protocol
-
shippo_git
Git helpers for Shippo
-
chamber-tui
A secure, local-first secrets manager with encrypted storage and zero-knowledge architecture
-
prefix-file-tree
Predictable file directory structures
-
crabgraph
A safe, ergonomic, high-performance cryptographic library for Rust built on audited primitives
-
hermes-tdata
Pure Rust parser for Telegram Desktop's tdata storage format. Decrypts local storage and extracts auth keys without Qt/C++ dependencies.
-
sm9
SM9 (OSCCA GM/T 0044-2016), identity-based cryptography
-
libsodium-rs
A comprehensive, idiomatic Rust wrapper for libsodium, providing a safe and ergonomic API for cryptographic operations
-
cryprot-core
Core primitives for cryptographic protocol implementations
-
cargocrypt
Zero-config cryptographic operations for Rust projects with HIVE MIND collective intelligence
-
faest
Pure Rust implementation of the FAEST post-quantum secure digital signature scheme
-
spake2-conflux
The SPAKE2 password-authenticated key-exchange algorithm
-
openssl_provider_forge
FFI binding for the
CoreandProviderAPIs ofOpenSSL 3.2+ -
kerberos_crypto
Cryptography algorithms for Kerberos
-
dgsp
Efficient Scalable Post-Quantum Fully-Dynamic Group Signature Scheme Using SPHINCS+
-
taceo-groth16-material
A collection of utilities for generating witnesses and proofs for Groth16 circuits. Supports Circom circuits for now.
-
better-blockmap
Generate better blockmap files for electron-builder
-
palisade-config
Security-conscious configuration management for honeypot systems with cryptographic tag derivation
-
libkeri
KERI (Key Event Receipt Infrastructure)
-
zbx_sender
Zabbix Sender Client
-
datapipe
Stream data from here to there
-
kcr_fluentd_fluent_io
Kubernetes Custom Resource Bindings
-
rust-padbuster
It's a port of python-paddingoracle (https://github.com/mwielgoszewski/python-paddingoracle)
-
fi-digital-signatures
Cryptography library for rust and WASM
-
capycrypt
An advanced cryptographic suite for secure message exchange
-
ciphercore-utils
Convenience functions and wrappers used by CipherCore crates
-
swc_confidential
AST transforms visitor for swc-confidential
-
pubky-messenger
private messaging using Pubky
-
n01d-forge
Secure Cross-Platform Image Burner with AES-256 Encryption - Write ISOs to USB drives with optional encryption
-
mogh_server
Configurable axum server including TLS, Session, CORS, common security headers, and static file hosting
-
ps3decrs
PS3 ISO decryption tool
-
bark-dev
bark(receive notify on IOS devices)
-
authenticated-pseudonyms
anonymous credentials
-
secra-pluginctl
生产级插件打包工具 - 安全可信的插件产物管理（支持加密、签名、并发处理）
-
redoubt-aead
AEGIS-128L and XChaCha20-Poly1305 AEAD with zeroization
-
aes-wasm
AES-GCM, AES-OCB, AEGIS, AES-CTR, CMAC-AES for WebAssembly
-
agentic-identity-mcp
MCP server for AgenticIdentity — expose identity operations to AI agents
-
libtls
Rust bindings for LibreSSL's libtls
-
xcalgo
XCA: Topological Data Analysis Cryptosystem - Novel encryption based on graph homomorphisms and persistent homology
-
short-crypt
ShortCrypt is a very simple encryption library, which aims to encrypt any data into something random at first glance
-
pmv_encryption_rs
PersonalMediaVault encrypted storage model. This library allows to encrypt and decrypt data, and also read ans write files in the same format PersonalMediaVault uses.
-
webrtc-srtp
A pure Rust implementation of SRTP
-
jose
A JSON Object Signing and Encryption implementation
-
sunscreen
A Fully Homomorphic Encryption (FHE) compiler supporting the Brakerski/Fan-Vercauteren (BFV) scheme
-
svalinn
A unified, safety-critical hybrid cryptographic library (X25519, ML-KEM, Ed25519, ML-DSA, SLH-DSA)
-
crypta
Gestor de secretos moderno escrito en Rust puro, compatible con SOPS/Age para encriptación de secretos y sincronización automática con Git
-
custom-utils
Provide customized tools based on features
-
taceo-eddsa-babyjubjub
An EdDSA signature scheme implementation over the Baby Jubjub elliptic curve using Poseidon2, useful for SNARK-friendliness
-
vigenere-demo
优雅的维吉尼亚密码实现，采用泛型设计，支持自定义字符集
-
hmac-sha1
wrapper around the RustCrypto hmac and sha1 crates for simple HMAC-SHA1 generation
-
prisma-decrypt
CLI tool for super fast prisma-field-encryption column decryption (clock decryption)
-
sshx
A secure web-based, collaborative terminal
-
fpe
Format-preserving encryption
-
dog-auth-local
Local (username/password) authentication strategy for DogRS
-
json_atomic
The Cryptographic Atom — JSON✯Atomic: canonicalization + BLAKE3 content addressing + DV25-Seal (Ed25519) for Signed Facts
-
sha2-const-stable
const fn implementation of the SHA-2 family of hash functions. Based on sha2-const, but updated to use only stable rust
-
debsign-rs
Sign Debian packages with GPG
-
kyu-extension
Extension trait and procedure signatures for KyuGraph plugins
-
logline
full stack bundle (TDLN + JSON✯Atomic + LogLine core + LLLV) with CLI
-
tesser-broker
Broker abstraction and execution client interfaces for Tesser
-
libslug
Cryptography Intended For Slug20 That Supports X59 Certificate Format and Post-Quantum Cryptography
-
kiwavi
A secure TOTP-based key derivation system using user salts
-
gxt
Minimal, encrypted, signed and copy-pasteable tokens for manual data exchange between games
-
light-poseidon-nostd
Poseidon hash implementation in Rust with no_std support (fork of light-poseidon)
-
commucat-crypto
Noise handshake helpers and Ed25519 tooling for CommuCat
-
iscc-lib
High-performance Rust implementation of ISO 24138:2024 (ISCC)
-
tor-client-lib
A client library for the Tor API
-
jax-common
Core data structures and cryptography for JaxBucket - end-to-end encrypted P2P storage
-
ezcheck
lightweight, cross-platform, and high-performance tool for calculating, comparing, and verifying hash of strings and files
-
csrf
CSRF protection primitives
-
rust-kpdb
reading/writing KeePass 2 and KeePassX databases
-
wstep-rs
[MS-WSTEP] WS-Trust X.509v3 Token Enrollment Extensions protocol
-
flp-saml2
SAML2 for Rust
-
age-plugin-xwing
X-Wing plugin for age clients
-
palcrypto-rs
A crypto lib
-
qssl
Patent-free post-quantum TLS with SPHINCS+ KEM, Falcon signatures, and traffic analysis resistance. NIST FIPS 203/204/205 compliant.
-
orbis-pkg
parsing and extracting PlayStation 4 PKG files
-
tequel-rs
An authenticated simetric encrypt engine (AEAD), robust and caotic
-
feistelnet
Symetric block split Feistel Network
-
tafrah
Native Rust Post-Quantum Cryptography library
-
interactsh-rs
client library for working with Interact.sh servers
-
bitwark
Empowering secure digital interactions with robust binary token management and dynamic rolling keys
-
yunli
Additional utilities for working with Yunli
-
rustcube
Multi-password, order-dependent, streaming encryption/decryption tool with secure memory handling
-
thash
A terminal program for hashing with many algorithms and many output formats, and recursive hashing support
-
fog-crypto
signing & encryption easier for small, independent blocks of bytes. Primary use-case is the fog-pack crate.
-
hashtree-cli
Hashtree daemon and CLI - content-addressed storage with P2P sync
-
luks
Pure-Rust Library for the Linux Unified Key Setup
-
fn-dsa
signature scheme
-
age-plugin-gpg
Age plugin that uses recipients/identities from gpg-agent, making it possible to use gpg smartcards
-
sunscreen_math
contains GPU implementations that support the Sunscreen compiler
-
rotorix-core
Enigma-inspired transformation pipeline with explicit state and pluggable components
-
nu_plugin_hmac
A HMAC sealing plugin for Nushell
-
crypt4gh
Encryption and decryption implementation of the Crypt4GH encryption format
-
sharrd
A secure seed phrase manager using Shamir's Secret Sharing
-
oma-repo-verify
Handle APT repository verify library
-
strong-box
Strong, ergonomic encryption for non-cryptographers
-
slhdsa-c-rs
FFI bindings for the slhdsa-c SLH-DSA implementation
-
roughenough-keys
Roughenough key material handling with multiple secure storage backends
-
rasn-pkix
Data types for handling Public Key Infrastructure (PKIX) objects
-
fiscal-crypto
Certificate handling and XML signing for Brazilian fiscal documents
-
uesugi-rs
Uesugi cipher implementation using the iroha table
-
libcrux-platform
Platform detection crate for libcrux
-
oniongen-rs
A v3 .onion vanity URL generator written in Rust
-
rustls-channel-resolver
single-cert channel-ish rustls resolver for live-reloading certificate files
-
nginx-src
Source of NGINX
-
enigmar
High-performance Enigma Machine simulator (M3/M4) with Python bindings
-
sentrystr
Core library for publishing Sentry-like events to Nostr network
-
enigma-simulator
An absurdly fast and highly flexible Enigma machine simulation, encryption, and decryption library
-
routex-settlement
routex settlement
-
p2panda-encryption
Decentralised data- and message encryption for groups with post-compromise security and optional forward secrecy
-
nix-base32
nix (as in NixOS) compatible base32 encoding
-
snippet-agent
Codebase parsing tool. It aggregates code (i.e. RAG) as an input to LLMs
-
libreofficekit
in Rust
-
neocities-sync
Sync files to neocities while doing the least amount of API requests
-
ms-offcrypto-writer
Encrypting ECMA376/OOXML files with agile encryption as described in MS-OFFCRYPTO
-
vwh
Cryptographic accountability tool for verifying digital presence
-
rust_ev_system_library
E-Voting system library functionalities for the Verifier
-
easy_password
Easy password hashing (includes bcrypt)
-
rustcrypt
Macro-first encryption and obfuscation library for Rust
-
mozilla-root-ca
Mozilla Root CA list from https://curl.se/ca/cacert.pem
-
bergshamra-crypto
Cryptographic algorithm implementations for Bergshamra XML Security library
-
reqsign-huaweicloud-obs
Huawei Cloud OBS signing implementation for reqsign
-
stackforge-core
Core networking logic for Stackforge
-
hashmoney
hashcash implementation, with wasm support, variable date width and multiple minting strategies
-
elara-crypto
ELARA Protocol - Cryptographic engine with identity binding, multi-ratchet encryption, and post-quantum ready security
-
git-mine
Mine your favorite git commit hashes
-
opentalk-types-signaling-e2ee
Signaling types for the OpenTalk e2ee module
-
affinidi-data-integrity
W3C Data Integrity Implementation
-
lambdaworks-gpu
Modular math library for cryptography - GPU implementation
-
crypto-auditing-log-parser
Event log parser for crypto-auditing project
-
streaming-crypto
Cryptographic library with optional FFI and Python bindings
-
chalamet_pir
Stateful, Single-Server Private Information Retrieval for Key-Value Databases
-
sssui-mpc-rs
shamir-secret-sharing for SUI chain
-
in-toto
Library for in-toto
-
ghostkey
A command-line tool for Freenet Ghost Key operations
-
rommer
A powerful tool designed to customize Android ROM ZIP files without building from source
-
boring-vendit
BoringSSL bindings
-
sigstore-tsa
RFC 3161 Time-Stamp Protocol client for Sigstore
-
pq-jwt
Post-Quantum JWT implementation using ML-DSA (FIPS 204) signatures for quantum-resistant authentication
-
jdt_activity_pub
ActivityPub is a set of structs and enums used to facilitate the operations of ActivityPub servers and clients
-
saferet
Secure types for handling sensitive data in Rust with automatic memory cleanup and protection against accidental exposure
-
trustless-protocol
Protocol utilities for trustless
-
keystore-rs
securely generating, storing, and managing cryptographic keys with support for macOS and Linux keychain integration
-
rasn-ocsp
Data types for Online Certificate Status Protocol
-
scromble
A no-nonsense single-file encryptor with data authentication
-
roc-cert
A Rust-based CLI tool for automatic SSL certificate renewal
-
qos_crypto
Cryptographic primitives for use with QuorumOS
-
polygraphia
A comprehensive library for classical and modern cryptographic algorithms
-
arachnid
aims to be a complete offensive security suite written for Rust
-
crab-cryptor
file cryptor
-
vitaminc-protected
Protected type wrappers for handling sensitive data. Part of the VitaminC cryptographic suite.
-
decryptor_s2
cli for decrpting and encrpting S2 10th Anniversary assets
-
aegis
authenticated ciphers (AEGIS-128, AEGIS-256, AEGIS-128X, AEGIS-256X)
-
pqctracer
A reusable TLS-aware HTTP client that captures post-quantum cryptography handshake metadata
-
threshold-pairing
Pairing threshold cryptography
-
pingap-certificate
Certificate for pingap
-
az-snp-vtpm
vTPM based SEV-SNP attestation for Azure Confidential VMs
-
cypheron-core
Post-quantum cryptography library with NIST-standardized quantum-resistant algorithms
-
ltk_pki
Support code for verifying League Toolkit mod signatures
-
wasmsign2
WebAssembly modules signatures proposal
-
jacs-mcp
MCP server for JACS: data provenance and cryptographic signing of agent state
-
aerovault
Military-grade encrypted vault format — AES-256-GCM-SIV, Argon2id, AES-KW, HMAC-SHA512
-
sgx_pkix
TLS Certificate encoding and decoding helpers for the SGX environment
-
native-pkcs11
Cross-platform PKCS#11 module written in rust. Can be extended with custom credential backends.
-
saku-sync
Sync engine for the saku ecosystem
-
pqxdh-zoa
generic implementation of Signal's PQXDH
-
nu_plugin_secret
Production-grade secret handling plugin for Nushell with secure CustomValue types that prevent accidental exposure of sensitive data
-
trust_pdf
Verifies signed PDFs against the originals, checking for sneaky modifications
-
bergshamra-xml
XML DOM abstraction for Bergshamra XML Security library
-
lets-encrypt-warp
letsencrypt.org with warp
-
voidio
VOID I/O - High-performance Cross-platform I/O for Rust
-
pqcrypto
Post-Quantum cryptographic primitives
-
xdid
DID library
-
scp-media
Real-time media transport types for SCP (Shared Context Protocol)
-
aruna-file
component for encrypting / compressing .aruna files, including specification
-
oximedia-drm
DRM and encryption support for OxiMedia streaming
-
turtls
A TLS library
-
rustic_cdc
performing Content-Defined Chunking (CDC) on data streams
-
lifx-rs
A synchronous + asynchronous library for communicating with the official LIFX-API and the unoffical offline API
-
recs_lib
A confusing library for encrypting files and text
-
crowenv
— Smart secrets. Like a crow. 🐦 AES-256-GCM encrypted .cenv replacement for plain .env files
-
olm-sys
Low level binding for libolm
-
azure_svc_keyvault
generated REST API bindings
-
freezeout-core
Freezeout Poker core types
-
soft-fido2-crypto
Cryptographic utilities for the soft-fido2 FIDO2/WebAuthn authenticator
-
tokio-boring-vendit
SSL streams for Tokio backed by BoringSSL
-
regitry-code
是一个使用 SM2、SM3 国密算法进行加密、解密和生成注册码、任务号、密码的类库
-
hypercore_handshake
Used for establishing an encrypted connection between hypercore peers
-
sct
Certificate transparency SCT verification library
-
mykey
MIKEY (RFC 3830) — Multimedia Internet KEYing for SRTP key exchange
-
blake2-rfc
A pure Rust implementation of BLAKE2 based on RFC 7693
-
bromberg_sl2
Cayley hashing as in 'Navigating in the Cayley Graph of SL₂(𝔽ₚ)'
-
libsm
China's Standards of Encryption Algorithms (SM2/3/4)
-
glome
Generic low-overhead message exchange with cryptographic integrity protection
-
koi-crypto
Key management, TOTP, signing, and encryption primitives for local network trust
-
deno_tls
TLS for Deno
-
commucat-federation
Federation event signing and verification for CommuCat domains
-
compact_argon2
Thin wrapper around the argon2 crate to improve ergonomics and provide a smaller serialization format
-
tokio-nats
Async-await ready NATS library
-
aes-gcm
Pure Rust implementation of the AES-GCM (Galois/Counter Mode) Authenticated Encryption with Associated Data (AEAD) Cipher with optional architecture-specific hardware acceleration
-
oxidite-security
Security utilities for Oxidite (CSRF, XSS protection, encryption)
-
bao1x-api
Baochip-1x API Crate
-
deno_native_certs
deno-native-certs loads native certificate store into rustls
-
self_crypto_key
self-modifying encrypted key storage in binaries
-
rzbackup
RZBackup
-
crypt-keeper
A cli helper for managing, encrypting and decrypting files
-
pqcrypto-sphincsplus
Post-Quantum Signature Scheme sphincsplus
-
signature_bbs_plus
The Ockam BBS+ signature impementation
-
rekrypt
Professional proxy re-encryption library based on Curve25519 for Rust and WebAssembly
-
django-rs-core
Core types, settings, app registry, signals, and error types for django-rs
-
fast-paillier
Optimized Paillier encryption scheme
-
ez-hash
Ergonomic hashing helpers with a simple Hashable API and optional algorithm features
-
yourevalid
Validation type and trait. For internal use in polyproto-related crates, currently
-
ecies_25519
Cross-platform Elliptic Curve Integrated Encryption Scheme (ECIES) using X25519, AES-256-GCM, and HKDF-SHA256
-
goldilocks-crypto
ECgFp5 elliptic curve and Schnorr signatures over the Goldilocks field
-
tropic01
An embedded-hal driver for the TROPIC01 chip by TropicSquare
-
enva-shared
Shared types and utilities for enva
-
shosha256
A sha256 previewer I made just for fun
-
lb-rs
interacting with your lockbook
-
thrussh-libsodium
Straightforward bindings to libsodium
-
card-cli
FIDO(U2F, WebAuthn), YubiKey, OpenPGP command line tool
-
cipher_identifier
identifying classical ciphers based on statistical analysis
-
keyquorum-split
Split a secret into Shamir shares for use with keyquorum
-
proto-blue-crypto
AT Protocol cryptographic operations: P-256, K-256 signing, did:key, SHA-256
-
sad-rsa
Hardened pure Rust RSA implementation with Marvin attack mitigation
-
aios-protocol
Canonical Agent OS protocol — shared types, event taxonomy, and trait interfaces for all projects (Arcan, Lago, Autonomic)
-
lsmtree
Implements a Sparse Merkle tree for a key-value store. The tree implements the same optimisations specified in the libra whitepaper, to reduce the number of hash operations required per tree operation to O(k)…
-
signedshot-validator
Validator for SignedShot media authenticity proofs
-
bbs-accum
accumulator commitment scheme by Jutla et al
-
libqabu
A auditable and versitile Rust cryptography library
-
sorted-iter
Typesafe extensions for sorted iterators, including set and relational operations
-
securepass
A password generator and balancer library in Rust
-
clasp-caps
Capability tokens for CLASP protocol (delegatable Ed25519)
-
runar_node
Runar Node implementation
-
qubip_aurora
A framework to build OpenSSL Providers tailored for the transition to post-quantum cryptography
-
http-sig
IETF draft 'Signing HTTP Messages'
-
keyhive_core
Core Beehive types and functions
-
tls-friend
A friendly library to make dealing with TLS easier
-
rand-esdm
interface to ESDM RNG server
-
cuts-core
core library for cuts
-
saku-crypto
End-to-end encryption for the saku sync system
-
seal-crypto
providing pure cryptographic capability abstractions (traits) and implementations for the seal-kit ecosystem
-
rswxpay
WeChat Pay V3 API SDK for Rust — pure Rust crypto, no OpenSSL
-
marsupial
safe bindings to the xkcp/k12 implementation of the kangarootwelve hash function
-
onepass-base
Basic formatting and word lists for onepass-seed
-
sigma_fun
A framework for making Sigma protocols fun!
-
yara-sys
Native bindings to the libyara library
-
dalek-ff-group
ff/group bindings around curve25519-dalek
-
abcrypt
encrypted data format
-
safehold
A secure cross-platform environment variable manager with CLI and optional GUI for encrypted storage of secrets and config
-
blake2
hash functions
-
sigserlic
Combine serde with signify
-
pwhash
A collection of password hashing routines in pure Rust
-
nam-blst
Bindings for blst BLS12-381 library
-
xcqa
Dictionary-based cryptosystem with zero-knowledge proof signatures
-
acme-lib
requesting certificates from an ACME provider
-
kotoba-cid
Content ID (CID) system for Kotoba graph processing
-
r1cs
building R1CS gadgets
-
lattice-slh-dsa
Pure Rust implementation of SLH-DSA (FIPS 205) / SPHINCS+ post-quantum digital signature scheme
-
cait_sith_keplr
Threshold ECDSA via Triples
-
ristretto_pom
Ristretto Package Object Model
-
irox-cryptids
IROX Cryptographic Primitives - probably very hazardous
-
nostr-double-ratchet
Nostr double ratchet library for Rust
-
emote-psb
E-mote PSB file
-
astrid-prelude
Unified prelude for the Astrid secure agent runtime
-
paseto-core
Core traits and encodings for PASETO/PASERK
-
aqua-registry
Aqua registry backend for mise
-
jacs-cli
JACS CLI: command-line interface for JSON AI Communication Standard
-
rejson
A command line utility for managing secrets
-
ai_hash
hashing helpers supporting sgd sharding
-
crypto2
cryptographic algorithms
-
dee-ssl
TLS certificate inspection CLI for domains
-
nekocat
-
securestore
API for creating or decrypting user secrets
-
tsumiki-pkix-types
PKIX types (AlgorithmIdentifier, Name, etc.) for X.509 certificates
-
deoxysii
Deoxys-II-256-128 MRAE primitives for Rust
-
reishi-quinn
Noise IK handshake integration for quinn with QUIC key derivation
-
zkcg-circuits
Zero-knowledge circuits for the ZKCG protocol
-
sosistab2
An obfuscated datagram transport for horrible networks
-
rustls-mbedtls-provider-utils
code used in mbedtls based provider for rustls
-
super_simple_jwt
A super simple implementation of JWTs in rust!
-
xrc_cli
A cli for multi-threaded encryption/decryption of files/folder using bitwise xor
-
rust-crypto-utils
Memory-safe cryptographic utilities for secure key handling, encryption, and post-quantum readiness
-
cortex-audit
TIBET Cortex Audit: blackbox-met-window audit trails with tibet-vault integration
-
cryptic
encryption/decryption application. You can use this to encrypt and decrypt files using a password
-
sha3-utils
SHA-3 utilities
-
sentc
Encryption and group/user management sdk. Easy-to-use encryption with post quantum cryptography.
-
wots-rs
Winternitz One-time Signature Scheme made using Rust
-
theoros
LinkedIn feed digest — daily scrape, Claude filter, vault note
-
google/ctap2
OpenSK is an open-source implementation for security keys written in Rust that supports both FIDO U2F and FIDO2 standards
-
crypto-permutation
Permutation based cryptography framework; core traits
-
omnibor-cli
CLI for working with OmniBOR Identifiers and Manifests
-
squint
Encode sequential integer ids as random looking strings
-
bls-signatures-evm
BLS signatures in Rust for the EVM
-
canaad-cli
CLI tool for AAD canonicalization per RFC 8785
-
librustysigs
Signatures: A Secure Code Signing System
-
rns-crypto
Cryptographic primitives for the Reticulum Network Stack
-
itsdangerous
Rust port of the popular itsdangerous python library for signing strings and sending them over untrusted channels
-
xs_curve25519-dalek
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
k12sum
A command line implementation of the KangarooTwelve hash function
-
monocypher
Bindings for the monocypher C library
-
tbz-airlock
TIBET Airlock: sandboxed decompression with eBPF kernel enforcement
-
turbomcp-dpop
DPoP (RFC 9449) implementation for TurboMCP with HSM support
-
relay-lib
The Relay library
-
cutil
A complete internal PKI toolkit for Rust
-
ferr
Crypto CEX connector framework
-
pqc_dilithium
A post-quantum cryptographic signature scheme based on the hardness of lattice problems over module lattices
-
ps-cypher
Chacha-based data cypher
-
printwell
HTML to PDF conversion using Chromium's rendering libraries
-
ark-ed-on-bw6-761
A Twisted Edwards curve defined over the scalar field of the BW6-761 curve
-
ssi-bbs
The BBS Signature Scheme implementation for SSI
-
r-license
An industrial-grade offline software licensing system with hardware binding and anti-rollback protection
-
dome-ward
Injection detection, schema integrity, and heuristic analysis for MCPDome
-
foa
An experimental IEEE 802.11 (WLAN) stack for rust on the ESP32
-
paillier-common
paillier over bigint traits provided by rust-bigint
-
gen-key
Small CLI tool for generating RSA and HMAC keys
-
xitca-tls
tls utility for xitca
-
rust-native-obf
advanced native obfuscation library for rust
-
rs_tfhe
A high-performance Rust implementation of TFHE (Torus Fully Homomorphic Encryption) with advanced programmable bootstrapping capabilities
-
gitoid
Git Object Identifiers in Rust
-
mnm
Mnemonic sentences for BitTorrent info-hashes
-
gpg-expire-warner
Prints a warning when GPG keys are about to expire
-
SaltPass
A deterministic password generator based on cryptographic algorithms
-
cose_minicbor
no_std-friendly Rust crate for decoding and verifying COSE (CBOR Object Signing and Encryption) messages with optional cryptographic backends
-
fss-rs
Function secret sharing including distributed comparison & point functions
-
midnight-circuits
Circuit and gadget implementations for Midnight zero-knowledge proofs
-
paas-api
Common API for PAAS server and client
-
cryprot-ot
Oblivious Transfer extension protocols
-
simple-rijndael
Pure Rust, simple implementation of the rijndael-cbc algorithm for osu! score decryption or encryption
-
cdumay_sodium
sodium
-
enject
Hide .env secrets from AI agents. Stores secrets in an encrypted local store and injects them into subprocesses at runtime — your .env file contains only symbolic references, never real values.
-
uts-bmt
Binary Merkle Tree implementation for Universal Timestamps in Rust
-
subduction_crypto
Cryptographic types for Subduction: signed payloads, verification witnesses
-
xaman
CLI tool for Aman integrity system
-
clubcard-crlite
An instantiation of Clubcard for use in CRLite
-
easydes
Encrypt with DES easily in Rust
-
hanzo-pqc
Post-quantum cryptography primitives (ML-KEM, ML-DSA, SLH-DSA) for Hanzo ecosystem
-
const-siphasher
SipHash-2-4, SipHash-1-3 and 128-bit variants in pure Rust
-
isideload-x509-certificate
X.509 certificate parser and utility functionality
-
hbs-lms
Pure Rust implementation of the Leighton Micali Signature scheme with support for key generation, signature generation and verification
-
capiba-identidade
Identidades soberanas desacopladas de autoridades centralizadas (DIDs)
-
prompt-store
Prompt Store is a secure, encrypted CLI and Rust library for managing, deploying, and orchestrating AI prompts using workspaces and Git-based workflows
-
pkcs11-bindings
Rust bindings for the PKCS#11 specification
-
ctf_party
CTF Party is a tool that provides various cryptographic and network utilities for CTF (Capture The Flag) competitions. It is written in Rust and offers a command-line interface for easy usage…
-
dgc
A parser and validator for the EU Digital Green Certificate (dgc) a.k.a. greenpass
-
feistel-permutation-rs
Constant time, constant space permutations with Feistel Network ciphers
-
lafs
Least-Authority File Store utils
-
crypter
A AES-GCM 256 encryption and decryption library
-
ec-gpu-gen
Code generator for field and eliptic curve operations on the GPUs
-
ed25519-dalek-hpke
HPKE encryption/decryption using
ed25519-dalekkeys via automatic X25519 conversion -
sigh
HTTP signature generation and verification for ActivityPub, using OpenSSL
-
openentropy-wasm
WebAssembly entropy collection using browser APIs — timing jitter, crypto.getRandomValues(), and scheduling noise
-
quantumapi
Official Rust SDK for QuantumAPI - European quantum-safe encryption and identity platform
-
acmer-server
ACME TLS certificates proxy server
-
abao
BLAKE3 verified streaming
-
s5_core
types and traits shared by all S5 crates
-
aes-prng
Pseudo-random number generator based on AES
-
boytacean-encoding
Codecs library for Boytacen
-
ytdlp-ejs
ejs
-
shadow-crypt
Secure password-based file encryption with filename obfuscation
-
tor-checkable
Types to ensure that signed or time-bound data is validated before use
-
rpgpie
Experimental high level API for rPGP
-
app-utils
modules for application logic (YAML, audit, timestamps)
-
tameshi
(試し) - Deterministic integrity attestation library for infrastructure layers
-
avila-primitives
Big integer primitives (U256, U512, U1024, U2048, U4096) - Built on avila-nucleus
-
sha2raw
SHA-2 hash function
-
aft-crypto
Cryptography library for aft
-
jwt-encde
GUI JWT encoder / decoder - Local, private, easy
-
midnight-base-crypto
foundational cryptographic primitives for Midnight's ledger
-
mdf
MDFive, simple md5 tool
-
keysmith
Create keys, uuid's, timestamps, and more
-
yedad_ladder
Core library for Yedad ladder hash algorithm - digital signature based on double SHA-256 for decentralized networks
-
wa-rs-noise
Noise Protocol implementation for WhatsApp with AES-256-GCM
-
abrute
AESCrypt Brute force attempter
-
winternitz-ots
Interacting With Winternitz One-Time Signatures, a Hash-Based, Post-Quantum Digital Signature Scheme Based On Lamport Signatures. This implementation uses the hash function Blake2b for all hashing…
-
shaha
Hash database builder and reverse lookup tool
-
balanced-tree-index
constant-time manipulation of a complete binary tree with a flat in-memory representation
-
rfc2289-otp
One Time Passwords (OTP) per IETF RFC 2289
-
moose
Encrypted learning and data processing framework
-
edgee-proxy
Edgee proxy
-
false-bottom
A deniable encryption scheme
-
omit
Omit allows you to securely share environment variables and secrets using a single key
-
hotboot
Secure private data with a weak secret, using as a protection access control of the system and defense especially designed against cold-boot attacks
-
isideload
Sideload iOS/iPadOS applications
-
keyper
TUI password manager
-
kylix-pqc
Post-quantum cryptography library implementing NIST FIPS standards
-
racme
Rust 庫，提供與 ACME 協議互動的功能，支援自動化憑證管理，適用於 Let's Encrypt 等 CA。
-
uniaz
Unify the Unicode chars into A-Z sequence
-
http-signature-normalization-actix-extractor
An HTTP Signatures library that leaves the signing to you
-
sntrup761
Streamline NTRU Prime algorithm
-
sc_drbg
Subset Counter-Based Deterministic Random Bit Generator
-
monerochan-recursion-gnark-ffi
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
weapay
SDK for Alipay and WeChat Pay based on v3
-
libkrimes
A pure rust, minimal kerberos library
-
dec-cryptor
A high-performance file encryption tool using AES-256-CTR and Argon2id
-
equix
Asymmetric function for client puzzle protocols
-
classical-ciphers
Classical cipher implementations: Caesar, Vigenère, Atbash, XOR
-
isideload-apple-codesign
Pure Rust interface to code signing on Apple platforms
-
ifd-jcecard
PC/SC IFD Handler for jcecard virtual OpenPGP and PIV smart card
-
rust_code_obfuscator
easily obfuscate strings and control-flow using cryptify lib
-
df1t-cyph
minimal rust encryption algorithm made by a solid structured sequential algorithms without any external cryptographic crates
-
hunt-query
Structured querying and timeline reconstruction for clawdstrike hunt
-
comprehensive_tls
A harness for creating consistently-shaped servers will less boilerplate
-
dexios
Secure, fast and authenticated command-line encryption of files with modern algorithms and an audited encryption backend
-
atlas-token-confidential-transfer-proof-extraction
Atlas Program Library Confidential Transfer Proof Extraction
-
external-command-rs
External tool in Rust
-
cretrit
Flexible Order-Revealing Encryption library
-
rust-rsa-tool
sophisticated encryption utility employing a hybrid cryptographic system. It integrates RSA and AES algorithms, supports both CBC and ECB operational modes, and utilizes Base64-encoded…
-
dcrypt-sign
Digital Signature Schemes for the dcrypt library
-
sha256-rs
SHA256 hash made using Rust
-
spacetimedb-jsonwebtoken
Create and decode JWTs in a strongly typed way
-
cooltest
Randomness testing tool
-
prefixed-api-key
module for generating a Prefixed API Key
-
sustenet-shared
Sustenet shared library that contains the common code used by all modules
-
ncmdump
Some copyright protection file dump
-
am-core
Core library for agent-to-agent encrypted messaging over Nostr
-
void-crypto
Cryptographic primitives for void — KeyVault, AES-256-GCM, HKDF, envelope encryption
-
anothertls
TLS implementation, but written from scratch (including the crypto) in pure Rust - of course
-
ntied
stable messenger
-
hawk
Hawk Implementation for Rust
-
kzen-paillier
Efficient pure-Rust library for the Paillier partially homomorphic encryption scheme
-
libcrux-p256
Formally verified P-256 implementation
-
clog_rs
A cryptographically secure content storing library. Provides simple APIs to create, read, and edit files without compromising security.
-
libsignal-dezire
signal protocol
-
bandersnatch-ffi
C FFI bindings for Bandersnatch VRF - ring signatures and ticket ID computation
-
decds
A CLI for Distributed Erasure-Coded Data Storage System
-
ledger-core
Core data model, hashing, and signature verification primitives for immutable trace records
-
symbi-runtime
Agent Runtime System for the Symbi platform
-
tor-metrics-datamodel
Shared data model with entities and migrations
-
tpm2-crypto
TPM 2.0 cryptographic routines
-
webbuf_aescbc
WebBuf AES-CBC library
-
http-signature-directory
Validate if your JWKS directories meet web-bot-auth standards
-
truelayer-signing
Produce & verify TrueLayer API requests signatures
-
frost-secp256k1-tr
A Schnorr signature scheme over the secp256k1 curve that supports FROST and Taproot
-
spwn
A language for Geometry Dash triggers
-
nam-ec-gpu-gen
Code generator for field and elliptic curve operations on the GPUs
-
async-openssl
SSL streams for async IO backed by OpenSSL
-
turnstile
One-way encryption
-
rssh-types
Shared protocol and domain types for rssh-agent
-
sigmate
A modern, developer-focused CLI for cryptographic file signing and verification
-
nuts-memory
A backend implementation for nuts
-
scramblr
Obfuscation for Ordinary
-
rustfs-crypto
Cryptography and security features for RustFS, providing encryption, hashing, and secure authentication mechanisms
-
anubis-rage
Post-quantum secure file encryption tool with hybrid X25519+ML-KEM-1024. Defense-in-depth security.
-
nettext
A text-based data format for cryptographic network protocols
-
fractus
Cryptographic attack library for Rust and Python
-
abhedya-ffi
C/FFI Bindings for Abhedya PQC
-
pkloong-kcapi
High-level Rust wrapper for Linux Kernel Crypto API
-
fastn-id52
fastn ID52 identity and cryptographic key management
-
dudect-bencher
DudeCT constant-time function tester
-
trojan-cert
Certificate generation utilities for trojan-rs
-
cx448
A pure-Rust implementation of Ed448 and Curve448 and Decaf. This crate also includes signing and verifying of Ed448 signatures, and x448
-
viadkim
DomainKeys Identified Mail (DKIM) specification
-
nil-crypto
Multiplayer strategy game
-
ntrulp
Pure implementation of high-security prime-degree large-Galois-group inert-modulus ideal-lattice-based cryptography
-
fitgirl-decrypt
decrypt torrents from fitgirl-repacks
-
wasefire-stub
Stubs for the Wasefire applet API
-
tlock
Rust encryption library for practical time-lock encryption
-
enseal
Secure, ephemeral secret sharing for developers
-
commucat-media-types
Shared media codec descriptors for CommuCat
-
dleq
single and cross-curve Discrete Log Equality proofs
-
openentropy-server
HTTP entropy server with an ANU-style random endpoint
-
jpki
Read certificates, sign and verify documents using your JPKI card
-
vrf-mod
An extensible rust library for building VRF functionality with support for Elliptical Curve VRFs (secp256k1, secp256r1 curves)
-
backblaze-b2-client
Backblaze B2 Client for Rust
-
brass-aphid-wire-decryption
do runtime decryption of TLS conversations, and helpers for popular TLS libraries
-
bevy_assets_bundler
Assets Bundler for bevy, with content encryption support
-
hsh
Quantum-Resistant Cryptographic Hash Library for Password Encryption and Verification in Rust
-
sqisign-rs
Core types and traits for SQIsign post-quantum signature scheme
-
torrosion
A Tor library for Rust
-
thieves-cant
Solitaire Cipher designed by Bruce Schneier
-
pinenut-log
An extremely high performance logging system for clients (iOS, Android, Desktop), written in Rust
-
auths
Decentralized identity for developers — cryptographic commit signing with Git-native storage
-
ferrocrypt
Core Ferrocrypt library: symmetric (XChaCha20-Poly1305 + Argon2id) and hybrid (RSA-4096) encryption utilities
-
const-sha1
A sha1 implementation for use in const contexts
-
pwgen-x
A feature-rich password generator with pronounceable, secure, passphrase, and PIN modes
-
base_custom
Use any characters as your own numeric base and convert to and from decimal
-
ufile-rus3
UFile Rust SDK
-
macarunes
macaroons
-
fsextra
collection of extensions to simplify working with Unix-based filesystems. With support for cryptographic operations (encryption, hashing)
-
ascon-hash
Ascon-Hash256 and Ascon-XOF128
-
kryptos
various older, insecure, cryptographic ciphers
-
test-cert-gen
generate certificates for tests (e. g. for TLS)
-
atomic-id
Very fast and unique id generation
-
botan-src
Sources of Botan cryptography library
-
native-pkcs11-keychain
native-pkcs11 backend for macos keychain
-
tink-daead
Deterministic AEAD functionality for Rust port of Google's Tink cryptography library
-
neuedu-cryptos
包含国密算法的密码库。 A library include SM3, SM4 (Chinese ShangMi) crypto algos
-
frost-dkg
Frost Distributed Key Generation protocol
-
rage
[BETA] A simple, secure, and modern encryption tool
-
bls24-curves
A pure Rust framework for pairing-based cryptography using BLS24 curves
-
crypto-seal
A small utility designed to securely "package" or seal serde-compatible data type that can passed around in an uncompromised manner
-
gxt-extism-types
Minimal, encrypted, signed and copy-pasteable tokens for manual data exchange between games
-
rustpad
Multi-threaded Padding Oracle attacks against any service
-
sfio-rustls-config
Configuration routines for Rustls used in libraries from Step Function I/O
-
gatewarden
Hardened Keygen.sh license validation infrastructure
-
black-bagg
Secure password manager with RAM-only execution, fixed contact display, and post-quantum cryptography
-
why2-chat
Lightweight, fast and secure chat application powered by WHY2 encryption
-
variant-ssl
Bindings for OpenSSL variants such as BoringSSL / AWS-LC / Tongsuo
-
quantum-sign
post-quantum signatures, format, policy, and CLI in one crate
-
nekohash
A multifaceted hashing library for Rust
-
azalea-crypto
Cryptography features used in Minecraft
-
poseidon-rs
Poseidon hash implementation
-
syft-crypto-cli
Command-line interface for SyftBox cryptographic operations
-
rsrp-pqcrypto
Hybrid post-quantum cryptographic primitives for deterministic proof systems
-
waterscape
Private communication layer for AI agents
-
scicrypt
Lightweight cryptographic building blocks for proof of concept implementations in multi-party computation
-
message_verifier
Rust Message Verifier library compatible with Rails' MessageVerifier and MessageEncryptor
-
gpg-error
Libgpg-error bindings for Rust
-
si-crypto-hashes
reusable functionality for working with typical cryptographic hashes
-
redoubt-hkdf
HKDF-SHA512 implementation with secure memory handling
-
hanzo-identity
Crypto Identities for Hanzo AI platform
-
tectonic-fn-dsa-sign
FN-DSA signature scheme
-
simplepir
A fast and efficient implementation of SimplePIR in Rust
-
str_crypter
A macro library for XOR encryption and decryption of strings at compile time, meaning no cleartext strings will be in your release binary (when using the macro). The encrypted strings will be decoded at runtime.
-
crown
A cryptographic library
-
cross-authenticode
Cross-platform implementation of Authenticode signature verification
-
git-simple-encrypt
Encrypt/decrypt files in git repo using one password
-
attestation-doc-validation
attesting enclaves according to the Evervault Attestation scheme. This crate is used to generate ffi bindings.
-
oximedia-cloud
Cloud storage and media services integration for AWS, Azure, and GCP
-
bergshamra-transforms
Transform pipeline for Bergshamra XML Security library
-
cryptos
All cryptographic in one, make crypto easy
-
brass-aphid-wire-messages
structs and constants for TLS message and IANA constants
-
oboron-cli
CLI tool for Oboron - general purpose encryption and encoding library
-
smcrypto
China's Standards of Encryption Algorithms(SM2/SM3/SM4)
-
ysc1
YSC1 (Yeun's Stream Cipher 1) based on the Amaryllis-1024 specification
-
oss-sdk-rs
Aliyun OSS SDK
-
rs_sha512
rs_sha512is a Rust implementation of the SHA-512 cryptographic hash algorithm, part of the largerrs_shieldproject. This package provides SHA-512 hashing functionality in a standalone manner… -
zymic_core
Core library providing the primitives and streaming APIs for the Zymic authenticated encryption format
-
aingle_zome_types
AIngle zome types
-
rust-bottle
Bottle protocol - layered message containers with encryption and signatures
-
pqc_bridge
A lightweight Rust library for post-quantum cryptography providing secure key management, encryption, and digital signatures using NIST-standardized algorithms
-
stfx-crypto
Core cryptographic primitives for the Sovereign Trust Framework (STFx)
-
str0m-aws-lc-rs
aws-lc-rs backend for str0m WebRTC
-
secret-vault-value
secure and serializable type to store and control secret/sensitive values
-
decaf377-rdsa
randomizable signature scheme using the decaf377 group
-
sam_encrypt
that provides a set of cryptographic primitives for building a proxy self re-encryption scheme
-
flamethrower
Deterministic cognition ledger using power_house (and optional pent_house)
-
dcf
Distributed comparison function implementation
-
vanity-age-keygen
Generate vanity Age keys
-
rsfn-file
Utilitário para arquivos que trafegam na RSFN (Rede do Sistema Financeiro Nacional)
-
health-backend
Daily wellness check‑in that handles PHI securely
-
shamir_share
A secure and efficient Rust library for Shamir's Secret Sharing
-
pkce-std
Handling Proof Key for Code Exchange
-
spatial-hasher
deterministic encryption and decryption using 3D spatial parameters with secure authenticated encryption
-
swift-secure-enclave-tool-rs
Swift secure enclave tool in Rust
-
pent_house
Pent-House resonance ledger engine built atop power_house cognition primitives
-
saorsa-mls
Experimental Message Layer Security (MLS)-inspired library for P2P secure group communication
-
test-curve25519-dalek
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
ovunto-security
secure end-to-end communication between clients through a server
-
chord-parser
parsing chord signatures
-
cifra
Console command to crypt and decrypt texts using classic methods
-
rpgmad-lib
decrypting/encrypting RPG Maker
rgssarchives -
hbsx
file encryption tool with compression support
-
ejson
Manage encrypted secrets using public key encryption
-
cocoonfs-cli
Cocoon TPM project - CLI utility for accessing CocoonFs images
-
aescrypt-rs
AES Crypt (v0-v3) Rust encryption/decryption library
-
signal-backup-decode
decode signal backups
-
ecdh-omr
ECDH based Oblivious Message Retrieval
-
icmptunnel-rs
Tunnel ip packets through icmp pings
-
envcrypt
Encrypt environment variables at compile-time and decrypt them at runtime
-
pake-kem
password-authenticated key exchange (PAKE) based from a key encapsulation mechanism (KEM)
-
conhash-ring
A consistent hashing ring implementation in Rust
-
secure-string
A data type suitable for storing sensitive information such as passwords and private keys in memory, featuring constant time equality, mlock and zeroing out
-
nstack
Arity 4 stack for the kelvin merkle toolkit
-
arcanum-zkp
Zero-knowledge proofs: Bulletproofs, Schnorr proofs, commitments
-
debian-packaging
Debian packaging primitives
-
vade-didcomm
DIDComm communication helper for vade
-
pem-rfc7468
PEM Encoding (RFC 7468) for PKIX, PKCS, and CMS Structures, implementing a strict subset of the original Privacy-Enhanced Mail encoding intended specifically for use with cryptographic keys…
-
motorcortex-rust
Motorcortex Rust: A library for Rust client applications to control Motorcortex Core
-
void-core
VCS engine for void — pipelines, workspace, diff, merge, transport, collaboration
-
encrypto_rsa
stunning-encrypto is cross platform end-to-end encryption dependency
-
ice
CTF tool store
-
coz-cli
CLI for Coz cryptographic JSON messaging
-
janus_messages
Distributed Aggregation Protocol message definitions used in Janus, the server powering ISRG's Divvi Up
-
avx-nucleus
Atomic-level operations - Foundation of avx cryptography stack
-
acme-client
Easy to use ACME client library to issue, renew and revoke TLS certificates
-
bitchat-tui
A terminal user interface (TUI) chat application using Bluetooth and modern cryptography
-
star-constellation
Nested threshold aggregation built on the STAR protocol
-
sigstore-crypto
Cryptographic primitives for Sigstore
-
redact-client
Receives request for private data and decrypts it to display securely in browser
-
lox-extensions
A reputation-based bridge distribution system that provides privacy protection to users and their social graph while remaining open to all users
-
wa-rs-libsignal
Signal Protocol implementation for the WhatsApp platform
-
sequoia-octopus-librnp
Reimplementation of RNP's interface using Sequoia for use with Thunderbird
-
kyberauth
Enable AES keys transfer on unsecure channel using quantum-resistant Kyber
-
qp-plonky2-field
Finite field arithmetic
-
web-push-native
Generic Event Delivery Using Http Push (web-push) components implemented according to RFC8030
-
sf-cli
Secure file encryption CLI/TUI tool with password protection
-
flowerpassword
Flower Password implementation for Rust - Deterministic password generator using HMAC-MD5
-
libsrtp
a pure rust implementation of SRTP
-
libthemis-sys
FFI binding to libthemis
-
moss-sdk
Cryptographic signing for AI agents using ML-DSA-44 (post-quantum)
-
ntrust-native
Pure rust implementation of the PQC scheme Saber
-
minimal-ed448
Unaudited, inefficient implementation of Ed448 in Rust
-
kookie
A secure, local-first, encrypted secret manager for developers
-
astra-num
A wrapper lib around num_bigint, num_integer, and num_traits with extra utilities for handling incredibly large (astronomical) values
-
vusi
ECDSA signature vulnerability analysis library and CLI
-
aesp
optional CLI for AES in parallel. Personal project -- use at your own risk.
-
starweft-crypto
Cryptographic primitives and key management for starweft
-
adiantum
cipher, a fast encryption scheme optimized for mobile and embedded devices, designed by Google
-
iori-ssa
Decrypt MPEG-TS encrypted using SAMPLE-AES
-
rosenpass
Build post-quantum-secure VPNs with WireGuard!
-
did-key
did:key method
-
dcrypt-kem
Key Encapsulation Mechanisms for the dcrypt library
-
sequoia-cert-store
A certificate database interface
-
authy-cli
CLI secrets store & dispatch for AI agents — encrypted vault, scoped policies, run-only tokens, and audit logging
-
zks
Zero Knowledge Swarm - Post-quantum secure networking SDK with built-in anonymity
-
jwk_kit
JSON Web Keys (JWK)
-
apksig
Decoding the APK Signing Block
-
memokey
CLI for memobuild key generation, signing, and verification
-
sm4-ff1
SM4 FF1 implementation
-
surrealdb-jsonwebtoken
Temporary
jsonwebtokenfork with Wasm support -
ipcrypt-rs
IP address encryption and obfuscation methods in pure Rust
-
object-rainbow-encrypted
encryption for object-rainbow
-
ciphercore-base
The base package of CipherCore: computation graphs API, Secure MPC Compiler, utilities for graph evaluation and inspection
-
guts-types
Common types used throughout Guts - a decentralized GitHub alternative
-
subtle-ng
Pure-Rust traits and utilities for constant-time cryptographic implementations
-
nethsm
A high-level library to interact with the API of a Nitrokey NetHSM
-
quantumcryptlib
Post-quantum secure communication primitives using Kyber KEM and AEAD
-
syncstate
A global synchronization library built for synchronizing states reliably, incrementally and fast
-
hashsum
CLI to print or verify cryptographic checksums (md5, sha1, sha2, belt-hash)
-
sha3
Pure Rust implementation of SHA-3, a family of Keccak-based hash functions including the SHAKE family of eXtendable-Output Functions (XOFs), as well as the accelerated variant TurboSHAKE
-
ultra
Cryptanalysis of the Engima
-
chewie-crypto-gcp
Cryptographic primitives and secret management for Rust applications
-
rust-cryptoauthlib
Rust wrappers for CryptoAuthentication Library bindings
-
chromium-crypto
Chromium crypt
-
double-ratchet-2
Double Ratchet as specified by Signal
-
novovault
An encrypted store for notes
-
mogh_encryption
encrypt and decrypt data
-
rzfile
handle RZ game data parsing and name decoding
-
parmesan
Parallel ARithMEticS over ENcrypted data
-
s3etag
Calculate S3 ETag for multipart uploads
-
blackrock2
port of the Blackrock2 cipher
-
foctet
Top-level crate for Foctet APIs
-
ps-hkey
defines the hashkey format and provides methods for resolving them
-
mc-oblivious-map
Oblivious Hash Map data structures on top of Oblivious RAM
-
aelf-keystore
JS-compatible keystore support for AElf Rust SDK
-
kosalt
This package allows for quick encoding and decoding text
-
tdx_workload_attestation
generating attestations about virtual machine (VM) workloads using Intel Trust Domain Extensions (Intel TDX)
-
graph-core
Common types and traits for the graph-rs-sdk crate
-
tagotip-secure
TagoTiP/S crypto envelope — AEAD encryption for TagoTiP frames
-
greenpass
parse EU Digital Green Certificates for COVID-19
-
libsm_stzhang
China's Standards of Encryption Algorithms (SM2/3/4)
-
datex-crypto-native
Native implementation of the DATEX Crypto facade
-
defendor
A secure file encryption tool with AES-GCM and Argon2 for password hashing
-
wring-twistree
Whole-message cipher and tree hash
-
basic-jwt
Basic JWT signing and verification library
-
tholos-pq
Pure post-quantum multi-recipient encryption: Kyber-1024 + Dilithium-3 + XChaCha20-Poly1305 with a stable, versioned wire format
-
safeguard
Secure file and credential management CLI with collections and tags
-
aws-mpl-legacy
aws-mpl-rs is a low level library for implementing client side encryption
-
ssh-packet
implementing SSH packet reading/writing using
binrw -
enprot
command line tool for Engyon
-
upki
Platform-independent browser-grade certificate infrastructure
-
tink-hybrid
Hybrid encryption functionality for Rust port of Google's Tink cryptography library
-
rustfs-utils
functions and data structures for RustFS, providing essential features like hashing, compression, and network utilities
-
pakery-crypto
Concrete cryptographic implementations for PAKE protocols
-
vme-pkix
TLS Certificate encoding and decoding helpers for the Fortanix VME environment
-
signcryption
implementing the Toorani-Beheshti signcryption scheme instantiated over Ristretto255 or Ed25519
-
hush-spine
Aegis Spine protocol for ClawdStrike — envelope signing, checkpoints, trust bundles, and NATS transport
-
enigma-cli
A command-line interface for an Enigma machine simulator. Configurable with any reflector, number of rotors, and plugboard pairs.
-
rialo-s-secp256r1-program
Precompile implementation for the secp256r1 elliptic curve
-
fng_api_wrapper
Crypto Fear and Greed API wrapper
-
king
short cut functions
-
parco-ws-security
Parco Web Services Security
-
filecoin-f3-certs
Data structures and utilities for handling F3 finality certificates
-
tiny_ed448_goldilocks
A lean, high performance, pure rust implementation of Ed448-Goldilocks for easy signatures and key exchange
-
ironoxide
A pure-Rust SDK for accessing IronCore's privacy platform
-
oram
Oblivious RAM
-
encrypted_images
Encrypt Text to Images and decrypt text from images
-
parrotssugar
Software only implementations with no additional dependencies
-
pk11-uri-parser
A zero-copy library to parse and (optionally) validate PKCS#11 URIs in accordance to RFC7512 specifications
-
aeonflux
Composable, lightweight, fast attribute-based anonymous credentials with infinite (aeon) rerandomised (flux) presentations using algebraic message authentication codes (aMACs), symmetric verifiable encryption…
-
serde-encrypt
Encrypts all the Serialize
-
sl-shamir
Shamir Secret Sharing
-
bacon-cipher
Bacon's cipher
-
xts-mode
XTS block mode implementation in rust
-
ritualistic
nostr library
-
enchantress
AES-256 file encryption tool
-
yadacha
symmetric cipher that combines chacha20 and very large private keys
-
stfx
Sovereign Trust Framework: top-level crate wrapping stfx-crypto for initial release
-
cralgebra
A fast crypto algebra library
-
kassandra-client
Interact with an FMD service
-
hop-relay
Hop-Corr relay (batch apply + optional HTTP endpoint)
-
mlspp-sys
Messaging Layer Security system bindings crate in Rust
-
light-indexed-array
indexed (and concurrent) Merkle tree in Rust
-
trelent-hyok
implementing Hold Your Own Key (HYOK) encryption patterns with support for multiple cloud providers
-
ironseal
Lightweight identity-free attestation protocol
-
cryptoki-sys
FFI wrapper around the PKCS #11 API
-
quantacore-sdk
Rust bindings for the QUAC 100 Post-Quantum Cryptographic Accelerator
-
rustssh2
A client and server SSH library
-
tonelli-rs
Tonelli-Shanks algorithm for computing square roots modulo a prime
-
sare-lib
Hybrid post-quantum encryption library providing SARE standard primitives and APIs
-
authenticator-ctap2-2021
interacting with CTAP1/2 security keys for Web Authentication. Used by Firefox.
-
rustpq
Pure Rust post-quantum cryptography suite - ML-KEM, ML-DSA, and more
-
apple-security-framework
Apple
Security.frameworkbindings for macOS and iOS -
bp-pp
Bulletproofs++ - range-proof protocol in discret loggarithm setting
-
rsign2
A command-line tool to sign files and verify signatures
-
shippo_core
Core models and planning logic for Shippo
-
mls-rs-crypto-traits
Crypto traits required to create a CryptoProvider for mls-rs
-
tokio-rustls-acme2
TLS certificate management and serving using rustls (for use with Tokio)
-
cryptograph
All you need for encrypthing your messages
-
coz-rs
Coz cryptographic JSON messaging specification
-
rust_ev_verifier_lib
Main library for the E-Voting system of Swiss Post
-
ssb-multiformats
Key, feed id, and message hash types used by Secure Scuttlebutt
-
deno_crypto_provider
Cryptography provider for Deno
-
halite-sys
Unsafe Rust bindings for libsodium stable
-
kcipher2
KCipher-2 stream cipher
-
xkcp-rs
Safe wrappers to the XKCP library
-
anypki
fully customizable PKI tool that allows your project to have a customized CA trust chain, blacklist/whitelist filtering root CAs by Country Code, Serial Number, SHA-1/SHA-256 fingerprint, or Issuer Name
-
spqr-syft
Vendored spqr crate for syft
-
tafrah-falcon
Falcon (FIPS 206) scaffolding for the Tafrah PQC library
-
seedpass
A secure password generation tool based on a single master key using Argon2 and BIP-39
-
ssh-key
Pure Rust implementation of SSH key file format decoders/encoders as described in RFC4251/RFC4253 and OpenSSH key formats, as well as "sshsig" signatures and certificates (including…
-
ps-datalake
Encrypted flat storage
-
steganographyrs
Steganography
-
nova-scotia
Middleware to compile Circom circuits to Nova zkSNARK scheme
-
reed-solomon
BCH encoder and decoder with support of no_std environment
-
rift-core
Core types, identity, cryptography, and invites for the Rift P2P protocol
-
pdf2john
Extract a hash from an encrypted PDF for cracking with John the Ripper or Hashcat
-
wascap
wasmCloud Capabilities. Library for extracting, embedding, and validating claims
-
wormsign
Dilithium5 signature tool
-
lightspeed_hash
Hash functions
-
hpke-rs
HPKE Implementation
-
syft-crypto-protocol
Post-quantum cryptographic protocol implementation for SyftBox using Signal's PQXDH
-
gen_pass
Secure password generation library and CLI
-
mldsa-native-rs
FFI bindings and optional wrapper for the mldsa-native ML-DSA implementation
-
gm-rs
China's Standards of Encryption Algorithms(SM2/SM3/SM4)
-
keyutils
Rust interface to the Linux keyring
-
li2utils
signer/verifier for FIPS 204 / CRYSTALS-Dilithium post quantum cryptography (PQC). Not verified / audited (WIP)!
-
libcrux-aesgcm
Libcrux AES-GCM implementation
-
enocoro128v2
Safe, embedded-friendly Enocoro-128 (Version 2) stream cipher. Verified using Hitachi's official test vectors.
-
benaloh-challenge
Implements the Benaloh Challenge (also known as an Interactive Device Challenge), a crytographic technique to ensure the honesty of an untrusted device
-
ecsimple
Elliptic Curve Cryptography
-
test-dalek-docs
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
libsodium-sys-stable
Maintained FFI bindings for libsodium stable
-
azure_mgmt_maps
generated REST API bindings
-
uhash-types
Shared proof/challenge/difficulty types for UniversalHash stacks
-
openadp-ocrypt
Rust SDK for OpenADP - Distributed secret sharing and advanced data protection
-
asport-quinn-hyphae
Noise protocol framework handshakes for the Quinn QUIC library
-
gimli-hash
The Gimli-permutation based Hash
-
dcrypt-params
Constant values for dcrypt library
-
libcrux-secrets
Libcrux utilities for working with secrets
-
cipha-cli
CLI for classical ciphers
-
witnet-bls-signatures
Open source implementation of Bonneh-Lynn-Shacham (BLS) signatures written in Rust
-
klave-connector
Module allowing easy connection to deployed Klave apps
-
kuska-sodiumoxide
Fast cryptographic library for Rust (bindings to libsodium), with conversion from ed25519 to curve25519
-
ocsp
encoding/decoding lib for Rust
-
pkgar
Redox Package Archive
-
vector_sdk
Rust SDK for building Vector bots
-
enigma-identity
Enigma Identity: local identity + X3DH bundle + shared secret derivation
-
oilelpqt
Post-quantum socks5 proxy that uses Kyber1024 and triple AES
-
akd_client
Client verification companion for the auditable key directory with limited dependencies
-
asport-hyphae-handshake
Noise protocol framework handshakes for QUIC
-
frost-secp256k1-evm
A Schnorr signature scheme over the secp256k1 curve that supports FROST and EVM
-
ksi-double-ratchet
Double Ratchet key management for exchanging encrypted messages between two parties
-
aes-gcm-stream
AES GCM stream encrypt and decrypt library, supports AES128/192/256 bit keys
-
mbedtls-platform-support-smx
support library for the
mbedtlscrate, providing platform and target specific implementations of all necessary functions. By separating this logic into a separate crate, multiple… -
gni
create a GPU Node ID
-
aranya-internal-rustls
Fork of rustls with PSK support for internal usage
-
sponge-hash-aes256
A sponge-based secure hash function that uses AES-256 as its internal PRF
-
fluent-hash
A lightweight library which provides a fluent interface for generating SHA-1 and SHA-2 digests
-
gimli-permutation
Gimli: a cross-platform permutation
-
mushi
Point-to-point QUIC networking with application-defined mutual authentication
-
saorsa-seal
Threshold sealing for group data in the Saorsa network
-
rust-kbkdf
SP800-108 Key Based Key Derivation Using Pseudorandom Functions
-
keycrypt
AES-256-GCM encryption helpers backed by the OS keychain (auto-init key on encrypt, strict decrypt, Zeroize in-memory keys)
-
reqtls
A tls lib
-
srv-session
Server-side session management core with Argon2 and KV abstraction
-
lox-zkp
A toolkit for auto-generated implementations of Schnorr proofs
-
taceo-groth16
Groth16 zkSNARK proof system
-
rust-keylock-ui
A password manager with goals to be Secure, Simple to use, Portable and Extensible
-
crypto-auditing
Client library for crypto-auditing project
-
mdbook-pagecrypt
Encrypt your mdbook-built site with password protection
-
ratchet-x2
Pure Rust Double Ratchet protocol implementation
-
fast_chacha
CPU-optimized ChaCha20 implementation with rust fallbacks
-
strx
A powerful string manipulation tool with JWT, hash, encoding, and crypto support
-
signify
Command-line implementation of the signify signature scheme
-
aucpace-conflux
AuCPace protocol implementation
-
arcanum-hash
Hash functions and key derivation for the Arcanum cryptographic engine
-
keetanetwork-crypto
Cryptographic primitives and operations for Keetanetwork
-
argon2rs
The pure Rust password hashing library that runs on Argon2
-
abe_gpsw
ABE GPSW scheme for BLS pairing implemented in rust
-
northroot-proof-engine
Core proof computation and validation library for PoSH (Proof of Shape) and PoX (Proof of Execution)
-
skg-crypto
Cryptographic provider traits for skelegent
-
otplus-core
Core cryptographic library for OTPlus - A secure one-time password and key derivation system
-
ffsend-api
A fully featured Firefox Send API client
-
dataparser_core
A flexible and efficient binary parsing and serialization library for Rust
-
kcapi
Official high-level rust bindings for libkcapi
-
jrn
a journal app
-
ndr
CLI for encrypted Nostr messaging using double ratchet
-
rw-aes-gcm
std::io::{Read, Write} encrypted with AES-GCM
-
informalsystems-malachitebft-signing-ed25519
Ed25519 signing scheme for the Malachite BFT consensus engine
-
rusty_secrets
threshold Shamir's secret sharing in the Rust programming language
-
ockam_transport_uds
Unix Domain Socket (UDS) Transport for the Ockam Routing Protocol
-
snowstorm
A minimalistic encryption protocol based on Noise protocol (snow)
-
xdid-method-key
xdid implementation of did:key
-
clasp-crypto
E2E encryption add-on for CLASP protocol - AES-256-GCM, ECDH P-256, ECDSA, TOFU
-
fpass
CLI Password Manager
-
tls-api-openssl
TLS API implementation over openssl crate
-
shared-aes-enc
A shared AES encryption library providing secure encryption and decryption functionality
-
unknown_order
working with finite fields where the modulus is of unknown order, typtical for RSA, Paillier, Hyperelliptic curves, etc
-
cocoon-tpm-tpm2-interface
Cocoon TPM project - autogenerated TPM2 interface definitions
-
openpgp-card-rpgp
Companion crate for using openpgp-card with rPGP
-
crypt3_rs
Unix crypt(3) reimplemented in pure rust
-
sequoia-git
managing and enforcing a commit signing policy
-
module-lwe
Implements the module learning-with-errors public key encrpytion scheme
-
blastkids
Derive BLS12-381 child keys using Blastkids
-
arcanum-agile
Cryptographic agility framework for the Arcanum cryptographic engine
-
soft-aes
A Rust-based software library for AES
-
bh-jws-utils
TBTL's library for handling JSON Web Signatures (JWS)
-
rpm-sequoia
RPM PGP interface using Sequoia
-
hkd32
HMAC-based Hierarchical Key Derivation: deterministically derive a hierarchy of symmetric keys from initial keying material through repeated applications of the Hash-based Message Authentication Code…
-
ppaass-codec
The codec part for ppaass application
-
xwt-cert-fingerprint
Certificate fingerprint computation algorithms related to WebTransport. Not directly required to use xwt, but can be helpful. Also usable without xwt. Intended to work with both wasm and native.
-
kcr_jetstream_nats_io
Kubernetes Custom Resource Bindings
-
relay-core
The core components of the Relay Protocol
-
aranya-client
Client library for using Aranya
-
sigsum
using Sigsum transparency logs
-
sigstore-bundle
Bundle format handling for Sigstore
-
pq-transport-gateway
Post-Quantum secure proxy for QKD infrastructure, addressing vendor TLS vulnerabilities
-
libcrux-ml-tkem
Libcrux ML-KEM & Kyber & tkem implementations
-
poly1305-nostd
Pure-Rust Poly1305 MAC implementation for no_std/bare-metal targets (avoids LLVM SIMD issues)
-
webpki-root-certs
Mozilla trusted certificate authorities in self-signed X.509 format for use with crates other than webpki
-
parasol_cpu
contains the Parasol CPU, which runs programs over a mix of encrypted and plaintext data
-
real_time_issue_board_api
self‑hosted, real‑time issue board with a Rust backend (high‑performance API + WebSocket sync) for Remote Teams
-
sha3-rust
Keccak (SHA-3) cryptographic hash function family
-
osshkeys
read and write OpenSSH public and private keys
-
aingle-argon2
Pure Rust Argon2 password hashing - optimized for AIngle
-
az-tdx-vtpm
vTPM based TDX attestation for Azure Confidential VMs
-
wasmtime-wasi-tls-openssl
Wasmtime implementation of the wasi-tls API, using OpenSSL for TLS support
-
x25519-nostd
Pure-Rust X25519 (Curve25519) ECDH implementation for no_std/bare-metal targets (avoids LLVM SIMD issues)
-
mas-jose
JSON Object Signing and Encryption (JWT & co) utilities
-
purecrypt
Minimal, readable, dependency-free implementations of modern cryptographic primitives in pure Rust
-
agentzero-storage
AgentZero — modular AI-agent runtime and tool framework
-
forge-pfx
Forge is a cli tool for converting PFX/P12 certificate files to PEM format
-
symbi-channel-adapter
Chat channel adapters for the Symbi platform — Slack, Teams, Mattermost
-
mnemossh
CLI tool for generating and managing Ed25519 SSH keys using BIP-39 mnemonic phrases
-
sdjwt
SD-JWT support for Issuers, Holders, and Verifiers
-
laza
Kanari Network Cryptographic Hashing Library
-
dag-jose
ipld dag-jose codec
-
quickcert
For generating test key/certificate pairs
-
umbral-pre
Umbral proxy reencryption algorithm
-
p256k1
Rust wrappers around libsecp256k1 which expose internal scalar and point APIs
-
paseto-rs
A minimal, learning-focused PASETO v4 implementation in Rust
-
tor-llcrypto
Low level cryptography wrappers used by Tor
-
rsa_heapless
Pure Rust RSA implementation - heapless version
-
classified
High-assurance Operations for Number-theoretic Extension Sets and Theorems (Galois Fields)
-
vitaminc-aead
Authenticated Encryption with Associated Data (AEAD) primitives. Part of the Vitamin-C cryptographic suite.
-
keynest
offline, cross-platform secrets manager written in Rust
-
zipher
Cryptography utilities and implementations including Argon2, bcrypt, post-quantum algorithms and JWT support
-
argentum_encryption_infrastructure
The infrastructure layer of encryption
-
chksum-cli
checksum calculator
-
xoofff
Farfalle with Xoodoo: Parallel Permutation-based Cryptography
-
qslib
QuantStudio qPCR machine library
-
ansible-vault
encrypt and decrypt ansible vault
-
lmrc-vault
HashiCorp Vault management library for the LMRC Stack - comprehensive library for managing Vault installations and secrets on K3s/Kubernetes clusters
-
awol2005ex_kerberos_asn1
Parse/Build Kerberos ASN1 DER To/From Rust structs
-
uricrypt
Hierarchy-preserving deterministic URI encryption
-
polyfuzzy
Fuzzy message detection with randomized and compact keys
-
quinn-noise
quinn noise implementation
-
cggmp24-keygen
UC-secure DKG implementation based on CGGMP24 paper
-
rialo-validator-registry-interface
Instructions and constructors for a registry containing validator identities
-
parsec-tool
Parsec Command Line Interface
-
sha_file_hashing
computing and validating SHA-1 file hashes with a clean, trait-based API
-
bessie
an authenticated, chunked cipher based on BLAKE3
-
cryptotools
cryptography library
-
crypto-auditing-event-monitor
Event monitor for crypto-auditing project
-
tokmd-content
Content scanning helpers for tokmd analysis (TODOs, duplicates, imports)
-
rasn-its
ASN.1 implementations for Intelligent Transport Systems (ITS) V2X communications
-
ssh2
Bindings to libssh2 for interacting with SSH servers and executing remote commands, forwarding local ports, etc
-
libsumatracrypt-rs
Cryptography
-
sigma-proofs
A toolkit for auto-generated implementations of Σ-protocols
-
otrr
otrr — OTR protocol version 3 and 4
-
gimli-crypto
A no_std implementation of Gimli AEAD cipher and hash function
-
dotenvx
A secure environment variable management tool with built-in encryption
-
lean-imt
A lightweight incremental Merkle tree library
-
cracken
a fast password wordlist generator, Smartlist creation and password hybrid-mask analysis tool
-
drawbridge-jose
JOSE implementation
-
ghostkey_lib
working with Freenet's Ghost Keys
-
zhc_crypto
Cryptographic primitives for homomorphic encryption
-
auths-sdk
Application services layer for Auths identity operations
-
SHARAG256
A custom hashing algorithm with complex random number generation based on SHA-256 principles
-
pakery-opaque
OPAQUE augmented PAKE protocol (RFC 9807)
-
uv-trampoline-builder
internal component crate of uv
-
async-acme
async ACME client for tls-alpn-01 challenge
-
timing-shield
Comprehensive timing leak protection for Rust
-
xxxdh
Pure Rust X3DH key exchange protocol implementation
-
pqcrypto-mldsa
Post-Quantum Signature Scheme mldsa
-
evpkdf
OpenSSL EVP_bytesToKey function
-
klukai-agent
Agent component for Klukai Corrosion
-
keycache
Seals a key using a secure element
-
qfe
Experimental protocol for quantum-secure communications
-
cosmian_sse_memories
Symmetric Searchable Encryption
-
ringspace
Trusted webring management
-
tough-kms
Implements AWS KMS as a key source for TUF signing keys
-
opentalk-roomserver-types-e2ee
Opentalk RoomServer E2EE Types
-
trezor-noise-rust-crypto
Wrappers of dalek and RustCrypto crates for noise-protocol, customized
-
gel-jwt
JWT implementation for the Gel database
-
boring-sys2
FFI bindings to BoringSSL
-
boo-rs
Compile-time literal obfuscation that encrypts strings, numbers, arrays and tuples to protect binaries from static analysis and reverse engineering
-
passay-rs
A password validation library inspired by the Java Passay library
-
ff-cl-gen
OpenCL code generator for prime-fields
-
chacha12-blake3
Secure, Simple and Fast encryption for any CPU
-
passwordmaker-rs
Rust reimplementation of the PasswordMaker Pro algorithm. This is partially a port, partially written from scratch. Compatibility is a goal, but not guaranteed.
-
ordinary-obfuscation
Obfuscation for Ordinary
-
risc0-sppark
Zero-knowledge template library
-
shadowsocks-rs
personal port of shadowsocks in rust
-
lusl
Lossless Uncompressed Serializer Library
-
sentc-crypto-common
Common shared values between sentc server api and the sentc client sdk
-
mxdx-web
Web server backend for mxdx management console
-
trivium
Small Rust implementation of the Trivium stream cipher
-
pq-mayo
MAYO post-quantum signature scheme
-
auths-keri
KERI CESR translation layer for Auths
-
rsa-fdh
provably secure blind-signing signature scheme that uses RSA and a full domain hash and support blind signing / blind signatures
-
embedded-mbedtls
no_std Rust wrapper for Mbed TLS
-
himmelblau_kerberos_asn1
Parse/Build Kerberos ASN1 DER To/From Rust structs
-
superboring
A reimplementation of the 'boring' crate in pure Rust
-
zuc
ZUC Stream Cipher Algorithms
-
scion-sdk-common-types
SCION endhost SDK common types
-
arcanum-pqc
Post-quantum cryptographic algorithms for the Arcanum engine
-
emixcrypto
Cryptographic utilities for EssentialMix, providing encryption, hashing, encoding, and random number generation
-
cryptimitives
Cryptographic primitives collection
-
bergshamra
— Pure Rust XML Security library (XML-DSig, XML-Enc, C14N)
-
libdelve
interacting with the DelVe standard
-
concrete-csprng
Cryptographically Secure PRNG used in the TFHE-rs library
-
slahasher
Hashing functions
-
skipjack
A straight-line implementation of Skipjack in Rust
-
ockam_transport_websocket
WebSocket Transport for the Ockam Routing Protocol
-
zeroize
Securely clear secrets from memory with a simple trait built on stable Rust primitives which guarantee memory is zeroed using an operation will not be 'optimized away' by the compiler…
-
rs_hasher_ctx
internal crate of the RustyShield library. It provides the HasherContext trait used across various cryptographic hash function implementations within RustyShield. The trait overloads the…
-
filecoin-f3-merkle
Merkle tree implementation matching go-f3's merkle package
-
encryptable-tokio-fs
A drop-in, API-identical replacement for
tokio::fswith transparent opt-in, non-framing stream cipher encryption -
acme2
A Tokio and OpenSSL based ACMEv2 client
-
drogue-tls
TLS 1.3 client with no_std support and no allocator
-
pqc-combo
Pure Rust ML-KEM-1024 + ML-DSA-65 + AES-256-GCM for no_std
-
oneseed
Deterministic cryptographic keys from a single seed
-
zki_sieve
SIEVE IR
-
pwkit
A secure CLI password generator with template support for environment files
-
libcrux-kem
Libcrux KEM implementation
-
uselesskey-core-seed
Seed parsing and redaction primitives for uselesskey
-
kyberlib
A Robust Rust Library for CRYSTALS-Kyber Post-Quantum Cryptography
-
libgpg-error-sys
Raw bindings for libgpg-error
-
anubis-wormhole
A post-quantum secure file transfer tool based on the Magic Wormhole protocol
-
steamdepot
Steam depot downloader library — CM connection, authentication, PICS, CDN, and chunk downloading
-
rusty-saber
Pure rust implementation of the PQC scheme Saber
-
pumpkin
A cryptographically secure prime number generator
-
hashkitten
A purrfect hashing companion
-
x509-cert
Pure Rust implementation of the X.509 Public Key Infrastructure Certificate format as described in RFC 5280
-
tsumiki-cli
Command-line tool for X.509 certificate inspection and PKCS handling
-
httpsig-hyper
Hyper extension for http message signatures (RFC9421)
-
nuts-tool-api
Code that helps you to implement a nuts tool plugin
-
saltlick
encrypting and decrypting file streams using libsodium
-
num-primes
Generating Large Prime and Composite Numbers using num with a simplistic interface
-
wasmsign2-cli
CLI tool to sign and verify WebAssembly modules
-
openpgp-card-state
Experimental storage mechanism for openpgp-card device state
-
rustls-pq-addon
A pure-rust implementation of post-quantum hybrid TLS key exchange groups for use with rustls
-
gencrypt
Personal usage hashing utility
-
pict-rs-repo
Metadata repo abstraction for pict-rs
-
tink-mac
MAC functionality for Rust port of Google's Tink cryptography library
-
kryoptic-lib
A PKCS #11 software token written in Rust
-
libsignal-rust
Complete and Powerful Rust implementation of libsignal protocol
-
zk-aluvm
AluVM ISA extension for Galois fields
-
agentpin
Domain-anchored cryptographic identity protocol for AI agents
-
envvault-cli
A local-first encrypted environment variable manager
-
stegano
The ultimate steganography swiss knife army CLI tool
-
rust-license-key
A production-grade Rust library for creating and validating offline software licenses using Ed25519 cryptography
-
ucan
Implement UCAN-based authorization with conciseness and ease!
-
redoubt-rand
Cross-platform cryptographic random number generation
-
sealwd
Secure password and token management library for Rust, featuring hashing, encryption, and random generation
-
sett
Rust port of sett (data compression, encryption and transfer tool)
-
rustls-fork-shadow-tls
Rustls is a modern TLS library written in Rust
-
snowflake-jwt
Snowflake JWT token generator
-
paseto-v3-aws-lc
PASETO/PASERK V3 based on AWS-LC
-
irmaseal-curve
Fork of the BLS12-381 pairing-friendly elliptic curve construction for IRMAseal
-
tc_tea
Tencent's varient of TEA (tc_tea)
-
monerochan-recursion-gnark-cli
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
libcryptsetup-rs-sys
Low level bindings for libcryptsetup
-
sigstore-fulcio
Fulcio certificate authority client for Sigstore
-
aranya-keygen
generating crypto keys
-
rusty_vault
RustyVault is a powerful identity-based secrets management software, providing features such as cryptographic key management, encryption as a service, public key cryptography, certificates management…
-
zopp-crypto
Zero-knowledge cryptographic primitives for zopp secrets manager
-
ruma-signatures
Digital signatures according to the Matrix specification
-
ed25519_to_curve25519
Convert ed25519 keys and sign to curve25519
-
sirrd
— ephemeral secret vault server daemon
-
portable-rustls
fork of rustls: a modern TLS library written in Rust
-
evidence
Type-level tags for cryptographic primitives
-
nrc
Nostr Relay Chat - A terminal-based chat client using the Nostr protocol with MLS encryption
-
scrypt
password-based key derivation function
-
keetanetwork-x509
X.509 certificate handling for Keetanetwork
-
btcturk_websockets
client for the BtcTurk WebSocket API with real-time ticker and orderbook channels
-
abhedya-core
Core library for Abhedya: Sanskrit-Encoded Post-Quantum Cryptography
-
wcce-rs
[MS-WCCE] certificate enrollment protocol
-
fn-dsa-sign
FN-DSA signature scheme
-
auths-verifier
Minimal-dependency attestation verification library for Auths - supports FFI and WASM
-
rust_ev_verifier_application_lib
common elements to implement an application using the crate
rust_ev_verifier_lib -
bssl-cmake-sys
FFI bindings to BoringSSL (cmake incorporated)
-
this-me
Encrypted identity store CLI tool (this.me)
-
pvcrypt
System level data encryption using aes_gcm
-
dpf-fss
Distributed point function implementation
-
artisan_keystore
A keystore server designed for AH
-
libsignify-rs
OpenBSD-compatible file signing & verification library
-
simple-ssl-acme-cloudflare
SSL with ACME and CloudFlare is a tool to simply apply SSL certificates by using OpenSSL and ACME via CloudFlare DNS
-
botan-sys
FFI wrapper for Botan cryptography library
-
sodix
CLI tool providing libsodium-compatible cryptographic operations. Uses Ed25519 for signing and Curve25519 for encryption, with hex-encoded keys for easy scripting. SH/BASH friendly and user friendly vith -v and -h flags.
-
rustdom-x-argon2
Argon2 password hashing function
-
pkcs11
Rust PKCS#11 Library
-
enc_rust
A pure rust implementation of the Module-Lattice-based standards ML-KEM and (soon) ML-DSA, also known as the PQC scheme Crystals Kyber and Dilithium
-
permutation-xoodoo
Xoodoo permutation in the
crypto-permutationframework -
cosmian_openssl_provider
OpenSSL cryptographic provider
-
aesus
CLI for AES-256-GCM encryption using memorable passphrases
-
ruipmi
An asynchronous IPMI client library implemented in Rust using Tokio
-
roughenough-merkle
SHA-512 Merkle tree implementation
-
stout-index
SQLite index management for stout
-
awol2005ex_kerberos_crypto
Cryptography algorithms for Kerberos
-
htauth
managing htpasswd files
-
digestible
A more dynamic Hash and Hasher trait for Rust
-
pingap-util
Util for pingap
-
hctr2-rs
HCTR2 and HCTR3 length-preserving encryption with format-preserving variants
-
ironcore-documents
working with IronCore Labs documents and header formats
-
colorhash256
Like Chroma-Hash, but with ANSI terminal colors
-
shielded
Memory. Memory protection from speculation and side-channel attacks like Spectre, Meltdown, Rowhammer and Rambleed.
-
arachnid-net
networking utilities for arachnid
-
json-read
json-read是一个json读取工具，可以直接通过
x.y.z.w方式读取json中的内容，不用逐层解析 -
browser-crypto
A safe Rust interface to browser-based cryptographic operations using the Web Crypto API
-
wacore-binary
Binary data and constants for WhatsApp protocol
-
databoxer
Fast and easy to use CLI-based file encryption program
-
sofapub
A minimally functional ActivityPub server
-
ppoprf
Puncturable Partially-Oblivious Pseudo-Random Function
-
mogh_pki
Public key identification utilities using Noise
-
openentropy-core
Core entropy harvesting library — hardware noise sources, raw or SHA-256 conditioned
-
xxblake3
encryption and decryption based on xxh3 and blake3
-
voa-openpgp
using OpenPGP verifiers in VOA
-
ps_sig
Pointcheval Sanders signatures
-
acme_commander
一个全面的ACME客户端，用于SSL/TLS证书管理
-
foctet-archive
Foctet Secure Archive: encrypted manifest/chunks with recipient key wrapping
-
gnostr-types
gnostr: a git+nostr workflow utility
-
signstar-request-signature
executable for creating, reading and writing of signing requests for files
-
plexi-cli
A flexible auditor companion client
-
apple_srp_client
Apple Secure Remote Password Client
-
cas-lib
A function wrapper layer for RustCrypto and Dalek-Cryptography. Intended to be used in FFI situations with a global heap deallactor at the top level project.
-
affinidi-crypto
Cryptographic primitives and JWK types for Affinidi TDK
-
ferric_crypto_lib
Ferric Crypto
-
rust-keyvault
A secure, modern cryptographic key management library for Rust
-
generic-schnorr
Schnorr signature implementation generic over the underlying group
-
cloakpipe-core
Core detection, pseudonymization, and rehydration engine for CloakPipe
-
credibil-infosec
Credibil information security utilities
-
git-crypt
transparent encryption of files in a git repository
-
nist-pqc-seeded-rng
RNG used to produce the KATs in NIST PQC competition
-
mc-oblivious-ram
Implementations of Oblivious RAM data structures
-
ssh-key-fork-arti
Pure Rust implementation of SSH key file format decoders/encoders as described in RFC4251/RFC4253 and OpenSSH key formats, as well as "sshsig" signatures and certificates (including…
-
offline-license-validator
Offline license validation library using Ed25519 signatures
-
enquo-core
Core library providing encrypted querying operations
-
s2n-quic-crypto
Internal crate used by s2n-quic
-
openmls_traits
Traits used by OpenMLS
-
ibe
Identity Based Encryption schemes on the BLS12-381 pairing-friendly elliptic curve
-
ssb-crypto
Crypto primitives used by Secure Scuttlebutt
-
rustls-symcrypt
rustls crypto provider model for SymCrypt
-
cortex-core
TIBET Cortex core types: TBZ envelopes, TIBET tokens, and crypto primitives
-
mpc-protocol
Multi-party computation framework using the noise protocol for end-to-end encryption
-
speck
block cipher
-
libpasta
All-inclusive password hashing library
-
falcon-rust
Falcon post-quantum digital signature scheme
-
keetanetwork-account
Account management and cryptographic identities for Keetanetwork
-
fire-crypto
Crypto library providing encryption and signing
-
kemkem
Unverified, unoptimized, and downright dirty implementation of the ML-KEM
-
s2n-tls-sys
A C99 implementation of the TLS/SSL protocols
-
ck-meow
STROBE using KitTen
-
ring_signature_verifier
ring signatures generated by an Alice's Ring library
-
qux-pqc
Post-Quantum Cryptography library implementing NIST FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA)
-
relay-crypto
The crypto library for the Relay Ecosystem
-
rdedup-lib
Data deduplication with compression and public key encryption. - library
-
hashing
A robust, production-ready hashing library and CLI tool supporting multiple algorithms
-
bhx5chain
TBTL's library for handling X.509 certificate chains
-
immutable-trace
Tamper-evident immutable audit trace: signing, verification, ingestion and CLI
-
ed25519-bip32
Ed25519 BIP32
-
enchanter
XChaCha20Poly1305 AEAD file encryption tool
-
ark-crypto-primitives-zypher
useful cryptographic primitives
-
lakers-crypto-rustcrypto
EDHOC crypto library backend based on the RustCrypto crates
-
ssi-jws
JWS for the ssi library
-
ssskit
Fast, small and secure Shamir's Secret Sharing library crate
-
mozilla/nss_sys
Firefox Application Services
-
cipher
Traits for describing block ciphers and stream ciphers
-
crypt_guard_lite
compact and intuitive library that wraps the crypt_guard crate, making its core functionalities easily accessible and manageable. This library provides essential cryptographic operations…
-
crypto_api_chachapoly
ChaCha20-IETF, Poly1305 and ChachaPoly-IETF for
crypto_api -
rndc
BIND9 RNDC protocol implementation for Rust
-
frost-ristretto255
A Schnorr signature scheme over the prime-order Ristretto group that supports FROST
-
portal-lib
Secure file transfer library, written in Rust. The library utilizes SPAKE2 for key negotiation over an insecure channel, and ChaCha20Poly1305 Authenticated Encryption to encrypt the…
-
rsa-der
encode and decode public RSA keys using DER
-
kyber-pke
Kyber encryption library for arbitrary plaintext inputs. Mitigates kyberslash.
-
lox-library
Main Lox library with protocols and functions that make up Lox
-
chaum-pedersen-zkp
Chaum-Pedersen zero-knowledge protocol implementation
-
cliff3-util
SHA(256/512) hash, AES/RSA 암복화, 한글, I/O 및 날짜 관련 함수 모음 입니다
-
aranya-fast-channels
High throughput, low latency encryption protected by Aranya Policy
-
neuron-crypto
Cryptographic provider traits for neuron
-
identity_account_storage
Secure storage for Decentralized Identifiers and Verifiable Credentials
-
self-signed-cert
generate self-signed root CA, web server certs and keys
-
sapphire-hash
A recursive, performant file hash calculator
-
halo2_poseidon
The Poseidon algebraic hash function for Halo 2
-
sgx_tcrypto
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
rs_shield
comprehensive Rust library providing robust and efficient implementations of cryptographic hash functions including SHA and Keccak families, and HMAC, suitable for no_std environments…
-
merkle-tree-bulletin-board-backend-mysql
A mysql backend for merkle-tree-bulletin-board
-
securo
Cryptographic impl for hybrid classical-post-quantum authentication and secure communication
-
libes
Collection of Elliptic Curve Integrated Encryption Scheme(s)
-
agentic-identity-cli
CLI tool for AgenticIdentity — create identities, sign actions, manage trust
-
kylix-ml-dsa
ML-DSA (FIPS 204) implementation for the Kylix post-quantum cryptography library
-
dcrypt-api
Public API traits and types for the dcrypt library
-
tpm2
Pure Rust TPM2 TSS
-
classified_shamir
shamir secret sharing using the honest and classified crates
-
chie-crypto
Cryptographic primitives for CHIE Protocol
-
motosan-finance-core
Core traits, types, and error definitions for the motosan-finance Rust SDK
-
aws-mpl-cxx
C++ bindings for aws-mpl
-
srisum
Compute and check subresource integrity digests
-
caramel-client
A caramel client, to generate keys, requests and fetch updated certificates from a caramel server
-
pq-msg
Pure Rust abstractions for higher-level implementations of post-quantum cryptography in secure messaging protocols
-
deno_node_crypto
Node crypto compatibility for Deno
-
ppvss
An implmentation of Pre-constructed Publicly Verifiable Secret Sharing
-
varsig
signature metadata
-
bn-curves
A pure Rust framework for pairing-based cryptography using BN curves
-
sl-compute-common
secure compute
-
grain-128aeadv2
stream cipher
-
acmer
ACME TLS certificates management library
-
zopp-storage
Storage abstraction layer for zopp secrets manager
-
firecloud-core
Core types and traits for FireCloud distributed storage
-
noctahash
Memory-hard password hashing algorithm designed to resist GPU, ASIC, and side-channel attacks
-
ssb-validate
Verify Secure Scuttlebutt (SSB) hash chains (in parallel)
-
circomkit-rs
A Circom testing & development environment for Rust
-
rmls
Messaging Layer Security in Rust
-
br-crypto
crypto
-
x509
X.509 certificate serialization
-
runar_cli
Runar CLI for node initialization and management
-
xaeroid
decentralized identity with Ed25519 and hash commitments
-
ckks-engine
that provides an implementation of the CKKS (Cheon-Kim-Kim-Song) homomorphic encryption scheme. This enables encrypted computations on real numbers and strings while preserving the privacy of the underlying data…
-
auths-infra-git
Git client adapter for Auths - enables communication with Auths services over Git
-
repl-proto
JSON-RPC wire protocol types for the Symbi platform
-
kkv
A Peer-to-Peer Decentralized, Temporary and Anonymous Message System
-
rcssl
generating X.509 certificates with support for CA, server, client and peer certificate profiles
-
tectonic-oqs
interface to Open-Quantum-Safe's liboqs
-
librqbit-sha1-wrapper
Common interface around various sha1 implementations used in rqbit torrent client
-
rustfuscator
A text obfuscation library using AES-GCM encryption
-
str0m-openssl
OpenSSL backend for str0m WebRTC
-
mostro-webtool
A web-based tool for generating deterministic keys and building Mostro protocol messages
-
redoubt-secret
High-level Secret wrapper with automatic zeroization
-
ssclient
SecureStore client for managing user secrets
-
kuznechik
Synchronous encryption algorithm "Kuznechik" (GOST R 34.12-2015, GOST R 34.13-2015)
-
davey
Discord Audio & Video End-to-End Encryption (DAVE) Protocol
-
nu_plugin_x509
A nushell plugin for working with x509 certificates
-
find_hash
A high-performance, offline hash type identification tool
-
crypto_api_blake2
Implements Blake2b for
crypto_api -
disco-rs
A no-std, pure Rust impl of Disco Noise Protocol extension
-
rops-cli
SOPS CLI alternative in pure Rust
-
bls12_381_relic
Bindings for BLS12-381 implemented by relic
-
pheno-crypto
AES-256-GCM encryption utilities for phenotype-config
-
ntied-server
stable messenger
-
line-bot-sdk-utils
functions for LINE Bot SDK, including webhook signature validation
-
confium
Open-source distributed trust store framework
-
wacore-noise
Noise Protocol implementation for WhatsApp with AES-256-GCM
-
mozilla/rc_crypto
Firefox Application Services
-
ubl-types
UBL types: IDs + DIM, Display/FromStr, validator & helpers for Universal Business Ledger
-
age-plugin
[BETA] API for writing age plugins
-
sha2-extensions
Use sha2 as an extension function
-
tk-rand-core
NSA-standard CSPRNG string generation core
-
decanter
implements basic cryptographic primitives native to the ecosystem
-
paillier-lsc
Efficient pure-Rust library for the Paillier partially homomorphic encryption scheme
-
rsa_keygen
generating rsa keys with a 12 word seedphrase
-
totp-sm-rs
A TOTP (Time-based One-Time Password) implementation in Rust with SM3 support
-
file_endec
Secure file encryption and decryption from the command line
-
bls_dkg
DKG
-
yggdrasil-keys
Quickly generate yggdrasil keys
-
openssl-kdf
OpenSSL KDF function abstraction
-
cipher_magma
Block Cipher Magma (GOST R 34.12-2015, former GOST 28147-89)
-
turing-cipher
A fast Rust implementation of Qualcomm's Turing stream cipher
-
zears
AEZ v5 cipher
-
ssh-tresor
Encrypt and decrypt secrets using SSH agent keys
-
sheesy-cli
The 'share-secrets-safely' CLI to interact with GPG/pass-like vaults
-
tough-ssm
Implements AWS SSM as a key source for TUF signing keys
-
cylinder
high-level cryptographic signing library
-
rustls-ccm
CCM and CCM-8 cipher suites for rustls (TLS 1.2 and TLS 1.3)
-
ctr
CTR block modes of operation
-
ockam_app_lib
Ockam's desktop application library
-
rama-boring-sys
FFI bindings to BoringSSL for Rama
-
scram
provider library
-
str0m-rust-crypto
Pure Rust crypto backend for str0m WebRTC
-
ootp
(Open One-time Password) is a supports multiple programming languages. The generated one-time passwords are fully compliant with HOTP (HMAC-based One-time Password) and TOTP (Time-based One-time Password)…
-
scoop-hash
Hashing library for libscoop
-
voa-config
configuration of technology backends in VOA
-
mbedtls-sys-auto
Rust bindings for MbedTLS. This version generates the correct bindings at compile time using bindgen
-
pem-iterator
Iterate over PEM-encoded data
-
mls-rs-crypto-openssl
OpenSSL based CryptoProvider for mls-rs
-
circomspect
A static analyzer and linter for the Circom zero-knowledge DSL
-
ark-ff-zypher
finite fields
-
gm-sm2
China's Standards of Encryption Algorithms SM2
-
kr
Development Toolkit
-
ristretto_cli
A Java Virtual Machine (JVM) CLI
-
irmaseal-core
Core library for IRMAseal communication and bytestream operations
-
street-cred
Manage encrypted secrets for your applications
-
randomorg
A random.org client library. The randomness comes from atmospheric noise, which for many purposes is better than the pseudo-random number algorithms typically used in computer programs.
-
dcrypt-pke
Public Key Encryption schemes for the dcrypt library
-
aes-gcm-siv
Pure Rust implementation of the AES-GCM-SIV Misuse-Resistant Authenticated Encryption Cipher (RFC 8452) with optional architecture-specific hardware acceleration
-
nspm
A password manager i made for fun and learning (don't use this for real and not guaranteed to work)
-
tafrah-ml-kem
ML-KEM (FIPS 203) implementation for the Tafrah PQC library
-
openpgp-card-tool-git
Git signing and verification with a focus on OpenPGP cards
-
renc
Rust Encryption Engine compatible with the zenc file format
-
easy-hasher
Easy hashing library
-
sylow
BLS signature scheme using the alt-bn128 curve
-
abhedya-kem
Key Encapsulation Mechanism (KEM) for Abhedya PQC
-
ncrypt-me
Dead simple encryption library
-
ark-poly-zypher
efficient polynomial arithmetic via FFTs over finite fields
-
sl-verifiable-enc
Verifierable encryption
-
mlkem-fips203
MLKEM [512, 768, 1024] module-lattice key encapsulation mechanism following the FIPS 203 standard
-
uzkge
App-specific PlonK with various gadgets & primitives
-
xwt-web-sys
xwt that runs in the browser. Powered by wasm-bindgen and web-sys
-
ntied-transport
stable messenger
-
yule-attest
Cryptographic attestation: signed inference logs, audit trails
-
rinkey
Keyset manipulation command-line tool for Rust port of Google's Tink cryptography library
-
lhash
Minimal hashing library
-
libcipher
Advanced Encryption Standard (AES) for secure data encryption and decryption
-
morf
authenticated encryption layer over RF
-
tibba-util
util for tibba
-
helpers
self use helper library
-
EZDB
Easy little database
-
upki-ffi
C FFI bindings for upki
-
packc
Greentic pack builder CLI
-
str0m-apple-crypto
Apple CommonCrypto/Security framework backend for str0m WebRTC
-
emissary-util
I2P protocol stack
-
cbc
Cipher Block Chaining (CBC) block cipher mode of operation
-
mbedtls-sys-auto-smx
Rust bindings for MbedTLS. This version generates the correct bindings at compile time using bindgen
-
frost-core-myecoria
Types and traits to support implementing Flexible Round-Optimized Schnorr Threshold signature schemes (FROST)
-
dusk-safe
Sponge API for Field Elements
-
rustls-lite
Experimental unsafe non-affiliated rustls lite fork. Don't use please.
-
aman
The definitive, high-performance binary integrity & signing platform. Supports P-256, Ed25519, Multi-sig, and Anti-tamper.
-
anubis-age
Post-quantum secure encryption library with hybrid X25519+ML-KEM-1024 mode (internal dependency for anubis-rage)
-
sha1-extensions
Use sha1 as an extension function
-
rand_jitter_kernel
interface to Linux kernel jitterentropy_rng
-
minivault
Local-only, light-weight Encryption as a Service
-
vanity-ssh-rs
Generate SSH key pairs with custom patterns in the public key
-
ruqu-qflg
Quantum Federated Learning with Byzantine Tolerance - Privacy-preserving distributed quantum ML
-
mal_dev_core
Core cryptographic and transport utilities for loader
-
md5-extensions
Use md5 as an extension function
-
sifredb-key-file
File-based key provider for SifreDB
-
neuedu-cryptos-wasm
包含国密算法的密码库。 A library include SM3, SM4 (Chinese ShangMi) crypto algos
-
boring-sys-vendit
FFI bindings to BoringSSL
-
sra-wasm
A wasm implementation of the SRA protocol
-
parasol_runtime
supports the Parasol CPU, providing key generation, encryption, and FHE evaluation functionality
-
quickcrypt
Fast, offline encryption & key management. No cloud. No complexity. Military-grade security.
-
picky-test-data
Test data for the picky crates
-
umbral-rs
A pure-Rust implementation of the Umbral threshold Proxy Re-encryption scheme
-
shamir-3-pass
Shamir 3-pass protocol (commutative encryption)
-
nuts-directory
A backend implementation for nuts
-
crown-bin
A cryptographic library
-
psa-crypto
Wrapper around the PSA Cryptography API
-
sgx_tseal
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
identity_eddsa_verifier
JWS EdDSA signature verification for IOTA Identity
-
keetanetwork-asn1
ASN.1 definitions and utilities for Keetanetwork
-
efr
efr (EFile Rust)
-
black-bagg-sigs
Quantum-Sign detached signature, trust, and crate bundle for black-bagg 0.4.10 (crates.io-only)
-
syftbox-crypto-protocol
Cryptographic protocol implementation for SyftBox using X3DH key agreement
-
amcl_wrapper
Wapper over Milagro Cryptographic Library (version 3)
-
tlog_tiles
c2sp.org/tlog-tiles and c2sp.org/tlog-checkpoint
-
foodshare-crypto
Cryptographic utilities for webhook verification and HMAC
-
whatsapp-rust-tokio-transport
Tokio-based WebSocket transport for whatsapp-rust
-
generic-ec-curves
Elliptic curves for
generic-eccrate -
tls_codec
A pure Rust implementation of the TLS (de)serialization
-
zvault-cli
ZVault CLI — AI-native secrets manager. Import .env files, inject secrets at runtime, MCP server for AI coding assistants
-
kcr_s3_services_k8s_aws
Kubernetes Custom Resource Bindings
-
fencryption
A program to encrypt/decrypt text, files and directories
-
ristretto_types
Types and traits for the Ristretto JVM
-
yaml-reader
yaml-reader是一个yaml读取工具，可以直接通过
x.y.z.w方式读取yaml中的内容，不用逐层解析 -
tafrah-slh-dsa
SLH-DSA (FIPS 205) implementation for the Tafrah PQC library
-
tuple-hash
TupleHash per NIST SP 800-185
-
ReXOR
Cross-platform library with CLI app for encoding and decoding files using XOR encryption
-
wireapp/proteus
Axolotl protocol implementation
-
tweetnacl
api for using tweetnacl
-
s3p-cli
CLI for BlockNet S³P (encrypt→erasure→merkle, fountain tools)
-
ironcore-search-helpers
Search helpers for working with encrypted values, particularly on the IronCore platform
-
armature-acme
ACME protocol support for automatic TLS certificates in Armature
-
ring-lwe
Implements the ring learning-with-errors public key encrpytion scheme
-
semaphore-rs-depth-config
Rust support library for Semaphore
-
noise-framework
Noise protocol framework in functional style
-
kangarootwelve
BlaKE12: Blazing-fast KEccak on 12 rounds
-
p12_q3
pure rust pkcs12 tool
-
coyote
Embeddable ACME server with programmable challenges and storage
-
sgxencrypt
Cli tool for encrypting content for fleek network sgx enclaves
-
frost-adaptor-signature
A Schnorr adaptor signature scheme over the secp256k1 curve that supports FROST and Taproot
-
pqcrypto-falcon
Post-Quantum Signature Scheme falcon
-
rs_internal_state
package serves as an essential building block within the
rs_shieldcryptographic library. It is focused on providing foundational functionality and infrastructure for various cryptographic operations within the… -
pbkdf2
Generic implementation of PBKDF2
-
detsurtnu
Automated mirror of untrusted - Safe, fast, zero-panic, zero-crashing, zero-allocation parsing of untrusted inputs in Rust
-
sequoia-sqv
OpenPGP signature verification program
-
harmonia-vault
Encrypted secret vault with SQLite backend for the Harmonia agent
-
wecanencrypt
OpenPGP library for encryption, signing, and key management (includes rpgp)
-
rivvend
Rivven broker server with Raft consensus and SWIM membership
-
cryptox
Centralized crypto utilities for rust
-
curve25519-parser
Curve25519 Parser - DER/PEM parser for OpenSSL Ed25519 / X25519 keys
-
tss-keyfile
Decoding of TPM 2.0 TSS Keyfiles from PEM/DER/(ASN.1)
-
dcrypt-hybrid
Hybrid cryptography schemes for the dcrypt library
-
rustls-mbedcrypto-provider
Mbedtls based crypto provider for rustls
-
vitaminc-encrypt
Secure, flexible and fast encryption for Rust types. Part of the Vitamin-C cryptographic suite.
-
otp-pass-import
import OTP secret files extracted using
extract-otp-secrets(https://github.com/scito/extract_otp_secrets) intopass(https://www.passwordstore.org) -
datex-crypto-web
Web implementation of the DATEX Crypto facade for WASM targets
-
spl-elgamal-registry-interface
SPL ElGamal Registry Interface
-
wa-rs-tokio-transport
Tokio-based WebSocket transport for whatsapp-rust
-
sec1
Pure Rust implementation of SEC1: Elliptic Curve Cryptography encoding formats including ASN.1 DER-serialized private keys as well as the Elliptic-Curve-Point-to-Octet-String encoding
-
pqc_dilithium_edit
Modified version. A post-quantum cryptographic signature scheme based on the hardness of lattice problems over module lattices
-
stegano-seasmoke
Providing cryptography functionality as library for stegano-core
-
trifid-pki
Nebula PKI system
-
sunscreen_curve25519
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
pipebuf_rustls
PipeBuf wrapper for Rustls
-
atlas-generic-token
Atlas Program Library Generic Token
-
threshold-secret-sharing
A pure-Rust implementation of various threshold secret sharing schemes
-
oboron-py
Python bindings for Oboron - general purpose encryption and encoding library
-
fhe-traits
Traits for the fhe.rs library
-
hyphae-handshake
Noise protocol framework handshakes for QUIC
-
abe_policy
Policy and attributes definition for ABE cryptosystems
-
uselesskey-rustls
rustls-pki-types and rustls config adapters for uselesskey X.509/key fixtures
-
shadow-secret
A secure, distributed secret management system written in Rust
-
aes-256-gcm
AES-GCM (Aes 256 Gcm) with some enhancement
-
mbedtls-platform-support
support library for the
mbedtlscrate, providing platform and target specific implementations of all necessary functions. By separating this logic into a separate crate, multiple… -
dalek-test-curve-docs
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
sidh
An efficient supersingular isogeny-based cryptography library
-
ts-token
JSON web token library for my projects
-
tangy-lib
Tang protocol library implementation
-
ubl-ledger
UBL Ledger: append-only NDJSON with async writer, WAL, verify for Universal Business Ledger
-
ristretto_jit
JVM JIT Compiler
-
bicycl-rs
Safe Rust wrapper for BICYCL C API
-
hiae
High-throughput Authenticated Encryption (HiAE) algorithm implementation
-
kryoptic
A PKCS #11 software token written in Rust
-
dlog-group
Unified wrapper around different prime-order cryptographic groups where the discrete log, computational Diffie–Hellman, and decisional Diffie–Hellman problems are believed to be hard
-
p47h-open-core
Cryptographic primitives and policy engine for secure identity management
-
cloudproof
Cosmian Cloudproof library
-
signature_bls
The Ockam BLS signature impementation
-
xkcp-sys
Native bindings to the XKCP library
-
chacha20stream
A writable wrapper stream for encryption and decryption with the stream cipher chacha20_poly1305
-
podman-sequoia
A polyfill to use Sequoia as a signing backend for containers
-
kcr_cert_manager_io
Kubernetes Custom Resource Bindings
-
pgjwt_rs
PostgreSQL extension for JWT verification with RS256 and Ed25519 support
-
checkpipe
Perform a computation over some bytes passing through some struct
-
pqcrypto-picnic
Picnic implementation for
pqcrypto -
chamox
procedural macro to inject obfuscated, meaningless code to increase reverse engineering complexity
-
gcm-nonceless
Decrypts GCM encrypted data without access to the nonce
-
mls-rs-crypto-awslc
AWS-LC based CryptoProvider for mls-rs
-
matrix-lite-rs
Production-ready Matrix protocol implementation with Redis backend, E2EE (Olm/Megolm), and WASM support for scalable real-time messaging
-
monerochan-recursion-compiler
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
azure_mgmt_fist
generated REST API bindings
-
rs-builder-signing-sdk
Polymarket Builder API authentication with HMAC-SHA256 signatures
-
nethsm-backup
binary for working with encrypted NetHSM backups
-
ssh-portkey
Secure SSH credential manager with a fast ratatui-based TUI, fuzzy search, and encrypted vault
-
XPManager
A fast and efficient CLI tool for managing passwords and encrypting sensitive data
-
secret-store-sdk
Rust SDK for XJP Secret Store Service
-
bls_ringct
A pure-Rust implementation of Ring Confidential Transactions
-
ec25519
Small, self-contained, wasm-friendly elliptic curve algorithms for 25519 curve family
-
lock_box
A command-line tool for generating and managing passwords
-
uselesskey-hmac
HMAC HS256/HS384/HS512 secret fixtures for deterministic and random tests
-
eccoxide
elliptic curve cryptography (ECC) framework
-
git_vault
A simplified version control system built in Rust for local files, quite similar to how git functions
-
pqc_kyber_kyberslash
post-quantum Kyber KEM algorithm
-
patent-hash
A custom hashing algorithm with complex random number generation based on SHA-256 principles
-
checkasum
A small utility to verify the data integrity of a downloaded file with its expected checksum
-
pwsec
Support for password-based encryption
-
frost-p256
A Schnorr signature scheme over the NIST P-256 curve that supports FROST
-
hmac-sha1-compact
A small, self-contained SHA1 and HMAC-SHA1 implementation
-
libcrux-aead
Formally verified AEAD library
-
leancrypto-sys
Rust language binding for leancrypto, a cryptographic library with stack-only support and PQC-safe algorithms
-
device-agent
Device-side helpers to build and sign immutable trace records
-
soteria-rs
Wrapper around a secret that is stored in memory with the goal to protect against side-channel and speculative attacks
-
mp4decrypt
Decrypt CENC protected MP4 content using Bento4
-
curve420
elliptic curve in Rust
-
curveforge
Optimised, secure, and generalised algorithms for elliptic curve arithmetic
-
uselesskey-core-negative-pem
PEM-focused negative fixture corruption helpers for test fixtures
-
pg-core
PostGuard core library communication and bytestream operations
-
kg_passgen
Password generator that hashes an input master password and a service url
-
gitclaw
Official GitClaw SDK for Rust - The Git Platform for AI Agents
-
rustls-cert-gen
Rust X.509 certificate generator CLI
-
frost-core-unofficial
Types and traits to support implementing Flexible Round-Optimized Schnorr Threshold signature schemes (FROST)
-
infolyt-ipc
IPC protocol types for Infolyt
-
argon2-rs
Argon2 password hashing library for Rust
-
rustls-aws-lc-rs
An aws-lc-based crypto provider for rustls
-
native-pkcs11-traits
Traits for implementing and interactive with native-pkcs11 module backends
-
curveforge-traits
Optimised, secure, and generalised algorithms for elliptic curve arithmetic
-
getmyconfig
Read encrypted config and secrets from remote storage
-
cosmian_crypto_base
Crypto lib for hybrid encryption and pure crypto primitives
-
crab-gnupg
API for GNU Privacy Guard (GnuPG) written in rust. Manage gpg keys and secure files using rust.
-
bunker
Dead simple, secure password management
-
azure_svc_attestation
generated REST API bindings
-
sfynx
General-purpose onion routing packet construction and processor based on Sphinx
-
libaes
AES cipher in safe Rust with no dependencies
-
sekrit
Encrypt any file, decrypt anywhere. File encryption that doesn't suck.
-
shippo_publish
GitHub release publisher for Shippo
-
plexi
A flexible auditor companion client
-
cosmian_findex_client
Cosmian Findex REST Client
-
tectonic-fn-dsa-comm
FN-DSA signature scheme
-
tibet-cortex-core
TBZ envelopes, TIBET tokens, and crypto primitives
-
bls_bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
tongsuo
OpenSSL bindings
-
fn-dsa-kgen
FN-DSA signature scheme
-
messtar
— custom encryption protocol built with X25519, HKDF and AES-256-GCM
-
miracl32
version of miracl/core for 32-bit no_std platforms
-
nostro2-nips
Nostro2 is a simple toolset for interacting with the Nostr protocol
-
silent-sparrow
A minimal, scheduled, cryptographically signed status beacon
-
sl-mpc-traits
small utility traits
-
lattice-safe-suite
Post-quantum cryptography suite — ML-DSA (FIPS 204) + FN-DSA (FIPS 206) + ML-KEM (FIPS 203) + SLH-DSA (FIPS 205)
-
ripemd
Pure Rust implementation of the RIPEMD hash functions
-
phalanx-crypto
🛡️ Phalanx - General-purpose group E2E encryption protocol
-
bergshamra-pkcs12
PKCS#12 parser for Bergshamra XML Security library
-
angulu-cli
password tool
-
ark-r1cs-std-zypher
A standard library for constraint system gadgets
-
wechat-api-rs
SDK for WeChat Official Account and Mini Program APIs
-
gnip44
nostr NIP-44 encryption code
-
enigma-aead
AEAD + framing + nonce transport layer for Enigma secure messaging
-
yule-verify
Cryptographic integrity verification: Merkle trees, signatures, and model manifests
-
tafrah-ml-dsa
ML-DSA (FIPS 204) implementation for the Tafrah PQC library
-
seal-crypto-wrapper
A high-level, misuse-resistant cryptographic wrapper library for Rust, binding algorithms to keys to ensure type safety
-
obs-sdk
针对华为云的OBS工具封装rust版本的sdk
-
vitaminc-password
Secure password generator. Part of the Vitamin-C cryptographic suite.
-
stormdl-integrity
BLAKE3 incremental hashing and content verification
-
tpksig
Decoding the TPK Signing Block
-
bertie
Minimal TLS 1.3 implementation
-
trackone-constants
Shared constants for TrackOne crates
-
real_time_md_editor_api
Serves a Rust Actix‑Web backend to Implement the WebSocket sync logic,oauth2 and jsonwebtoken crates, DB
-
sequoia-ipc
Interprocess communication infrastructure for Sequoia
-
wacore-libsignal
Signal Protocol implementation for the WhatsApp platform
-
sentc-crypto
The main implementation of the sentc sdk
-
sidefuzz
Fuzzer to automatically find side-channel (timing) vulnerabilities
-
paseto-v4-sodium
PASETO/PASERK V4 based on libsodium
-
quantum_cryptographic_toolkit
A toolkit for developing, testing, and deploying quantum-resistant cryptographic algorithms
-
spki
X.509 Subject Public Key Info (RFC5280) describing public keys as well as their associated AlgorithmIdentifiers (i.e. OIDs)
-
bessie_bin
a demo/test CLI for the Bessie cipher, NOT FOR PRODUCTION USE
-
sppg
CLI passphrase generator using the diceware method
-
libcrux-chacha20poly1305
Formally verified ChaCha20-Poly1305 AEAD library
-
iso8583_rs
define/parse/assemble and send/receive (via TCP) an ISO8583 message
-
ssi-dids-core
Core types and traits for DIDs for the ssi library
-
xitter-txid
Generate X (Twitter) client transaction IDs
-
esdm-tool
small tool to query and use ESDM
-
tibet-zip-airlock
tibet-zip Airlock: sandboxed decompression with eBPF kernel enforcement
-
agentic-identity-ffi
C FFI bindings for AgenticIdentity
-
nrf-aes-gcm
AES-GCM support for nordic chips using the aead crate primitives
-
lllv-core
LLLV — Cryptographic capsules for verifiable retrieval
-
gsw-rs
GSW (Gentry-Sahai-Waters) lattice-based fully homomorphic encryption in Rust
-
rscrypt
fast, and secure encryption tool written in Rust
-
openmls_rust_crypto
A crypto backend for OpenMLS implementing openmls_traits using RustCrypto primitives
-
nuts-tool
A cmdline utility for the nuts container
-
qserde
a non-std rust library for serializing/deserializing ml-kem(aka kyber) public key, encapsulating/decapsulating 256 bit keys and so on
-
str0m-wincrypto
Supporting crate for str0m
-
shamir-algorithm
Shamir's Secret Sharing algorithm using Galois Field arithmetic over GF(256)
-
he-ring
that provides fast implementations of rings commonly used in homomorphic encryption, built on feanor-math
-
chacha_box_ietf
Sealed boxes using X25519 and ChaCha20-Poly1305 (RFC 8439): anonymously send unforgeable messages to a recipient given their public key
-
cryptsetup-rs
Rust wrapper around the libcryptsetup library, allowing manipulation of LUKS devices in Linux
-
chacha20poly1305-nostd
Pure-Rust ChaCha20-Poly1305 AEAD implementation for no_std/bare-metal targets (avoids LLVM SIMD issues)
-
scion-sdk-utils
SCION endhost SDK utilities
-
enigma-double-ratchet
Standalone Signal-style double ratchet focused on deterministic, reusable async messaging primitives
-
signstar-sign
Signstar signing responses for Signstar signing requests
-
arcanum-asymmetric
Asymmetric cryptography: RSA, ECIES, key exchange
-
student-key-manager
Secure key management for student data anonymization with encryption and database integration
-
age-plugin-tlock
tlock plugin for age clients
-
concrete
open-source FHE Compiler that simplifies the use of fully homomorphic encryption (FHE)
-
sh-secgen
secret key generator
-
passwordEncryption
一个安全的密码哈希库，使用 Argon2 算法保护用户密码
-
arcanum-threshold
Threshold cryptography for the Arcanum cryptographic engine
-
kestrel-crypto
Cryptography backend for Kestrel
-
wtfrost
Weighted Threshold implementation of FROST, a Schnorr aggregated threshold signature scheme
-
hdpki
Hierarchical deterministic key derivation for OpenSSH and X.509
-
chksum-md5
MD5 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
merkle-sdk
seamless integration with Merkle's services
-
bssh-russh
Temporary fork of russh with high-frequency PTY output fix (Handle::data from spawned tasks)
-
fluxencrypt-cli
Command line interface for FluxEncrypt encryption SDK
-
gennaro-dkg
The Gennaro Distributed Key Generation Algorithm
-
tsumiki-x509
X.509 certificate parsing and handling with full v3 extensions support
-
ciphercore-adapters
An auxiliary crate to bridge CipherCore with its C bindings
-
age-plugin-yubikey
YubiKey plugin for age clients
-
pg-curve
Fork of the BLS12-381 pairing-friendly elliptic curve construction with target group serialization
-
zk-paillier
Collection of Paillier cryptosystem zero knowledge proofs written in Rust
-
mpc-client
Noise protocol websocket relay client for MPC/TSS applications
-
pkgar-keys
Key management tool/library for pkgar
-
lwbc
Compact implementations of small block ciphers (SPECK, SIMON, SIMECK)
-
hashtree-rs
Rust bindings for the hashtree library
-
loopring_sign
generates an eddsa signature for loopring
-
tor-key-forge
Low level cryptography wrappers used by Tor
-
uselesskey-token
API key, bearer, and OAuth access-token fixture generator for tests
-
kcr_trino_stackable_tech
Kubernetes Custom Resource Bindings
-
kychacha_crypto
A Post-Quantum Secure Encryption Protocol using chacha20poly1305 and CRYSTALS-kyber
-
modular_math
modular arithmetic crate for U256
-
roughenough-common
Shared cryptography and encoding utilities for Roughenough
-
tcrypt
A secure cryptographic library for key exchange and encryption
-
ciphern
Enterprise-grade cryptographic library
-
semaphore-rs-keccak
Rust support library for Semaphore
-
libsignify
Create cryptographic signatures for files and verify them
-
tink-awskms
AWS-KMS integration for Rust port of Google's Tink cryptography library
-
redoubt
Systematic encryption-at-rest for in-memory sensitive data in Rust
-
tollway-core
Post-quantum cryptographic primitives with forward secrecy and authentication
-
maybenot-cli
A CLI tool for defense generation using Maybenot
-
variant-ssl-sys
FFI bindings to OpenSSL variants such as BoringSSL / AWS-LC / Tongsuo
-
isap-aead
Pure Rust implementation of ISAP v2 with Ascon and Keccak
-
acme-micro
requesting certificates from an ACME provider (acme-lib fork)
-
sentc-crypto-light
The main implementation of the sentc light sdk
-
zkcg-halo2-prover
Prover crate for ZKCG — generate Halo2 proofs for off-chain computation + policy compliance
-
sare-core
Core library for the SARE encryption standard
-
tink-signature
Signature functionality for Rust port of Google's Tink cryptography library
-
vrf_fun
RFC 9381 compliant Verifiable Random Function (VRF) for secp256k1
-
ecksport-auth
Native auth impl using NaCl-based signing key system
-
envcipher
Encipher .env files to make accidental leaks harmless
-
kjwt
mini JSON Web Token library
-
brsl2
Cayley hashing as in 'Navigating in the Cayley Graph of SL₂(𝔽ₚ)'
-
postio
Encrypted file sender/queue/receiver using an AWS S3 backend
-
p47h-engine
Core engine for p47h governance - pure library, no WASM artifact
-
volaris-cli
Efficient, robust, and verified command-line file encryption
-
firecloud-crypto
Encryption and key management for FireCloud distributed storage
-
rustls-ring
A *ring*-based crypto provider for rustls
-
ratrod
A TCP / UDP tunneler that uses public / private key authentication with encryption
-
cryptraits
Cryptographic primitives traits collection
-
pezsc-keystore
Keystore (and session key management) for ed25519 based chains like Pezkuwi
-
mc-rand
A platform abstraction layer providing a cryptographic RNG,
McRng -
bls_acml
BLS signatures. 2 variations. Multi-signature, Threshold signature, batch verification support
-
ark-serialize-zypher
serializing types in the arkworks ecosystem
-
ansivault
CLI tool ansible-vault 1.1 implementation
-
mc-oblivious-traits
Traits and interfaces for components related to Oblivious data structures
-
libfortress
Fortress library
-
aes-keywrap
AES Key Wrap construction (AES-KW, RFC 3394 / RFC 5649)
-
presence
Privacy friendly presence tokens
-
medallion
JWT library for rust using serde, serde_json and openssl
-
mcircuit
tools for working with arithmetic circuits on generic fields
-
wedpr_l_bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
uselesskey-ed25519
Ed25519 key fixtures (PKCS#8/SPKI, PEM/DER) with deterministic generation
-
zvault-core
Core library for ZVault — AES-256-GCM barrier, Shamir seal, token auth, policy engine, audit logging
-
paspio
A password entropy calculator
-
krow
key derivation function
-
linux-crng-ioctl
wrapper for Linux kernel kernel RNG ioctls
-
kylix-core
Core traits and utilities for the Kylix post-quantum cryptography library
-
uselesskey-core-id
Core identity and derivation primitives for uselesskey
-
wa-rs-appstate
Appstate for WhatsApp protocol
-
aead-gcm-stream
Pure Rust implementaion of AES GCM cipher for data streams
-
jwt2
JSON Web Tokens done right... hopefully.
-
sha-to-hex
function to encode string using secret and return hex string
-
craftls
Rustls is a modern TLS library written in Rust
-
r255b3
Short Schnorr signatures using Ristretto255 and Blake3
-
zerocaf
A pure-Rust implementation of elliptic curve operations over the Doppio-curve
-
builder_signing_sdk_rs
Small signing utilities for Builder API auth and EIP-712 helpers used by Polymarket clients
-
bergshamra-dsig
XML Digital Signatures for Bergshamra XML Security library
-
rustls-post-quantum
Experimental support for post-quantum key exchange in rustls
-
x509lint
X.509 linter (RFC 5280 certificates and CRLs)
-
hrp
generate human-readable passwords
-
openpgp-ca
OpenPGP CA is a tool for managing and certifying OpenPGP keys
-
lazy-locker
A secure local secrets manager with TUI interface and SDK support
-
rs-password-utils
Password utilities, writen in Rust
-
key_value_service
A refreshingly simple data-driven game engine and app framework
-
ockam_transport_ble
Bluetooth Low Energy (BLE) Transport for the Ockam Routing Protocol
-
yohu
A versatile command-line cryptography tool implementing multiple cipher algorithms for educational and practical use
-
const-oid
Const-friendly implementation of the ISO/IEC Object Identifier (OID) standard as defined in ITU X.660, with support for BER/DER encoding/decoding as well as heapless no_std (i.e. embedded) support
-
libcrux-ecdh
Libcrux ECDH implementation
-
anubis-vault
Post-quantum secure secrets manager with ML-KEM-1024, ML-DSA-87, zero-knowledge proofs, Shamir sharing, and memory protection. The ultimate security vault.
-
portal-client
Secure file transfer utility, written in Rust. The protocol utilizes SPAKE2 for key negotiation over an insecure channel, and ChaCha20Poly1305 Authenticated Encryption to encrypt…
-
rustls-ffi
Rustls bindings for non-Rust languages
-
dumb-crypto
Dumb, but easily verifiable implementations of crypto algorithms
-
rusty_crypto
cryptographic suite for Rust
-
wechat_work_crypto
Pure Rust implementation of WeChat Work (企业微信) message encryption/decryption library
-
ssh-agent
implementing an SSH agent
-
kyber-nz
A pure Rust, secure and robust implementation of FIPS 203 (ML-KEM)
-
ark-relations-zypher
rank-one constraint systems
-
quasor
A high-security AEAD based on a Duplex Sponge construction with SHAKE256, Argon2id, and BLAKE3
-
bt_secure_storage
lightweight Secret Vault and Encryption Library for Rust to store secrets
-
ore-rs
Order-revealing encryption library used by the CipherStash searchable encryption platform
-
bip32
hierarchical key derivation implemented in a generic, no_std-friendly manner. Supports deriving keys using the pure Rust k256 crate or the C library-backed secp256k1 crate
-
ssh-encoding-fork-arti
Pure Rust implementation of SSH data type decoders/encoders as described in RFC4251
-
pqcrypto-mlkem
Post-Quantum Key-Encapsulation Mechanism mlkem
-
rustls-graviola
graviola is a modern, fast cryptography library
-
rust_keylock
A password manager with goals to be Secure, Simple to use, Portable and Extensible
-
animo-secure-env
secure-env is a wrapper library around the Android KeyStore and the iOS Security Framework for key creation and sign operations using the Secure Element
-
sta-rs
Distributed Secret-Sharing for Threshold Aggregation Reporting
-
pqc_kyber_edit
post-quantum Kyber KEM algorithm, with a fix for pqc_kyber KyberSlash
-
opaque-borink
configuration of OPAQUE, a passowrd-authenticated key exchange protocol
-
certbot-dns01-hook
Hook for certbot to serve the DNS01 challenge secret TXT record
-
credx
Anonymous Credentials 2.0 implemention
-
tor-hsclient
Arti's implementation of an onion service client
-
tectonic-fn-dsa-vrfy
FN-DSA signature scheme
-
alpine-protocol-rs
Authenticated Lighting Protocol (alpine): secure control-plane + streaming guard for lighting data
-
helvetia
API server that allows anonymous storage of secrets, with a simple rule; any user can create a secret using a token, and they can only access it using the same token
-
ssi-claims-core
Core types and traits for Verifiable Claims in the
ssilibrary -
clia-rustls-mod
Rustls is a modern TLS library written in Rust. This is clia-mod using ring.
-
safe_paillier_rust
Paillier cryptosystem with homomorphic properties, leveraging Rust's type system and safety guarantees
-
didcomm
DIDComm for Rust
-
frost-ed448
A Schnorr signature scheme over Ed448 that supports FROST
-
amcl
The Apache Milagro Cryptographic Library (version 3)
-
elliptic-curve-tools
Extra Rust-Crypto elliptic-curve adaptors, functions, and macros
-
reverie-zk
An efficient implementation of the NIZKPoK outlined in KKW 2018
-
click
A command-line REPL for Kubernetes that integrates into existing cli workflows
-
ramp-primes
Generating Large Prime and Composite Numbers using ramp with a simplistic interface
-
ark-ec-zypher
elliptic curves and pairings
-
tink-prf
PRF functionality for Rust port of Google's Tink cryptography library
-
hakanai-lib
Client library for Hakanai, a secure secret sharing service
-
file_encryptor
libsodium-based file encryption/decryption CLI
-
tafrah-hqc
HQC (FIPS 207) scaffolding for the Tafrah PQC library
-
vrf-r255
A Verifiable Random Function built on the ristretto255 group
-
hashtree-blossom
Blossom protocol client for hashtree - upload/download blobs with NIP-98 auth
-
pqc-ml-kem
Module-Lattice Key Encryption Mechanism (ML-KEM)
-
nuts-backend
A secure storage library
-
blake-hash
BLAKE hash functions
-
ockam_node
Ockam [Ockam][main-ockam-crate-link] Node and is intended for use by crates that provide features and add-ons to the main [Ockam][main-ockam-crate-link] library. The main [Ockam][main-ockam-crate-link]…
-
ostring_auth
A license authentication module
-
sequoia-policy-config
Configure Sequoia using a configuration file
-
d7s_auth
Credential storage for d7s using platform keyrings
-
xs_ed25519-dalek
Fast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust
-
cthash
const fn implementation of hash functions including MD4, MD5, SHA-1, SHA-2, SHA-3, Keccak
-
keygate-jwt
Easy to use, secure, and opinionated JWT (JSON Web Tokens) implementation for Rust
-
crypter_project_sk
A secure file encryption tool using AES-GCM and Argon2
-
sl-paillier
Paillier encryption
-
hpke-rs-crypto
Traits and types for HPKE crypto backends
-
semaphore-rs-proof
Rust support library for Semaphore
-
simple-ecdh
ecdh implementation for rust
-
pflow-zk
ZK proof traits and incidence matrix extraction for Petri nets
-
paseto-v4
PASETO/PASERK V4 based on RustCrypto
-
pw_hash
A collection of password hashing routines in pure Rust. Fork of pwhash by inejge.
-
sunscreen_bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
sthash
A very fast cryptographic hash function for large data
-
logcrypt
CLI tool for encrypting private data in log files
-
wolf-crypto
Safe and thin API for wolfSSL's wolfcrypt
-
bee2-rs
Bindings for cryptographic library Bee2
-
aes_frast
lib for AES encryption and decryption, coded in pure safe Rust-lang
-
monerochan-primitives
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
s2n-quic-rustls
Internal crate used by s2n-quic
-
plonky2_monolith
Use Monolith hash to generate Plonky2 proofs and to write Plonky2 circuits
-
lxmf
Lightweight Rust implementation of LXMF focused on protocol portability and reliability
-
xwt-test-assets
Static test assets for xwt
-
ssh-parser
Parser for the SSH protocol
-
hashery
A flexible and efficient async file hashing library supporting multiple hash algorithms (MD5, SHA1, SHA2, SHA3, BLAKE2, BLAKE3)
-
avila-crypto
Criptografia nativa - substitui sha2, hmac, base64, argon2
-
elliptic-curve
General purpose Elliptic Curve Cryptography (ECC) support, including types and traits for representing various elliptic curve forms, scalars, points, and public/secret keys composed thereof
-
zkinterface
An implementation of zkInterface
-
vks_client
Client implementation of the Verifying Keyserver (VKS) interface
-
eme-mode
EME block cipher mode of operation
-
simple_sign
signing library
-
rust_notes_app
encrypted Notes App I developed as a project
-
webcryptobox
Convenient opiniated wrappers around OpenSSL to use WebCrypto compatible cryptography
-
password_policy
A comprehensive password generator and strength analyzer with configurable policies
-
lamport_signature_plus
Lamport one-time signature scheme
-
bellare-micali
1-out-of-2 Oblivious Transfer Protocol
-
sha3-kmac
KMAC per NIST SP 800-185
-
proxy-signatures
Proxy signatures with delegation by warrant
-
paillier
A pure-Rust implementation of the Paillier encryption scheme
-
pqc-nostd
PQC no_std no_alloc Kyber Dilithium embedded 100% Rust
-
rpgpie-sop
Experimental SOP implementation based on rpgpie
-
Cupcake
lattice-based additive homomorphic encryption scheme
-
lowmc-rs
LowMC block cipher implementation in Rust
-
hasher
Package hasher provides a Hasher trait
-
mls-rs-crypto-webcrypto
SubtleCrypto based CryptoProvider for supporting mls-rs in a browser
-
vitaminc-permutation
Secure Permutation functions. Part of the Vitamin-C cryptographic suite.
-
nostro2-signer
Nostro2 is a simple toolset for interacting with the Nostr protocol
-
septid
Pure Rust implementation of the spiped protocol
-
threatflux-hashing
High-performance async file hashing library supporting MD5, SHA256, SHA512, and BLAKE3
-
akv-cli
Azure Key Vault CLI (unofficial) can read secrets from Key Vault, securely pass secrets to other commands or inject them into configuration files, encrypt and decrypt secrets, and managed keys and secrets in Key Vault
-
wacore-appstate
Appstate for WhatsApp protocol
-
sigma-proof-compiler
creating and verifying sigma protocols (zero-knowledge proofs of knowledge) using symbolic computation over elliptic curves
-
chksum-sha2-224
SHA-2 224 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
sharks
Fast, small and secure Shamir's Secret Sharing library crate
-
ipcrypt2
format-preserving encryption of IP addresses. Supports both deterministic and non-deterministic encryption modes
-
rsop-oct
SOP CLI tool for OpenPGP card devices based on rPGP
-
plain-aes
Rijndael's cipher, commonly known as AES
-
cosmian_rust_nist_ec_provider
Pure-Rust NIST elliptic-curves provider
-
cosmian_kyber
post-quantum Kyber KEM algorithm. This is a fork of the
pqc_kybercrate -
voided-core
Core cryptographic primitives for the Voided encryption library
-
curve25519-entropic
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
uselesskey-x509
X.509 self-signed and chain certificate fixtures with negative variants for tests
-
libpaillier
The Paillier cryptosystem is a public key crytosystem based on composite degree residuosity classes. Paillier ciphertexts are homorphic in that the can be added
-
fn-dsa-comm
FN-DSA signature scheme
-
aerovault-cli
CLI for AeroVault v2 encrypted vaults
-
jwt-rustcrypto
encoding, decoding, and validating JSON Web Tokens (JWTs) implemented using Rust Crypto libraries
-
test_findex_server
Run a test Findex server for testing purposes
-
dcrypt-symmetric
Symmetric encryption algorithms for the dcrypt library
-
rand_jitterentropy
rand implementation for jitterentropy-library in Rust
-
open-agent-id
Open Agent ID Rust SDK - Register, sign, and verify AI agent identities
-
wasi-crypto
Experimental implementation of the WASI cryptography APIs
-
schnorr
Signatures
-
nethsm-config
working with application configuration files for Nitrokey NetHSM devices
-
sqisign-core
Core types and traits for SQIsign post-quantum signature scheme
-
concrete-core
Concrete is a fully homomorphic encryption (FHE) library that implements Zama's variant of TFHE
-
awol2005ex_kerberos_constants
Constants used by different objects and actors of the Kerberos protocol
-
mpc-relay-server
Noise protocol websocket relay server for MPC/TSS applications
-
pakery-core
Shared utilities for PAKE protocol implementations
-
picnic-sys
Declarations for using Picnic's shared library
-
openpgp-cert-d
Shared OpenPGP Certificate Directory
-
oqs-safe
Stable, minimal, safe Rust wrapper over libOQS for PQ KEM/SIG (ML-KEM/Dilithium) with explicit mock-only dev mode
-
sha2-compress
SHA2 compress function
-
p12_polyfill
Allows to use pkcs12 generated by openssl v1 in rustls and native-tls (vendored openssl-src v3)
-
infisical
Official Rust SDK for Infisical
-
lib2fas
Unofficial implementation of 2fas for Rust (as a library)
-
eternaltwin_password
Password implementation
-
neuron-crypto-hardware
Stub crypto provider for PKCS#11 / YubiKey PIV hardware tokens
-
shadow-messaging
End-to-end encrypted messaging with secure channels and offline queues for Shadow Network
-
freebird-crypto
Cryptographic primitives for the Freebird privacy-preserving authentication system, including VOPRF implementation
-
chacha20
stream cipher (RFC 8439) implemented in pure Rust using traits from the RustCrypto
ciphercrate, with optional architecture-specific hardware acceleration (AVX2, SSE2). Additionally provides the ChaCha8… -
libcrux-poly1305
Formally verified Poly1305 MAC library
-
rustls-openssl
Rustls crypto provider for OpenSSL
-
centipede
A scheme for instantiating KMS's with recovery
-
secret-box
Safe boxing mechanism for sensitive values with automatic zeroization
-
apfsds-crypto
Cryptographic primitives for APFSDS (X25519, AES-GCM, Ed25519)
-
rs_sha1
rs_sha1is a Rust implementation of the SHA-1 cryptographic hash algorithm, part of the largerrs_shieldproject. This package provides SHA-1 hashing functionality in a standalone manner… -
aead-io
A wrapper around Write/Read interfaces with AEAD
-
fuzzytags
a probabilistic cryptographic structure for metadata resistant tagging
-
openmls_libcrux_crypto
A crypto backend for OpenMLS based on libcrux implementing openmls_traits
-
certify
Generate client cert with CA cert
-
sha3_ce
SHA-3 (Keccak) hash function
-
semaphore-rs-ark-zkey
Rust support library for Semaphore
-
arcanum-symmetric
Symmetric encryption algorithms for the Arcanum cryptographic engine
-
simple_comms
communication protocol for AH
-
phasher
CLI program hashing passwords into PHC strings
-
lakers-shared
EDHOC crypto library constants crate
-
poly1305
universal hash function and message authentication code
-
ilari_l/btls
Relatively bare-bones TLS (Transport Layer Security) implementation
-
dstu8845
Strumok (DSTU 8845:2019)
-
secr
secret manager
-
bcrypt-no-getrandom
Easily hash and verify passwords using bcrypt without getrandom or zeroize, providing near-complete functionality without alloc or std
-
cryptirust
A flexible password generator that creates pronounceable passwords with adjustable entropy and custom patterns
-
uselesskey-jsonwebtoken
jsonwebtoken adapter traits for uselesskey fixtures (EncodingKey/DecodingKey)
-
zerovault
Fort-Knox document encryption vault with defense-in-depth security
-
des
Triple DES (3DES, TDES) block ciphers implementation
-
hashes
cryptographic hash function algorithms
-
pkloong-kcapi-sys
Low-level Rust FFI bindings and build integration for libkcapi
-
libcold
High-assurance crypto protocol library for Coldwire messenger (Strandlock implementation)
-
idprova-core
Core library for IDProva — AI agent identity, delegation, and audit
-
aead
Traits for Authenticated Encryption with Associated Data (AEAD) algorithms, such as AES-GCM as ChaCha20Poly1305, which provide a high-level API
-
randompass
🔑 A simple static password generator
-
tsumiki-pkcs
PKCS standards (PKCS#1, PKCS#8, PKCS#9, SEC1) for cryptographic key handling
-
lsx
A pure, safe Rust implementation of the Twofish block cipher and the SHA-256 cryptographic hash function
-
rust-sign
Document signing library using BLAKE3 hashing and Ed25519 signatures
-
agent-uri-attestation
PASETO v4.public attestation for agent-uri
-
hpke_pq
Fork of hpke that adds PQ modes
-
x509cert
anypki fork of X.509 certificate parser and utility functionality
-
sunscreen_tfhe
contains the Sunscreen Torus FHE (TFHE) implementation
-
ssh-cipher-fork-arti
Pure Rust implementation of SSH symmetric encryption including support for the modern aes128-gcm@openssh.com/aes256-gcm@openssh.com and chacha20-poly1305@openssh.com algorithms as well as legacy support for older…
-
bergshamra-enc
XML Encryption for Bergshamra XML Security library
-
oqs-sys
Bindings to liboqs
-
lockman
A secure implementation for managing encrypted files
-
ed25519
Edwards Digital Signature Algorithm (EdDSA) over Curve25519 (as specified in RFC 8032) support library providing signature type definitions and PKCS#8 private key decoding/encoding support
-
pqcrypto-hqc
Post-Quantum Key-Encapsulation Mechanism hqc
-
pki
Public key infrastructure tools for Rust
-
chewie-crypto
Cryptographic primitives and secret management for Rust applications
-
argonautica
Idiomatic Argon2 password hashing for Rust
-
p521
Pure Rust implementation of the NIST P-521 (a.k.a. secp521r1) elliptic curve as defined in SP 800-186
-
aes256ctr_poly1305aes
Pure Rust implementation of the AES256CTR-Poly1305AES Authenticated Encryption with optional architecture-specific hardware acceleration
-
vitaminc-random
Secure Random Number Generation. Part of the Vitamin-C cryptographic suite.
-
remolab-passgen
A secure, deterministic password generator with both CLI and interactive modes
-
cosmian_fpe
Format-preserving encryption
-
chksum-sha2-384
SHA-2 384 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
rust-config-secrets
encrypting and decrypting secrets within configuration files
-
kyber-rs
A toolbox of advanced cryptographic primitives for Rust
-
star-sharks
Shamir's Secret Sharing library for the STAR protocol
-
uselesskey-core-negative-der
DER-focused negative fixture builders for deterministic corruption in uselesskey
-
ecdsa_verify
ECDSA signature verification
-
QuantCrypt
post-quantum cryptography and PKI
-
perfgate-sha256
Minimal SHA-256 implementation for perfgate fingerprinting
-
pgp-cleartext
PGP cleartext framework implementation
-
secrets-nats-kv
A secrets backend for wasmCloud that uses NATS as a key-value store
-
envvault
A secure environment variable management tool with encryption and team collaboration features
-
stegosaurust
A steganography tool, written in rust
-
libhydrogen
A modern and easy to use cryptography library
-
vial-core
Crypto primitives for encrypting / decrypting for Vial
-
curve25519-dalek-organism
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
ysfed
encrypting and decrypting files using a password
-
maybenot-machines
A collection of useful Maybenot machines (e.g., as parts of defenses)
-
simple-encrypt
file encryption tool using AES-GCM
-
srp-conflux
Secure Remote Password (SRP) protocol implementation
-
frost-secp256k1-tr-unofficial
A Schnorr signature scheme over the secp256k1 curve that supports FROST and Taproot
-
sequoia-keystore
Sequoia's private key store server
-
ockam_multiaddr
multiformats.io/multiaddr
-
wasi-crypto-guest
Example WASI-Crypto guest bindings for Rust
-
tafrah-traits
Shared traits and error types for the Tafrah PQC library
-
test-x25519-dalek
X25519 elliptic curve Diffie-Hellman key exchange in pure-Rust, using curve25519-dalek
-
rust_mobile_secrets_vault
A secure, encrypted secrets vault for mobile-backend or embedded Rust services with versioning and key rotation
-
tfhe-cuda-backend
Cuda implementation of TFHE-rs primitives
-
babyjubjub-rs
BabyJubJub elliptic curve implementation
-
sopass
command line password manager using SOP
-
commit-reveal
SHA256-based commit-reveal scheme for fair P2P verification
-
libcrux-psq
Libcrux Pre-Shared post-Quantum key establishement protocol
-
monerochan-curves
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
timely-pass-sdk
A secure, time-based password policy manager SDK
-
neo-crypto
An encryption algorithm library written in Rust
-
secret_integers
Wrapping around Rust's integers to allow only constant-time operations
-
tsumiki
Core traits for X.509 certificate parsing and handling
-
rust-auth-utils
port of @better-auth/utils
-
cosmian_ffi_utils
Cosmian FFI tools library
-
c255b3
Schorr signatures based Curve25519 and Blake3
-
carbon-curve25519-dalek
A pure-Rust implementation of group operations on ristretto255 and Curve25519
-
mls-rs-crypto-rustcrypto
RustCrypto based CryptoProvider for mls-rs
-
enigma-protocol
High-level orchestrator that composes the Enigma crates into a production-ready messaging protocol
-
secure-vault
A secure memory vault that protects sensitive data from memory dumps and swap disk attacks
-
crabcrypt
A work in progress cryptographic library that currently supports hashing
-
jws
JSON Web Signature for Rust
-
tafrah-abi
C ABI layer for Tafrah PQC primitives
-
fash
cross-platform GUI-app for calculating hashes of files and comparing them to supplied hashes
-
x25519-dalek-ng
fork x25519-dalek , update rand_core
-
cargo-sealed
CLI for storing encrypted environment variables in .env files
-
pwned
Have I Been Pwned checker
-
dusk-hades
Hades252 permutation algorithm over the Bls12-381 Scalar field
-
base16ct
Pure Rust implementation of Base16 a.k.a hexadecimal (RFC 4648) which avoids any usages of data-dependent branches/LUTs and thereby provides portable "best effort" constant-time operation…
-
cloudproof_fpe
Cosmian Cloudproof FPE library
-
nonce-extension
Derive-Key-AES and Double-Nonce-Derive-Key-AES nonce extension mechanisms (DNDK-GCM)
-
cryptographic_primitives
that provides cryptographic primitives
-
auths-id
Multi-device identity and attestation crate for Auths
-
pakery-spake2
SPAKE2 balanced PAKE protocol (RFC 9382)
-
sqisign-lvl3
SQIsign post-quantum signature scheme - NIST Security Level 3
-
lockboxer
Configurable fork of Lockbox encryption library
-
iron_secrets
Secrets management and encryption for Iron Cage
-
block-buffer
Buffer types for block processing of data
-
kcr_gateway_networking_x_k8s_io
Kubernetes Custom Resource Bindings
-
sgx_ucrypto
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
paseto-v1
PASETO/PASERK V1 based on RustCrypto
-
tor-relay-crypto
Cryptography types and helpers for a Tor relay
-
kcr_kafka_services_k8s_aws
Kubernetes Custom Resource Bindings
-
normfs-crypto
Cryptographic primitives for NormFS (AES-256-GCM encryption, Ed25519 signatures)
-
libcrux-curve25519
Formally verified curve25519 ECDH library
-
test-ed25519-dalek
Fast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust
-
sigillum-daemon
Sigillum vault daemon with web UI and REST API
-
anubis-core
Common functions used across the anubis crates (hybrid PQC support)
-
neuron-crypto-vault
Stub crypto provider for Vault Transit engine
-
kcr_trust_cert_manager_io
Kubernetes Custom Resource Bindings
-
sop
Rust Interface for the Stateless OpenPGP Interface
-
digest-hash
Cryptography-grade data structure hashing
-
static-dh-ecdh
Pure Rust implementations of static Diffie-Hellman and elliptic curve Diffie-Hellman key-exchange
-
vk-separate
A CLI tool to remove Committer key from Verification key in Nova protocol
-
fn-dsa-vrfy
FN-DSA signature scheme
-
polyval
GHASH-like universal hash over GF(2^128) useful for constructing a Message Authentication Code (MAC)
-
digestify
Verify a file against a provided digest/hash/checksum
-
fermah-config
Fermah configuration profiles utility
-
portal-relay
The relay for Portal, a secure file transfer protocol
-
acme-v2
requesting certificates from an ACME V2 provider
-
jwt-next
JSON Web Token library
-
tectonic-fn-dsa
FN-DSA signature scheme
-
penis
Protocol
-
cms
Pure Rust implementation of the Cryptographic Message Syntax (CMS) as described in RFC 5652 and RFC 3274
-
age-plugin-simplepq
Post-Quantum plugin for age clients based on ML-KEM
-
iroh-localops
Iroh specific process management
-
sumatradigest
A Memory-Safe Hash Digest Tool Written In Rust
-
edcert
can be used to sign and verify content based on Ed25519
-
hash-gen
A command-line tool for generating cryptographic hashes (MD5, SHA1, SHA-256, SHA-512)
-
const-ciphers
Ciphers implemented as constant expressions in Rust for use in payload generation. Not for regular use.
-
shadow-crypto
Cryptographic primitives for Shadow Network: ChaCha20-Poly1305, X25519, Ed25519, BLAKE3
-
ironcrypt
secure password hashing, RSA key generation, and managing the encryption and verification of passwords and binary files
-
kylix-slh-dsa
SLH-DSA (FIPS 205) implementation for the Kylix post-quantum cryptography library
-
cloakpipe-vector
Vector encryption (ADCPE) for CloakPipe — future scope
-
tiny-curve
Small-order elliptic curves for testing
-
fdh
Full Domain Hash (FDH) for extending the size of a hash digest to an arbitrary length
-
btls-sys
FFI bindings to BoringSSL
-
novault
vaultless password management cli
-
dcap-provider
DCAP quote provider using the Intel Trusted Services API as a backend. This crate compiles into
libdcap_quoteprov.so, which is needed as a backend when usinglibsgx_dcap_ql. To use this library… -
uselesskey-core-keypair-material
PKCS#8/SPKI key-material helpers shared by key fixture crates
-
uselesskey-rustcrypto
RustCrypto adapter traits for uselesskey RSA/ECDSA/Ed25519/HMAC fixtures
-
sequoia-sop
Stateless OpenPGP Interface using Sequoia
-
rusterpassword
Master Password algorithm
-
deterministic-pgp-keys
Generate PGP keys from a 12 word seed phrase
-
yafo
file obfuscator
-
bicycl-rs-sys
Low-level Rust FFI bindings for BICYCL C API
-
cosmian_rust_curve25519_provider
Pure-Rust Curve25519 provider
-
sshd-openpgp-auth
Command-line tool for creating and managing OpenPGP based trust anchors for SSH host keys
-
sigma-protocols
SIGMA zero-knowledge proof protocols
-
lit-p384
Pure Rust implementation of the NIST P-384 (a.k.a. secp384r1) elliptic curve as defined in SP 800-186 with support for ECDH, ECDSA signing/verification, and general purpose curve arithmetic support.
-
runar-keys
Standards-compliant X.509 certificates and ECDSA P-256 key management for Runar
-
primeorder
Pure Rust implementation of complete addition formulas for prime order elliptic curves (Renes-Costello-Batina 2015). Generic over field elements and curve equation coefficients
-
concrete-boolean
Homomorphic Boolean circuit interface for the concrete FHE library
-
cosmian_abe_gpsw
ABE GPSW scheme for BLS pairing implemented in rust
-
envelopers
A very simple envelope encryption library using aes-gcm
-
arcturus
zero-knowledge proofs for confidential transactions
-
lit-frost-schnorrkel25519
A Schnorr signature scheme over the prime-order Ristretto group that supports FROST
-
tink-gcpkms
AWS-KMS integration for Rust port of Google's Tink cryptography library
-
sealed-env
Read and decrypt sealed environment variables
-
sec-store
encrypted storage
-
dasher
reducing a whole directory tree to a single hash digest
-
etsi014-client
ETSI GS QKD 014 client library
-
ockam_identity
Ockam is a library for building devices that communicate securely, privately and trustfully with cloud services and other devices
-
rand_hash
Cryptographically-secure pseudo-random generator based on cryptographic hash function
-
valinor-identity
Cryptographic identity and key management for MudWorld platform
-
dcrypt-common
Common implementations and shared functionality for the dcrypt library
-
tycho-crypto
Cryptography primitives for Tycho node
-
llm-config-crypto
Cryptography primitives for LLM Config Manager - AES-256-GCM encryption, key derivation, and secure key management
-
picnic-bindings
Bindings for the Picnic digital signature scheme
-
pqcrypto-classicmceliece
Post-Quantum Key-Encapsulation Mechanism classicmceliece
-
uselesskey-aws-lc-rs
aws-lc-rs adapter traits for uselesskey RSA/ECDSA/Ed25519 fixtures
-
hpke-rs-libcrux
Crypto backend for HPKE using formally verified code from libcrux
-
oberon
multi-factor zero-knowledge capable token without requiring email, SMS, or authenticator apps. The proof of token validity is only 96 bytes while the token itself is only 48 bytes
-
zkp
A toolkit for auto-generated implementations of Schnorr proofs
-
semaphore-rs-poseidon
Rust support library for Semaphore
-
mux_circuits
contains the Sunscreen Torus FHE (TFHE) implementation
-
tfhe-csprng
Cryptographically Secure PRNG used in the TFHE-rs library
-
sequoia-keystore-softkeys
A soft key (in-memory key) backend for Sequoia's private key store
-
groestl-aesni
Hardware-accelerated Groestl hash for x86-64 systems with AES extensions
-
ockam_transport_udp
UDP Transport for the Ockam Routing Protocol
-
votate-ed25519-dalek
Fast and efficient ed25519 EdDSA key generations, signing, and verification in pure Rust
-
burrito-secrets
storing secrets in BSON format
-
ec-generic
A generic use elliptic curve library
-
fips203-ffi
C shared library exposing FIPS 203: Module-Lattice-Based Key-Encapsulation Mechanism
-
generic-ec-zkp
ZK-proofs and primitives built on top of
generic-eccrate -
idevice-srp
Secure Remote Password (SRP) protocol implementation for the idevice crate
-
pakery-spake2plus
SPAKE2+ augmented PAKE protocol (RFC 9383)
-
sn_bulletproofs
A pure-Rust implementation of Bulletproofs using Ristretto
-
vaultkey
A secure and customizable password generator library for Rust, designed to create strong, random passwords with various configuration options
-
networking
secure RSA + AES network implementations in a peer to peer enabled manner
-
uselesskey-tonic
tonic transport TLS adapters for uselesskey X.509 certificate fixtures
-
c2pa-crypto
Cryptography internals for c2pa-rs crate
-
age-plugin-openpgp-card
Age plugin for using ed25519 on OpenPGP Card devices (Yubikeys, Nitrokeys)
-
tdln-proof
TDLN — proof bundle (deterministic translation proof + optional DV25 signatures)
-
uselesskey-core-x509-negative
X.509 negative-fixture policy helpers for uselesskey
-
obfustr
compile-time obfuscation of string literals (also byte and C strings)
-
ibs
Identity-Based Signature schemes
-
rustls-pemfile
Basic .pem file parser for keys and certificates
-
ocb3
Pure Rust implementation of the Offset Codebook Mode v3 (OCB3) Authenticated Encryption with Associated Data (AEAD) Cipher as described in RFC7253
-
salsa20
Pure Rust implementation of the Salsa20 stream cipher
-
chksum-sha2-512
SHA-2 512 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
sgx_crypto_helper
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language
-
libsignal-protocol-syft
Vendored libsignal protocol crate for syft
-
ed448-goldilocks
A pure-Rust implementation of Ed448 and Curve448 and Decaf. This crate also includes signing and verifying of Ed448 signatures
-
seedstore-tool
Store a secret (such as a private key) in an encrypted file
-
hips
Manage secrets alongside your code
-
cyphergraphy
Implementation-independent abstractions for main cryptographic algorithms (part of cyphernet suite)
-
aes-kw
NIST 800-38F AES Key Wrap (KW) and Key Wrap with Padding (KWP) modes
-
keynesis
General purpose key management and associated cryptographic protocols
-
blahaj
Fast, small, and secure Shamir's Secret Sharing
-
ml-kem
Pure Rust implementation of the Module-Lattice-Based Key-Encapsulation Mechanism Standard (formerly known as Kyber) as described in FIPS 203
-
talktosc
talk to smartcards for OpenPGP operations
-
secret_handshake
secret-handshake protocol
-
vitaminc-kms
AWS KMS implementation for Vitamin C traits
-
cmac
Generic implementation of Cipher-based Message Authentication Code
-
chksum-sha2
SHA-2 hash functions with a straightforward interface for computing digests of bytes, files, directories, and more
-
block-padding
Padding and unpadding of messages divided into blocks
-
pq-envelope
Post Quantum Hybrid Encryption for multiple recipients
-
sentc-crypto-fips-keys
Fips compliant key impl with openssl
-
sqisign-lvl1
SQIsign post-quantum signature scheme - NIST Security Level 1
-
eczkp
Zero Knowledge Proof protocols using elliptic curves
-
chacha20-poly1305-stream
A pure Rust implementation of the ChaCha20-Poly1305 AEAD from RFC 7539
-
rcrypto
cryptography library
-
paseto-v3
PASETO/PASERK V3 based on RustCrypto
-
kcr_kms_services_k8s_aws
Kubernetes Custom Resource Bindings
-
yage
manage encrypted secrets in YAML files with age encryption
-
xoodyak
/ Xoodoo - A versatile cryptographic scheme that can be used for hashing, encryption, MAC computation and authenticated encryption
-
cose-rust-plus
COSE Rust implementation
-
capy_kem
ML-KEM with MAL-BIND Security
-
aranya-aqc-util
Aranya QUIC Channels
-
primefield
Generic implementation of prime fields built on
crypto-bigint, along with macros for writing field element newtypes including ones with formally verified arithmetic usingfiat-crypto -
wot-network-rpgpie
Transform OpenPGP certificate sets into a wot-network structure
-
seekable-stream-cipher
Seekable stream cipher and encryption/decryption
-
rfc6979
Pure Rust implementation of RFC6979: Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA)
-
vios_app
Small JSON vaults: Argon2id + AES-GCM, with optional AAD binding
-
jh-x86_64
Portable JH with optimizations for x86-64 cpus
-
libjitterentropy-sys
interface to jitterentropy-library (ffi-bindings)
-
keyden
CLI and library for managing, rotating, and generating secret keys safely
-
libcrux-digest
Digest library
-
lit-frost-ristretto255
A Schnorr signature scheme over the prime-order Ristretto group that supports FROST
-
sure25
hashing algorithm
-
jwt-simple-no-nbf-fork
Easy to use, secure, non opinionated JWT (JSON Web Tokens) implementation for Rust
-
cyfs-sha2
Pure Rust implementation of the SHA-2 hash function family including SHA-224, SHA-256, SHA-384, and SHA-512
-
layer-crypto
Cryptographic primitives for Telegram MTProto: AES-IGE, RSA, SHA-1/256, auth key derivation
-
pakery-cpace
CPace balanced PAKE protocol (draft-irtf-cfrg-cpace)
-
core-identity
Identity management and DID resolution for P47H
-
nma4
Rust bindings for the libnma library
-
monerochan-core-machine
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
uselesskey-jwk
Compatibility facade re-exporting typed JWK/JWKS models and builders
-
pqcrypto-ntru
Post-Quantum Key-Encapsulation Mechanism ntru
-
ssh-cipher
Pure Rust implementation of SSH symmetric encryption including support for the modern aes128-gcm@openssh.com/aes256-gcm@openssh.com and chacha20-poly1305@openssh.com algorithms as well as legacy support for older…
-
frost-ed25519-blake2b
A Schnorr signature scheme over Ed25519 that supports FROST
-
sunscreen_gpu_runtime
GPU support for Sunscreen's Torus FHE (TFHE) implementation
-
nostr-types
Types for nostr protocol handling
-
ark-ed-on-bn254-zypher
A Twisted Edwards curve defined over the scalar field of the BN254 curve
-
ecies-ed25519
ECIES on Twisted Edwards Curve25519 using AES-GCM and HKDF-SHA256
-
tsumiki-asn1
ASN.1 object representation and parser for X.509 certificates
-
p384
Pure Rust implementation of the NIST P-384 (a.k.a. secp384r1) elliptic curve as defined in SP 800-186 with support for ECDH, ECDSA signing/verification, and general purpose curve arithmetic support.
-
fluxencrypt-async
Async/await support for FluxEncrypt encryption SDK
-
bulletproof-kzen
Bulletproofs and Bulletproofs+ aggregated range proofs with multi-exponent verification
-
sequoia-net
Network services for OpenPGP
-
spake2
password-authenticated key-exchange algorithm
-
pake-cpace
CPace, a balanced PAKE
-
ockam_abac
Attribute based authorization control
-
yubikey
Pure Rust cross-platform host-side driver for YubiKey devices from Yubico with support for hardware-backed public-key decryption and digital signatures using the Personal Identity Verification (PIV)…
-
fcp_cryptoauth
Futuristic Connectivity Protocol's CryptoAuth layer (cryptographic authentication and encryption over unreliable channels)
-
crev-ed25519-dalek
Fork of ed25519-dalek for
crev(until mainline is usable for us again) -
miracl_amcl
The Apache Milagro Cryptographic Library (version 3.2)
-
best-encrypt
A top-level secrets orchestrator. Not just another .env tool — this one encrypts, locks, and sets you up for secure local and team dev.
-
zks_types
Core types and data structures for ZKS Protocol
-
dlog-sigma-primitives
Collection of cryptographic primitives built on top of Elliptic Curve groups, with a focus on Zero-Knowledge Proofs
-
sunscreen_fhe_program
data format for Sunscreen FHE programs
-
chksum-sha2-256
SHA-2 256 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
uselesskey-ring
ring 0.17 adapter traits for uselesskey RSA/ECDSA/Ed25519 fixtures
-
frodo-kem-rs
A pure rust implementation of FrodoKEM and eFrodoKEM
-
vitaminc-traits
Vitamin C traits
-
p384_rs
NIST P-384 (secp384r1), with correct arithmetic
-
ockam_vault
A software-only Ockam Vault implementation
-
mls-rs-core
Core components and traits for mls-rs
-
sqisign-lvl5
SQIsign post-quantum signature scheme - NIST Security Level 5
-
semaphore-rs-hasher
Rust support library for Semaphore
-
cryptojs_rust
CryptoJS encryption/decryption functionality
-
krb5-sys
Bindings to the krb5 library, incomplete state
-
sequoia-gpg-agent
interacting with GnuPG's gpg-agent
-
bulletproofs-bls
A pure-Rust implementation of Bulletproofs
-
cryptohelpers
Collection of helpers and simplifying functions for cryptography things
-
signature_ps
The Ockam PS signature impementation
-
plonkup
A pure-Rust implementation of the PLONK ZK-Proof algorithm
-
aes-siv
Pure Rust implementation of the AES-SIV Misuse-Resistant Authenticated Encryption Cipher (RFC 5297) with optional architecture-specific hardware acceleration
-
paseto-v2
PASETO/PASERK V2 based on RustCrypto
-
softaes
Fast software implementation of the AES round function in pure Rust
-
uselesskey-core-x509-spec
X.509 fixture spec models and stable encoders for uselesskey
-
ark-ed-on-bls12-381-zypher
A Twisted Edwards curve defined over the scalar field of the BLS12-381 curve
-
tsumiki-der
DER (Distinguished Encoding Rules) parser for ASN.1 structures
-
bcrypt-pbkdf
password-based key derivation function
-
pkcs1
Pure Rust implementation of Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.2 (RFC 8017)
-
pvss
Publicly verifiable secret sharing implementations
-
sigillum-server
Sigillum vault server library for custom deployments
-
md-5
MD5 hash function
-
monerochan-verifier
Verifier for MONEROCHAN Groth16 and Plonk proofs
-
askrypt
Password manager without master password
-
openssl-errors
Custom error library support for the openssl crate
-
dsa
Pure Rust implementation of the Digital Signature Algorithm (DSA) as specified in FIPS 186-4 (Digital Signature Standard), providing RFC6979 deterministic signatures as well as support for added entropy
-
uselesskey-core-sink
Tempfile-backed artifact sinks used by uselesskey
-
uselesskey-core-x509-chain-negative
X.509 chain negative-fixture policy helpers for uselesskey
-
vitaminc-async-traits
Vitamin C async traits
-
concrete-commons
Common tools for the concrete FHE library
-
chksum-reader
A convenient interface for calculating hash digests on the fly while reading data from a reader
-
pasta-tokens
Platform Agnostic SEcurity TOkens (PASETO) is a secure alternative to JOSE/JWT
-
lit-frost-decaf377
A Schnorr signature scheme over the Decaf377 curve that supports FROST
-
uselesskey-core-kid
Deterministic key-id helpers for uselesskey fixture crates
-
rudric
CLI tool for managing secrets in a secure way
-
libcrux
The Formally Verified Cryptography Library
-
chksum-sha1
SHA-1 hash function with a straightforward interface for computing digests of bytes, files, directories, and more
-
ssh-encoding
Pure Rust implementation of SSH data type decoders/encoders as described in RFC4251
-
sigillum-sdk
Embeddable SDK for Sigillum vault integration
-
libcrux-rsa
Formally verified RSA signature library
-
lit-frost-ed25519
A Schnorr signature scheme over Ed25519 that supports FROST
-
ockam_entity
Ockam is a library for building devices that communicate securely, privately and trustfully with cloud services and other devices
-
nettle
Rust bindings for the Nettle cryptographic library
-
blowfish
block cipher
-
sigillum-cli
Command-line interface for Sigillum vault management
-
sha1-checked
SHA-1 hash function with collision detection
-
ctutils
Constant-time utility library with selection and equality testing support targeting cryptographic applications. Supports
const fnwhere appropriate. Built on thecmovcrate which provides… -
sequoia-keystore-backend
Traits for private key store backends
-
nostr_rust
Nostr protocol
-
seal_fhe
contains Rust bindings for Microsoft's SEAL Fully Homomorphic Encryption (FHE) library
-
pep_engine_sequoia_backend
p≡p Engine's cryptotech interface using Sequoia
-
chksum-writer
A convenient interface for calculating hash digests on the fly while writing data to a writer
-
ubl-crypto
UBL crypto helpers: SK wrapper, KID, HMAC, did:key, batch verify for Universal Business Ledger
-
ockam_transport_tcp
TCP Transport for the Ockam Routing Protocol
-
pqcrypto-frodo
Post-Quantum Key-Encapsulation Mechanism frodo
-
tsumiki-pem
PEM format parser and encoder for X.509 certificates
-
libcrux-blake2
Formally verified blake2 hash library
-
libpass
interacting with pass managed data
-
monerochan-cuda
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
pqcrypto-rainbow
Post-Quantum Signature Scheme rainbow
-
keylock
A CLI application starter template
-
ockam_vault_test_suite
Ockam Vault test suite
-
tectonic-oqs-sys
Bindings to liboqs
-
uselesskey-core-token-shape
Token shape generation primitives shared across uselesskey token crates
-
jwt-compact-preview
Minimalistic JWT implementation with focus on type safety and secure cryptographic primitives
-
redoubt-vault
Encrypted vault with field-level access and automatic zeroization
-
yubihsm
Pure Rust client for YubiHSM2 devices with support for HTTP and USB-based access to the device. Supports most HSM functionality including ECDSA, Ed25519, HMAC, and RSA.
-
uselesskey-rsa
RSA key fixtures (PKCS#8/SPKI, PEM/DER) with negative variants for tests
-
uselesskey-ecdsa
ECDSA P-256/P-384 key fixtures (PKCS#8/SPKI, PEM/DER) for tests
-
ascon-aead
authenticated encryption schemes Ascon-AEAD128
-
rustcrypto-group
Elliptic curve group traits and utilities
-
evercrypt
Crypto library using formally verified code from HACL/Evercrypt
-
serdect
Constant-time serde serializer/deserializer helpers for data that potentially contains secrets (e.g. cryptographic keys)
-
lit-frost-taproot
A Schnorr signature scheme over the secp256k1 curve that supports FROST
-
universal-hash
Traits which describe the functionality of universal hash functions (UHFs)
-
uselesskey-core-hash
Length-prefixed hashing helpers shared by deterministic fixture derivation paths
-
crypto_secretbox
Pure Rust implementation of the XSalsa20Poly1305 (a.k.a. NaCl crypto_secretbox) authenticated encryption cipher as well as the libsodium variant of XChaCha20Poly1305
-
secretik
Opinionated cli tool for encrypting secrets
-
keccak
Pure Rust implementation of the Keccak sponge functions
-
sealed_box
Libsodium sealed_box construction for Rust/WebAssembly
-
finneo_crypto
Cross-platform AES-256-GCM encryption with Argon2id key derivation used in Finneo
-
rocca
ROCCA-S authenticated cipher
-
md4
MD4 hash function
-
monerochan-build
Build an MONEROCHAN program
-
ockam_executor
Ockam async executor crate
-
concrete-npe
Noise parameter estimator for the concrete FHE library
-
kcr_appprotect_f5_com
Kubernetes Custom Resource Bindings
-
concrete_lib
Concrete is a fully homomorphic encryption (FHE) library that implements Zama's variant of TFHE
-
sequoia-keystore-server
Sequoia keystore daemon
-
lit-frost-secp256k1
A Schnorr signature scheme over the secp256k1 curve that supports FROST
-
sequoia-keystore-openpgp-card
An OpenPGP card backend for Sequoia's private key store
-
ccm
Generic implementation of the Counter with CBC-MAC (CCM) mode
-
signatory
Multi-provider elliptic curve digital signature library with ECDSA and Ed25519 support
-
lit-frost-redjubjub
A Schnorr signature scheme over the NIST P-256 curve that supports FROST
-
sm3
SM3 (OSCCA GM/T 0004-2012) hash function
-
vsss-rs-std
Verifiable Secret Sharing Schemes for splitting, combining and verifying secret shares
-
uselesskey-core-jwk-builder
JWKS builder with deterministic, stable key ordering
-
ockam_vault_aws
An AWS KMS Ockam Vault implementation
-
sequoia-keystore-gpg-agent
A gpg-agent backend for Sequoia's private key store
-
xaes-256-gcm
Pure Rust implementation of the XAES-256-GCM extended-nonce Authenticated Encryption with Associated Data (AEAD)
-
password-auth
Password authentication library with a focus on simplicity and ease-of-use, including support for Argon2, PBKDF2, and scrypt password hashing algorithms
-
hash2curve
algorithm implementation
-
cfb-mode
Cipher Feedback (CFB) block cipher mode of operation
-
twofish
block cipher
-
ghash
Universal hash over GF(2^128) useful for constructing a Message Authentication Code (MAC), as in the AES-GCM authenticated encryption cipher
-
pqcrypto-saber
Post-Quantum Key-Encapsulation Mechanism saber
-
sequoia-keyring-linter
A linter for keyrings
-
sparx
block ciphers implementations
-
uselesskey-core-jwk-shape
Core JWK shape types used by JWK/JWKS fixtures
-
ockam_node_no_std
Ockam library types that do not need
std -
monerochan-recursion-core
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
signature_core
Signature core types of the Ockam library
-
xaes-gcm
The simplest and safest way to encrypt data using AES-GCM in Rust (AES256-DNDK-GCM)
-
pkcs5
Pure Rust implementation of Public-Key Cryptography Standards (PKCS) #5: Password-Based Cryptography Specification Version 2.1 (RFC 8018)
-
nettle-sys
Low-level Rust bindings for the Nettle cryptographic library
-
idea
IDEA block cipher
-
p224
Pure Rust implementation of the NIST P-224 (a.k.a. secp224r1) elliptic curve as defined in SP 800-186
-
lit-frost-rerandomized
Types and traits to support implementing a re-randomized variant of Flexible Round-Optimized Schnorr Threshold signature schemes (FROST)
-
uselesskey-core-base62
Base62 generation primitives for uselesskey fixture crates
-
base32ct
Pure Rust implementation of Base32 (RFC 4648) which avoids any usages of data-dependent branches/LUTs and thereby provides portable "best effort" constant-time operation and embedded-friendly no_std support
-
uselesskey-core-x509
Deterministic X.509 policy helpers shared by uselesskey fixture crates
-
libcrux-ecdsa
Formally verified ECDSA signature library
-
ockam_vault_sync_core
Syncronous wrapper that allows to have multiple Vault instances, that talk to the same Vault implementation without need for synchronization primitives
-
pqcrypto-ntruprime
Post-Quantum Key-Encapsulation Mechanism ntruprime
-
ockam_key_exchange_core
The Ockam Key Exchange trait
-
camellia
block cipher
-
lit-frost-p384
A Schnorr signature scheme over the NIST P-256 curve that supports FROST
-
monerochan-prover
Monero-Chan, The Open-Source Privacy Platform (OSPP)
-
sigillum-client
Client SDK for connecting to a Sigillum vault daemon
-
whirlpool
hash function