digitalbazaar/forge
Forge
Forge este o bibliotecă de criptografie JavaScript care oferă un set cuprinzător de instrumente pentru criptare simetrică și asimetrică, hashing și semnături digitale. Include o implementare completă de Transport Layer Security (TLS) pentru stabilirea conexiunilor de rețea securizate și gestionarea traficului criptat.
Proiectul implementează o gamă largă de instrumente de infrastructură cu chei publice (PKI), inclusiv gestionarea certificatelor X.509, generarea de cereri de semnare a certificatelor și validarea lanțurilor de certificate. Oferă un toolkit criptografic PKCS pentru gestionarea arhivelor securizate și a mesajelor semnate, alături de suport pentru gestionarea cheilor SSH și conversia cheilor între formatele PEM, OpenSSH și PKCS#12.
Biblioteca acoperă o gamă largă de primitive de securitate, cum ar fi criptarea cu cifru pe blocuri, calculul HMAC și derivarea cheilor bazată pe parole. Include, de asemenea, utilitare pentru serializarea datelor binare folosind codificarea ASN.1 DER, precum și instrumente de transformare a datelor pentru formatele Base58, Base64 și hexazecimal.
Capabilitățile suplimentare includ utilitare de comunicare în rețea de nivel jos pentru gestionarea cererilor HTTP client și orchestrarea sarcinilor asincrone pentru cozi de operațiuni în fundal.
Features
- Symmetric and Asymmetric Ciphers - Provides a comprehensive suite of symmetric and asymmetric ciphers for encryption and decryption.
- SSL/TLS Connection Security - Provides a full JavaScript implementation of the TLS protocol for secure transport layer connections.
- Binary Serialization Formats - Implements encoding and decoding of structured data into compact binary formats including ASN.1 DER.
- Cryptographic Random Number Generators - Provides a Fortuna-based cryptographically secure pseudo-random number generator.
- X.509 Certificate Parsing and Validation - Provides comprehensive tools for parsing, validating, and managing X.509 certificates.
- X.509 Management Utilities - Includes utilities for X.509 certificate management and the generation of certificate signing requests.
- General ASN.1 DER Parsers - Provides utilities for serializing and deserializing data structures using the ASN.1 DER binary format.
- JavaScript Cryptography Libraries - Provides a comprehensive set of cryptographic primitives and standards implemented in JavaScript.
- General Purpose RSA Key Generation - Enables the creation of public and private RSA key pairs using native APIs or software fallbacks.
- Public Key Infrastructure - Implements lifecycle management for X.509 certificates, including CSR generation and chain validation.
- Secure Network Communication - Implements encrypted data transmission channels to secure network communication.
- General TLS Connection Establishment - Implements a full TLS stack for establishing secure encrypted network connections in JavaScript.
- PKCS and CMS Message Processors - Implements PKCS#7 standards for creating, signing, and decrypting protected messages.
- Cryptographic Prime Generation - Provides generation of large, random probable primes required for asymmetric cryptographic operations.
- Certificate Signing Request Generation - Supports the generation and signing of PKCS#10 certification requests for submission to CAs.
- Cryptographic Hash Generation - Generates cryptographic message digests using various standard hashing algorithms.
- Key Format Converters - Provides utilities to convert cryptographic keys between PEM, OpenSSH, and PKCS#12 formats.
- Ed25519 Verifiers - Provides creation and validation of digital signatures using the Ed25519 curve.
- PKCS12 Archive Support - Provides support for importing and exporting certificates and private keys using PKCS#12 archives.
- HMAC Generation - Implements HMAC computation for verifying data authenticity and integrity.
- Key Encapsulation Interfaces - Implements key encapsulation mechanisms to establish shared secret keys between parties.
- Key Derivation Functions - Implements PBKDF2 to derive cryptographic keys from user passwords.
- PKCS Toolkits - Provides a toolkit for handling PKCS-standard secure archives and signed messages.
- Private Key Import Formats - Supports conversion of private keys between PEM and ASN.1 formats, including encrypted variants.
- Certificate Chain Validation - Validates certificate sequences by checking signatures and validity periods against a trusted store.
- SSH Key Management - Handles the encoding, decryption, and fingerprinting of RSA keys in OpenSSH and PuTTY formats.
- JavaScript Cryptography - Native TLS implementation and network-heavy application tools.
