digitalbazaar/forge
Forge
Forge is a JavaScript cryptography library providing a comprehensive set of tools for symmetric and asymmetric encryption, hashing, and digital signatures. It includes a full Transport Layer Security implementation for establishing secure network connections and managing encrypted traffic.
The project implements a wide array of public key infrastructure tools, including X.509 certificate management, the generation of certificate signing requests, and the validation of certificate chains. It provides a PKCS cryptographic toolkit for handling secure archives and signed messages, alongside support for SSH key management and the conversion of keys between PEM, OpenSSH, and PKCS#12 formats.
The library covers a broad range of security primitives, such as block cipher encryption, HMAC computation, and password-based key derivation. It also includes utilities for binary data serialization using ASN.1 DER encoding, as well as data transformation tools for Base58, Base64, and hexadecimal formats.
Additional capabilities include low-level network communication utilities for HTTP client request handling and asynchronous task orchestration for queuing background operations.
Features
- Symmetric and Asymmetric Ciphers - Provides a comprehensive suite of symmetric and asymmetric ciphers for encryption and decryption.
- SSL/TLS Connection Security - Provides a full JavaScript implementation of the TLS protocol for secure transport layer connections.
- Binary Serialization Formats - Implements encoding and decoding of structured data into compact binary formats including ASN.1 DER.
- Cryptographic Random Number Generators - Provides a Fortuna-based cryptographically secure pseudo-random number generator.
- X.509 Certificate Parsing and Validation - Provides comprehensive tools for parsing, validating, and managing X.509 certificates.
- X.509 Management Utilities - Includes utilities for X.509 certificate management and the generation of certificate signing requests.
- General ASN.1 DER Parsers - Provides utilities for serializing and deserializing data structures using the ASN.1 DER binary format.
- JavaScript Cryptography Libraries - Provides a comprehensive set of cryptographic primitives and standards implemented in JavaScript.
- General Purpose RSA Key Generation - Enables the creation of public and private RSA key pairs using native APIs or software fallbacks.
- Public Key Infrastructure - Implements lifecycle management for X.509 certificates, including CSR generation and chain validation.
- Secure Network Communication - Implements encrypted data transmission channels to secure network communication.
- General TLS Connection Establishment - Implements a full TLS stack for establishing secure encrypted network connections in JavaScript.
- PKCS and CMS Message Processors - Implements PKCS#7 standards for creating, signing, and decrypting protected messages.
- Cryptographic Prime Generation - Provides generation of large, random probable primes required for asymmetric cryptographic operations.
- Certificate Signing Request Generation - Supports the generation and signing of PKCS#10 certification requests for submission to CAs.
- Cryptographic Hash Generation - Generates cryptographic message digests using various standard hashing algorithms.
- Key Format Converters - Provides utilities to convert cryptographic keys between PEM, OpenSSH, and PKCS#12 formats.
- Ed25519 Verifiers - Provides creation and validation of digital signatures using the Ed25519 curve.
- PKCS12 Archive Support - Provides support for importing and exporting certificates and private keys using PKCS#12 archives.
- HMAC Generation - Implements HMAC computation for verifying data authenticity and integrity.
- Key Encapsulation Interfaces - Implements key encapsulation mechanisms to establish shared secret keys between parties.
- Key Derivation Functions - Implements PBKDF2 to derive cryptographic keys from user passwords.
- PKCS Toolkits - Provides a toolkit for handling PKCS-standard secure archives and signed messages.
- Private Key Import Formats - Supports conversion of private keys between PEM and ASN.1 formats, including encrypted variants.
- Certificate Chain Validation - Validates certificate sequences by checking signatures and validity periods against a trusted store.
- SSH Key Management - Handles the encoding, decryption, and fingerprinting of RSA keys in OpenSSH and PuTTY formats.
- JavaScript Cryptography - Native TLS implementation and network-heavy application tools.
