briansmith/ring
Ring
Ring 是一个底层加密原语库和安全工具集，旨在构建可移植、安全的应用程序。它提供了一系列 RSA、椭圆曲线加密和认证对称加密的实现。
该项目专注于恒定时间加密，以防止敏感数据通过计时侧信道攻击泄露。它利用一种形式化验证工具从模板生成算术逻辑，确保数学正确性并消除手动实现错误。
该库包含生成用于密钥和盐值的加密强随机序列的功能，以及用于认证流加密的工具。它支持跨平台构建流程，允许使用特定的系统根目录和工具链为多种硬件架构编译二进制文件。
通过详尽的向量测试和扩展的加密检查套件来验证原语，从而保持正确性。
Features
- Cross-Platform Cryptographic Primitives - Provides a portable set of low-level cryptographic primitives including RSA and elliptic curve operations.
- Cryptographic Primitives - Implements a portable collection of low-level cryptographic primitives for building secure applications.
- Formal Verification Generators - Generates formally proven cryptographic arithmetic logic from templates to eliminate manual implementation errors.
- Timing Attack Prevention - Writes cryptographic code that executes in fixed time to prevent secret data leakage.
- Cryptographic Random Number Generators - Produces cryptographically strong random sequences for secure keys, nonces, and salts.
- Verified Implementations - Provides formally verified cryptographic arithmetic implementations to ensure mathematical correctness.
- Elliptic Curve Cryptography - Implements fundamental elliptic curve primitives for secure key exchanges and digital signatures.
- RSA Implementations - Performs asymmetric encryption and decryption tasks using the RSA algorithm.
- Timing-Side-Channel Protections - Uses constant-time coding patterns and fixed-length arithmetic to mitigate timing side-channel attacks.
- Verified Arithmetic Logic - Generates formally verified arithmetic logic from templates to ensure mathematical correctness in cryptographic operations.
- Constant-Time Arithmetic Logics - Implements branchless arithmetic logic to prevent secret data leaks through timing side-channel attacks.
- Formal Verification Tools - Utilizes a formal verification tool to generate mathematically proven arithmetic logic from templates.
- Cryptographic Toolchains - Supports a cross-platform build process for compiling cryptographic binaries across multiple hardware architectures and system roots.
- Cross-Architecture Binary Compilation - Compiles software into executable binaries for multiple target hardware architectures.
- Cross-Compilation Toolchains - Supports generating executable binaries for diverse hardware architectures from a single host.
- Authenticated Encryption - Provides authenticated encryption modes to ensure the confidentiality and integrity of data streams.
- Low-Level Cryptography Toolsets - Offers a portable set of low-level primitives for authenticated encryption and secure random generation.
- AEAD Encryptions and Decryptions - Provides authenticated encryption with associated data (AEAD) to ensure stream confidentiality and integrity.
- Primitive Vector Validators - Validates cryptographic correctness using extensive input vector suites and failure logging.
- Cryptographic Test Vectors - Validates cryptographic correctness by running extensive suites of input vectors for edge-case analysis.
- Test Suite Execution - Executes an extended suite of cryptographic checks and slow tests to ensure correctness.
- Rust Cryptography - Safe and fast crypto primitives using BoringSSL.
