digitalbazaar/forge
Forge
Forge ist eine JavaScript-Kryptografie-Bibliothek, die einen umfassenden Satz an Tools für symmetrische und asymmetrische Verschlüsselung, Hashing und digitale Signaturen bereitstellt. Sie enthält eine vollständige Implementierung von Transport Layer Security (TLS) zum Aufbau sicherer Netzwerkverbindungen und zur Verwaltung verschlüsselten Traffics.
Das Projekt implementiert eine Vielzahl von Public-Key-Infrastruktur-Tools, einschließlich X.509-Zertifikatsverwaltung, Generierung von Certificate Signing Requests (CSR) und Validierung von Zertifikatsketten. Es bietet ein PKCS-Kryptografie-Toolkit für den Umgang mit sicheren Archiven und signierten Nachrichten sowie Unterstützung für SSH-Key-Management und die Konvertierung von Schlüsseln zwischen PEM-, OpenSSH- und PKCS#12-Formaten.
Die Bibliothek deckt ein breites Spektrum an Sicherheitsprimitiven ab, wie Blockchiffre-Verschlüsselung, HMAC-Berechnung und passwortbasierte Schlüsselableitung. Sie enthält zudem Utilities für die Serialisierung binärer Daten mittels ASN.1 DER-Kodierung sowie Datentransformationstools für Base58, Base64 und hexadezimale Formate.
Zusätzliche Funktionen umfassen Low-Level-Netzwerkkommunikations-Utilities für die Handhabung von HTTP-Client-Requests und asynchrone Aufgabenorchestrierung für das Queuing von Hintergrundoperationen.
Features
- Symmetric and Asymmetric Ciphers - Provides a comprehensive suite of symmetric and asymmetric ciphers for encryption and decryption.
- SSL/TLS Connection Security - Provides a full JavaScript implementation of the TLS protocol for secure transport layer connections.
- Binary Serialization Formats - Implements encoding and decoding of structured data into compact binary formats including ASN.1 DER.
- Cryptographic Random Number Generators - Provides a Fortuna-based cryptographically secure pseudo-random number generator.
- X.509 Certificate Parsing and Validation - Provides comprehensive tools for parsing, validating, and managing X.509 certificates.
- X.509 Management Utilities - Includes utilities for X.509 certificate management and the generation of certificate signing requests.
- General ASN.1 DER Parsers - Provides utilities for serializing and deserializing data structures using the ASN.1 DER binary format.
- JavaScript Cryptography Libraries - Provides a comprehensive set of cryptographic primitives and standards implemented in JavaScript.
- General Purpose RSA Key Generation - Enables the creation of public and private RSA key pairs using native APIs or software fallbacks.
- Public Key Infrastructure - Implements lifecycle management for X.509 certificates, including CSR generation and chain validation.
- Secure Network Communication - Implements encrypted data transmission channels to secure network communication.
- General TLS Connection Establishment - Implements a full TLS stack for establishing secure encrypted network connections in JavaScript.
- PKCS and CMS Message Processors - Implements PKCS#7 standards for creating, signing, and decrypting protected messages.
- Cryptographic Prime Generation - Provides generation of large, random probable primes required for asymmetric cryptographic operations.
- Certificate Signing Request Generation - Supports the generation and signing of PKCS#10 certification requests for submission to CAs.
- Cryptographic Hash Generation - Generates cryptographic message digests using various standard hashing algorithms.
- Key Format Converters - Provides utilities to convert cryptographic keys between PEM, OpenSSH, and PKCS#12 formats.
- Ed25519 Verifiers - Provides creation and validation of digital signatures using the Ed25519 curve.
- PKCS12 Archive Support - Provides support for importing and exporting certificates and private keys using PKCS#12 archives.
- HMAC Generation - Implements HMAC computation for verifying data authenticity and integrity.
- Key Encapsulation Interfaces - Implements key encapsulation mechanisms to establish shared secret keys between parties.
- Key Derivation Functions - Implements PBKDF2 to derive cryptographic keys from user passwords.
- PKCS Toolkits - Provides a toolkit for handling PKCS-standard secure archives and signed messages.
- Private Key Import Formats - Supports conversion of private keys between PEM and ASN.1 formats, including encrypted variants.
- Certificate Chain Validation - Validates certificate sequences by checking signatures and validity periods against a trusted store.
- SSH Key Management - Handles the encoding, decryption, and fingerprinting of RSA keys in OpenSSH and PuTTY formats.
- JavaScript Cryptography - Native TLS implementation and network-heavy application tools.
