digitalbazaar/forge
Forge
Forge es una biblioteca de criptografía en JavaScript que proporciona un conjunto completo de herramientas para cifrado simétrico y asimétrico, hashing y firmas digitales. Incluye una implementación completa de Transport Layer Security (TLS) para establecer conexiones de red seguras y gestionar tráfico cifrado.
El proyecto implementa una amplia gama de herramientas de infraestructura de clave pública (PKI), incluyendo la gestión de certificados X.509, la generación de solicitudes de firma de certificados y la validación de cadenas de certificados. Proporciona un kit de herramientas criptográficas PKCS para manejar archivos seguros y mensajes firmados, junto con soporte para la gestión de claves SSH y la conversión de claves entre formatos PEM, OpenSSH y PKCS#12.
La biblioteca cubre una amplia gama de primitivas de seguridad, como cifrado de cifrado de bloque, cálculo de HMAC y derivación de claves basada en contraseñas. También incluye utilidades para la serialización de datos binarios mediante codificación ASN.1 DER, así como herramientas de transformación de datos para formatos Base58, Base64 y hexadecimal.
Las capacidades adicionales incluyen utilidades de comunicación de red de bajo nivel para el manejo de solicitudes de cliente HTTP y orquestación de tareas asíncronas para poner en cola operaciones en segundo plano.
Features
- Symmetric and Asymmetric Ciphers - Provides a comprehensive suite of symmetric and asymmetric ciphers for encryption and decryption.
- SSL/TLS Connection Security - Provides a full JavaScript implementation of the TLS protocol for secure transport layer connections.
- Binary Serialization Formats - Implements encoding and decoding of structured data into compact binary formats including ASN.1 DER.
- Cryptographic Random Number Generators - Provides a Fortuna-based cryptographically secure pseudo-random number generator.
- X.509 Certificate Parsing and Validation - Provides comprehensive tools for parsing, validating, and managing X.509 certificates.
- X.509 Management Utilities - Includes utilities for X.509 certificate management and the generation of certificate signing requests.
- General ASN.1 DER Parsers - Provides utilities for serializing and deserializing data structures using the ASN.1 DER binary format.
- JavaScript Cryptography Libraries - Provides a comprehensive set of cryptographic primitives and standards implemented in JavaScript.
- General Purpose RSA Key Generation - Enables the creation of public and private RSA key pairs using native APIs or software fallbacks.
- Public Key Infrastructure - Implements lifecycle management for X.509 certificates, including CSR generation and chain validation.
- Secure Network Communication - Implements encrypted data transmission channels to secure network communication.
- General TLS Connection Establishment - Implements a full TLS stack for establishing secure encrypted network connections in JavaScript.
- PKCS and CMS Message Processors - Implements PKCS#7 standards for creating, signing, and decrypting protected messages.
- Cryptographic Prime Generation - Provides generation of large, random probable primes required for asymmetric cryptographic operations.
- Certificate Signing Request Generation - Supports the generation and signing of PKCS#10 certification requests for submission to CAs.
- Cryptographic Hash Generation - Generates cryptographic message digests using various standard hashing algorithms.
- Key Format Converters - Provides utilities to convert cryptographic keys between PEM, OpenSSH, and PKCS#12 formats.
- Ed25519 Verifiers - Provides creation and validation of digital signatures using the Ed25519 curve.
- PKCS12 Archive Support - Provides support for importing and exporting certificates and private keys using PKCS#12 archives.
- HMAC Generation - Implements HMAC computation for verifying data authenticity and integrity.
- Key Encapsulation Interfaces - Implements key encapsulation mechanisms to establish shared secret keys between parties.
- Key Derivation Functions - Implements PBKDF2 to derive cryptographic keys from user passwords.
- PKCS Toolkits - Provides a toolkit for handling PKCS-standard secure archives and signed messages.
- Private Key Import Formats - Supports conversion of private keys between PEM and ASN.1 formats, including encrypted variants.
- Certificate Chain Validation - Validates certificate sequences by checking signatures and validity periods against a trusted store.
- SSH Key Management - Handles the encoding, decryption, and fingerprinting of RSA keys in OpenSSH and PuTTY formats.
- JavaScript Cryptography - Native TLS implementation and network-heavy application tools.
