Libsodium

Libsodium is a portable, C-based cryptographic library that provides a collection of modern primitives for encryption, decryption, digital signatures, password hashing, and secure key exchange. It is designed to facilitate secure communication and data integrity across diverse hardware architectures and operating systems.

The library distinguishes itself by utilizing constant-time primitive execution to prevent side-channel attacks and employing memory-hard algorithms to increase the difficulty of brute-force password attacks. It abstracts complex mathematical operations into simplified interfaces, reducing the risk of implementation errors while ensuring that all cryptographic keys and nonces are generated using high-entropy data harvested directly from system-level sources.

The project covers a broad capability surface, including authenticated encryption, symmetric and asymmetric key management, and digital message authentication. It supports data protection through padding and key derivation, allowing for the integration of secure cryptographic functions into various application components.

Features

Cryptographic Libraries - Acts as a portable, high-performance cryptographic library providing modern primitives for encryption, signing, and hashing.
Authenticated Encryption - Provides authenticated encryption primitives to ensure both data confidentiality and integrity in a single operation.
Data Encryption - Provides industry-standard cryptographic primitives for securing data confidentiality and integrity during storage or transmission.
Password Hashing Utilities - Utilizes memory-hard algorithms to securely hash passwords and protect credentials against brute-force attacks.
Side-Channel Resistant Primitives - Cryptographic operations are designed to execute in fixed time intervals to prevent side-channel attacks that leak secret information through timing variations.
Cryptographic Randomness Providers - Harvests high-entropy data from system-level sources to provide cryptographically secure randomness for keys and nonces.
Cryptographic Primitives - Integrates core cryptographic primitives for encryption, signing, and hashing across multiple environments.
Key Exchange Protocols - Performs secure key exchange between parties over insecure channels.
Memory-Hard Cryptographic Algorithms - Algorithms utilize significant amounts of RAM during computation to increase the cost and difficulty of performing large-scale brute-force attacks.
Message Authentication Systems - Verifies data integrity using cryptographic tags to detect unauthorized tampering.
C Implementations - Implements core cryptographic algorithms in portable C for high performance across diverse hardware architectures.
Cryptographic Abstractions - Complex mathematical operations are hidden behind simplified interfaces to prevent implementation errors and ensure secure usage of asymmetric key exchanges.
Digital Signature Libraries - Provides a comprehensive suite of cryptographic primitives for generating and verifying digital signatures to ensure data authenticity.
Digital Signature Validators - Implements robust verification logic for digital signatures to ensure data integrity and sender authenticity.
Key Derivation Protocols - Derives multiple subkeys from master keys to isolate application components and protocols.
End-to-End Encryption - Enables public-key encryption to ensure only intended recipients can access protected content.
Secret Encryption - Protects data confidentiality using symmetric encryption algorithms with shared secret keys.
Build Systems - A modern, easy-to-use library for cryptographic operations.
Cryptographic Libraries - Modern, easy-to-use library for encryption and signatures.
Cryptography - Easy-to-use library for encryption and authentication.
Cryptography Libraries - Opinionated and easy-to-use library based on NaCl.
Security and Encryption - Provides robust encryption primitives.
Security And Privacy - Easy-to-use library for encryption and authentication.
Encryption Key Management - Offers secure utilities for key derivation and management to facilitate encrypted communication and data protection.
Cryptographic Padding Utilities - Add padding to data blocks to reach a specific length and prevent information leakage about the original message size during sensitive cryptographic operations.

google/tink

13,542View on GitHub

Tink is a multi-language cryptography library and security toolkit providing secure APIs for data encryption and digital signatures. It functions as a data encryption library and digital signature framework designed to prevent common implementation errors across different platforms and operating systems. The project serves as a cryptographic keyset manager, utilizing JSON for the storage, rotation, and serialization of keys to maintain consistency across various programming languages. It ensures identical cryptographic behavior globally by mapping language-specific libraries to a unified set

signalapp/Signal-Desktop

16,376View on GitHub

Signal-Desktop is a cross-platform messaging application that provides end-to-end encrypted communication. It implements the Signal Protocol to secure messages and voice calls, ensuring that only intended recipients can access content. The application manages asynchronous key exchange and session initialization to maintain secure communication channels between parties who are not online simultaneously. The project distinguishes itself through advanced cryptographic protections, including hybrid post-quantum security that combines classical elliptic curve cryptography with lattice-based algori

libtom/libtomcrypt

1,773View on GitHub

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

cossacklabs/themis

1,965View on GitHub

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

jedisct1libsodium

Features