core-crypto

Rust Crypto Dependencies

Cryptographic primitives & spec implementations

Primitive	Repository	Known audits
P256	RustCrypto/p256	N/A
P384	RustCrypto/p384	N/A
Curve25519	dalek-cryptography/curve25519-dalek	N/A
Ed25519	dalek-cryptography/ed25519-dalek	N/A
X25519	dalek-cryptography/x25519-dalek	N/A
SHA2	RustCrypto/sha2	N/A
HMAC	RustCrypto/hmac	N/A
AES-GCM	RustCrypto/aes-gcm	Audit by NCC Group
ChaCha20Poly1305	RustCrypto/chacha20poly1305	Audit by NCC Group
HKDF	RustCrypto/hkdf	N/A
HPKE	rozbb/rust-hpke	No formal audits, but Cloudflare reviewed it

CSPRNG

• We use rand in combination with rand-chacha to achieve a proper CSPRNG
  • No audits are known of this crate, but it is the de facto for the Rust ecosystem and is used by pretty much any crate needing a randomness source.
  • Note: We use getrandom under the hood to retrieve random data. Other than de facto OS entropy sources, we can inject entropy at will
    • On this topic, the entropy sources per platform are detailed here

This site is open source. Improve this page.