Rust Crypto Dependencies
Cryptographic primitives & spec implementations
| Primitive | Repository | Known audits |
|---|---|---|
| P256 | RustCrypto/p256 | N/A |
| P384 | RustCrypto/p384 | N/A |
| Curve25519 | dalek-cryptography/curve25519-dalek | N/A |
| Ed25519 | dalek-cryptography/ed25519-dalek | N/A |
| X25519 | dalek-cryptography/x25519-dalek | N/A |
| SHA2 | RustCrypto/sha2 | N/A |
| HMAC | RustCrypto/hmac | N/A |
| AES-GCM | RustCrypto/aes-gcm | Audit by NCC Group |
| ChaCha20Poly1305 | RustCrypto/chacha20poly1305 | Audit by NCC Group |
| HKDF | RustCrypto/hkdf | N/A |
| HPKE | rozbb/rust-hpke | No formal audits, but Cloudflare reviewed it |
CSPRNG
We use rand in combination with rand-chacha to achieve a proper CSPRNG
- No audits are known of this crate, but it is the de facto for the Rust ecosystem and is used by pretty much any crate needing a randomness source.
- Note: We use getrandom under the hood to retrieve random data. Other than de facto OS entropy sources, we can inject
entropy at will
- On this topic, the entropy sources per platform are detailed here