digitalbazaar/forge
Forge
Forge 是一个 JavaScript 加密库，提供了一套全面的对称和非对称加密、哈希及数字签名工具。它包含完整的传输层安全（TLS）实现，用于建立安全网络连接和管理加密流量。
该项目实现了广泛的公钥基础设施（PKI）工具，包括 X.509 证书管理、证书签名请求生成以及证书链验证。它提供了一个用于处理安全归档和签名消息的 PKCS 加密工具包，并支持 SSH 密钥管理以及在 PEM、OpenSSH 和 PKCS#12 格式之间转换密钥。
该库涵盖了广泛的安全原语，如分组密码加密、HMAC 计算和基于密码的密钥派生。它还包括用于使用 ASN.1 DER 编码进行二进制数据序列化的工具，以及用于 Base58、Base64 和十六进制格式的数据转换工具。
其他功能包括用于 HTTP 客户端请求处理的底层网络通信工具，以及用于排队后台操作的异步任务编排功能。
Features
- Symmetric and Asymmetric Ciphers - Provides a comprehensive suite of symmetric and asymmetric ciphers for encryption and decryption.
- SSL/TLS Connection Security - Provides a full JavaScript implementation of the TLS protocol for secure transport layer connections.
- Binary Serialization Formats - Implements encoding and decoding of structured data into compact binary formats including ASN.1 DER.
- Cryptographic Random Number Generators - Provides a Fortuna-based cryptographically secure pseudo-random number generator.
- X.509 Certificate Parsing and Validation - Provides comprehensive tools for parsing, validating, and managing X.509 certificates.
- X.509 Management Utilities - Includes utilities for X.509 certificate management and the generation of certificate signing requests.
- General ASN.1 DER Parsers - Provides utilities for serializing and deserializing data structures using the ASN.1 DER binary format.
- JavaScript Cryptography Libraries - Provides a comprehensive set of cryptographic primitives and standards implemented in JavaScript.
- General Purpose RSA Key Generation - Enables the creation of public and private RSA key pairs using native APIs or software fallbacks.
- Public Key Infrastructure - Implements lifecycle management for X.509 certificates, including CSR generation and chain validation.
- Secure Network Communication - Implements encrypted data transmission channels to secure network communication.
- General TLS Connection Establishment - Implements a full TLS stack for establishing secure encrypted network connections in JavaScript.
- PKCS and CMS Message Processors - Implements PKCS#7 standards for creating, signing, and decrypting protected messages.
- Cryptographic Prime Generation - Provides generation of large, random probable primes required for asymmetric cryptographic operations.
- Certificate Signing Request Generation - Supports the generation and signing of PKCS#10 certification requests for submission to CAs.
- Cryptographic Hash Generation - Generates cryptographic message digests using various standard hashing algorithms.
- Key Format Converters - Provides utilities to convert cryptographic keys between PEM, OpenSSH, and PKCS#12 formats.
- Ed25519 Verifiers - Provides creation and validation of digital signatures using the Ed25519 curve.
- PKCS12 Archive Support - Provides support for importing and exporting certificates and private keys using PKCS#12 archives.
- HMAC Generation - Implements HMAC computation for verifying data authenticity and integrity.
- Key Encapsulation Interfaces - Implements key encapsulation mechanisms to establish shared secret keys between parties.
- Key Derivation Functions - Implements PBKDF2 to derive cryptographic keys from user passwords.
- PKCS Toolkits - Provides a toolkit for handling PKCS-standard secure archives and signed messages.
- Private Key Import Formats - Supports conversion of private keys between PEM and ASN.1 formats, including encrypted variants.
- Certificate Chain Validation - Validates certificate sequences by checking signatures and validity periods against a trusted store.
- SSH Key Management - Handles the encoding, decryption, and fingerprinting of RSA keys in OpenSSH and PuTTY formats.
- JavaScript Cryptography - Native TLS implementation and network-heavy application tools.
