digitalbazaar/forge
Forge
Forge est une bibliothèque de cryptographie JavaScript fournissant un ensemble complet d'outils pour le chiffrement symétrique et asymétrique, le hachage et les signatures numériques. Elle inclut une implémentation complète de TLS (Transport Layer Security) pour établir des connexions réseau sécurisées et gérer le trafic chiffré.
Le projet implémente une large gamme d'outils d'infrastructure à clé publique (PKI), incluant la gestion de certificats X.509, la génération de demandes de signature de certificat (CSR) et la validation de chaînes de certificats. Il fournit une boîte à outils cryptographique PKCS pour manipuler des archives sécurisées et des messages signés, ainsi qu'une prise en charge de la gestion des clés SSH et la conversion de clés entre les formats PEM, OpenSSH et PKCS#12.
La bibliothèque couvre un large éventail de primitives de sécurité, telles que le chiffrement par bloc, le calcul HMAC et la dérivation de clé basée sur mot de passe. Elle inclut également des utilitaires pour la sérialisation de données binaires utilisant l'encodage ASN.1 DER, ainsi que des outils de transformation de données pour les formats Base58, Base64 et hexadécimal.
Les capacités supplémentaires incluent des utilitaires de communication réseau bas niveau pour la gestion des requêtes client HTTP et l'orchestration de tâches asynchrones pour la mise en file d'attente d'opérations en arrière-plan.
Features
- Symmetric and Asymmetric Ciphers - Provides a comprehensive suite of symmetric and asymmetric ciphers for encryption and decryption.
- SSL/TLS Connection Security - Provides a full JavaScript implementation of the TLS protocol for secure transport layer connections.
- Binary Serialization Formats - Implements encoding and decoding of structured data into compact binary formats including ASN.1 DER.
- Cryptographic Random Number Generators - Provides a Fortuna-based cryptographically secure pseudo-random number generator.
- X.509 Certificate Parsing and Validation - Provides comprehensive tools for parsing, validating, and managing X.509 certificates.
- X.509 Management Utilities - Includes utilities for X.509 certificate management and the generation of certificate signing requests.
- General ASN.1 DER Parsers - Provides utilities for serializing and deserializing data structures using the ASN.1 DER binary format.
- JavaScript Cryptography Libraries - Provides a comprehensive set of cryptographic primitives and standards implemented in JavaScript.
- General Purpose RSA Key Generation - Enables the creation of public and private RSA key pairs using native APIs or software fallbacks.
- Public Key Infrastructure - Implements lifecycle management for X.509 certificates, including CSR generation and chain validation.
- Secure Network Communication - Implements encrypted data transmission channels to secure network communication.
- General TLS Connection Establishment - Implements a full TLS stack for establishing secure encrypted network connections in JavaScript.
- PKCS and CMS Message Processors - Implements PKCS#7 standards for creating, signing, and decrypting protected messages.
- Cryptographic Prime Generation - Provides generation of large, random probable primes required for asymmetric cryptographic operations.
- Certificate Signing Request Generation - Supports the generation and signing of PKCS#10 certification requests for submission to CAs.
- Cryptographic Hash Generation - Generates cryptographic message digests using various standard hashing algorithms.
- Key Format Converters - Provides utilities to convert cryptographic keys between PEM, OpenSSH, and PKCS#12 formats.
- Ed25519 Verifiers - Provides creation and validation of digital signatures using the Ed25519 curve.
- PKCS12 Archive Support - Provides support for importing and exporting certificates and private keys using PKCS#12 archives.
- HMAC Generation - Implements HMAC computation for verifying data authenticity and integrity.
- Key Encapsulation Interfaces - Implements key encapsulation mechanisms to establish shared secret keys between parties.
- Key Derivation Functions - Implements PBKDF2 to derive cryptographic keys from user passwords.
- PKCS Toolkits - Provides a toolkit for handling PKCS-standard secure archives and signed messages.
- Private Key Import Formats - Supports conversion of private keys between PEM and ASN.1 formats, including encrypted variants.
- Certificate Chain Validation - Validates certificate sequences by checking signatures and validity periods against a trusted store.
- SSH Key Management - Handles the encoding, decryption, and fingerprinting of RSA keys in OpenSSH and PuTTY formats.
- JavaScript Cryptography - Native TLS implementation and network-heavy application tools.
