Cryptographic algorithms written in pure Rust. AEAD encryption, block/stream ciphers, hashes, elliptic curves, RSA, signatures, PKCS/PKIX, and more
Joined April 2020
- Tweets66
- Following0
- Followers1.3K
- Likes25
[ANN] `ssh-key` v0.5.0: now with “sshsig” support (as supported by git v2.34.0 and above)
users.rust-lang.org/t/ann-ss…
The `p384` v0.11.0 crate release now includes a full arithmetic implementation, enabling both ECDSA and ECDH support, using field arithmetic implementations from `fiat-crypto`: github.com/RustCrypto/ellipt…
Rust Crypto retweeted
Excited to use the new `hybrid-array` crate from @RustCryptoOrg ! It's like `generic-array` but with no `unsafe` under the hood, a bridge to using fully-featured const generics in expressions in the not-too-distant Rust future!
docs.rs/hybrid-array
crates.io/crates/hybrid-arra…
Except your favorite niche crypto projects using @RustCryptoOrg 's aes-siv: github.com/RustCrypto/AEADs/…
Our `ecdsa` crate prevents vulnerabilities like Java's CVE-2022-21449 using type safety.
We use a `NonZeroScalar` type to model the `r` and `s` components of an ECDSA signature. This prevents either of them from ever accidentally being zero.
docs.rs/ecdsa/0.13.4/ecdsa/s…
Announcing ssh-key v0.4: now with pure Rust keygen, certificate validation, and SSH CA support
users.rust-lang.org/t/announ…
[ANN] `cmov` v0.1: constant-time conditional move intrinsics for x86/x86_64/aarch64 leveraging @rustlang 1.59's new stable inline assembly
users.rust-lang.org/t/ann-cm…
Announcing initial hash2curve support in the following @RustCryptoOrg elliptic curve crates:
- `k256` v0.10.2 (secp256k1)
- `p256` v0.10.1 (NIST P-256)
Repo: github.com/RustCrypto/ellipt…
See trait documentation here:
docs.rs/elliptic-curve/0.11.…
Rust Crypto retweeted
My sha1 crate is now called sha1_smol for when you need a dependency free version. Major versions of the sha1 crate in the future will refer to the RustCrypto SHA1 implementation. Users of the 0.6 line of sha1 are auto migrated to sha1_smol. github.com/mitsuhiko/sha1-sm…
[ANN] `ssh-key` v0.2.0: no_std-friendly constant-time parser for OpenSSH private/public keys
users.rust-lang.org/t/ann-ss…
[ANN] `crypto-bigint` v0.3.0: @rustlang big integer library designed for cryptography use cases.
Repo: github.com/rustcrypto/crypto…
Docs: docs.rs/crypto-bigint/0.3.0/…
`crypto-bigint` v0.2.6 has been released.
Among other new features, it adds support for encoding `UInt` types using Recursive Length Prefix (RLP) encoding
github.com/RustCrypto/utils/…
Rust Crypto retweeted
"Password auth in Rust, from scratch - Attacks and best practices"
Tutorial on how to do Argon2 in Rust using the @RustCryptoOrg `argon2` crate, part of the "Zero To Production In Rust" series:
lpalmieri.com/posts/password…
[ANN] `rsa` v0.5.0: pure @rustlang implementation of the RSA public key cipher and digital signature algorithm.
This release includes constant-time PEM decoding/encoding for PKCS#1 and PKCS#8 keys.
- repo: github.com/RustCrypto/RSA
- docs: docs.rs/rsa/0.5.0/
Why is constant-time PEM encoding important for an RSA library?
A forthcoming paper illustrates RSA key extraction from SGX enclaves using PEM/Base64 sidechannels alone:
xitter.cf/JanWichelmann/status/1…
Rust Crypto retweeted
In a moment of serendipity I just so happen to have published a new @RustCryptoOrg strict PEM parser which not only uses a constant time Base64 implementation but in the happy path completely avoids any branching or table lookups on potentially secret data
github.com/RustCrypto/utils/…
This quoted post is unavailable.
Updated ECDSA/secp256k1 benchmarks comparing:
- @RustCryptoOrg's pure Rust `k256` crate
- The pure Rust `libsecp256k1` crate
- The `secp256k1` crate (FFI wrapper for the bitcoin-core C library)
Faster is better.
There are many other low-hanging fruit optimizations to pursue as yet.
For example, we don't yet precompute powers of the generator, which would also speed up verification.
We also use constant-time formulas for ECDSA verification. Things might be improved by e.g. wNAF.