weidai11/cryptopp
Cryptopp
Crypto++ is a comprehensive C++ cryptographic library that implements a broad range of algorithms for symmetric and asymmetric encryption, hashing, and digital signatures. It is designed as a portable toolkit, usable across different operating systems without modification.
The library distinguishes itself through its architecture: cryptographic parameters such as key size and mode are configured at compile time via C++ templates, eliminating runtime overhead. Algorithms are registered in a static factory for runtime lookup, while data processing follows a pipeline model of composable sources, filters, and sinks. Memory management is handled with secure allocation and automatic wiping to prevent leakage of sensitive data.
Crypto++ covers authenticated encryption (GCM, CCM), key exchange protocols (Diffie-Hellman, ECDH), and hash-based integrity checking (HMAC, message digests). It also provides facilities for digital signature verification and secure data encryption in both symmetric and asymmetric settings.
Features
- Public Key Cryptography - An implementation of RSA, ECC, DSA, and other public-key algorithms for secure key exchange and digital signatures.
- Data Processing Pipelines - Processes data through composable stream objects that transform data in stages via sources, filters, and sinks.
- Cryptographic Algorithm Selection - Uses C++ templates to select cryptographic algorithms at compile time, enabling zero-cost abstractions and compile-time polymorphism.
- Integrity Checking Libraries - Computing message digests or HMACs to detect accidental or malicious changes to files, packets, or stored data.
- Cryptographic Hash Verifiers - Hash any input to produce a fixed-size digest for verifying data integrity and authenticating messages.
- Cryptographic Primitives - Writing or integrating low-level building blocks such as block ciphers, hash functions, and public key algorithms into a larger application.
- Digital Signatures - Signing documents or verifying signatures to confirm the authenticity and integrity of data from a known sender.
- Asymmetric Encryption - Encrypt data or exchange keys using a public-private key pair without a shared secret.
- Key Agreement Protocols - Establishing a shared secret between two parties over an untrusted network using protocols such as Diffie-Hellman or ECDH.
- Symmetric Cipher Implementations - A library providing block ciphers, stream ciphers, and hash functions for data integrity and confidentiality.
- Symmetric Encryption - Encrypt plaintext into ciphertext using a shared secret key for data confidentiality and private communication.
- Compile-Time Cryptographic Parameter Configurators - Configures encryption parameters such as key size and mode using template arguments to eliminate runtime overhead.
- Secure Memory Allocators - Overrides allocation and deallocation to provide securely wiped memory buffers that prevent sensitive data leakage.
- Static Cryptographic Factory Registries - Registers algorithm classes by name in a static factory, allowing runtime lookup and instantiation of cryptographic primitives.
- Authenticated Encryption - Encrypting data while simultaneously verifying its integrity and authenticity using algorithms like GCM or CCM.
- Cryptographic Toolkits - A cross-platform set of cryptographic classes that work on various operating systems without modification.
- Invertible Cryptographic Transform Frameworks - Defines base classes for both directions of cryptographic transformations, ensuring symmetric interfaces for encryption and decryption pairs.
- Cryptographic Libraries - Extensive C++ class library of cryptographic schemes.
- Cryptography Libraries - Comprehensive class library for various cryptographic schemes.
- Security & Privacy - Cryptographic schemes library
