digitalbazaar/forge

Features

• Symmetric and Asymmetric Ciphers - Provides a comprehensive suite of symmetric and asymmetric ciphers for encryption and decryption.
• SSL/TLS Connection Security - Provides a full JavaScript implementation of the TLS protocol for secure transport layer connections.
• Binary Serialization Formats - Implements encoding and decoding of structured data into compact binary formats including ASN.1 DER.
• Cryptographic Random Number Generators - Provides a Fortuna-based cryptographically secure pseudo-random number generator.
• X.509 Certificate Parsing and Validation - Provides comprehensive tools for parsing, validating, and managing X.509 certificates.
• X.509 Management Utilities - Includes utilities for X.509 certificate management and the generation of certificate signing requests.
• General ASN.1 DER Parsers - Provides utilities for serializing and deserializing data structures using the ASN.1 DER binary format.
• JavaScript Cryptography Libraries - Provides a comprehensive set of cryptographic primitives and standards implemented in JavaScript.
• General Purpose RSA Key Generation - Enables the creation of public and private RSA key pairs using native APIs or software fallbacks.
• Public Key Infrastructure - Implements lifecycle management for X.509 certificates, including CSR generation and chain validation.
• Secure Network Communication - Implements encrypted data transmission channels to secure network communication.
• General TLS Connection Establishment - Implements a full TLS stack for establishing secure encrypted network connections in JavaScript.
• PKCS and CMS Message Processors - Implements PKCS#7 standards for creating, signing, and decrypting protected messages.
• Cryptographic Prime Generation - Provides generation of large, random probable primes required for asymmetric cryptographic operations.
• Certificate Signing Request Generation - Supports the generation and signing of PKCS#10 certification requests for submission to CAs.
• Cryptographic Hash Generation - Generates cryptographic message digests using various standard hashing algorithms.
• Key Format Converters - Provides utilities to convert cryptographic keys between PEM, OpenSSH, and PKCS#12 formats.
• Ed25519 Verifiers - Provides creation and validation of digital signatures using the Ed25519 curve.
• PKCS12 Archive Support - Provides support for importing and exporting certificates and private keys using PKCS#12 archives.
• HMAC Generation - Implements HMAC computation for verifying data authenticity and integrity.
• Key Encapsulation Interfaces - Implements key encapsulation mechanisms to establish shared secret keys between parties.
• Key Derivation Functions - Implements PBKDF2 to derive cryptographic keys from user passwords.
• PKCS Toolkits - Provides a toolkit for handling PKCS-standard secure archives and signed messages.
• Private Key Import Formats - Supports conversion of private keys between PEM and ASN.1 formats, including encrypted variants.
• Certificate Chain Validation - Validates certificate sequences by checking signatures and validity periods against a trusted store.
• SSH Key Management - Handles the encoding, decryption, and fingerprinting of RSA keys in OpenSSH and PuTTY formats.
• JavaScript Cryptography - Native TLS implementation and network-heavy application tools.

Star history