CATEGORY
Cryptography 6,603 crates
Data as of 2026-07-25 (crates.io database dump, timestamp 2026-07-25T02:00:36Z). Source: crates.io · db-dump.tar.gz · methodology & corrections.
quipu-serverStandalone audit-log daemon over quipu-core: central append/query HTTP API for polyglot, multi-service deployments.39Apache-2.0
pqc-rs-coreCore traits, byte types, errors, and secret containers for PQC-rs.39Apache-2.0 OR MIT
sdkeyOfficial Rust client for the SDKey license authentication protocol39MIT
flamberge-cryptoShared cryptographic primitives for Flamberge (PC1, Topaz, AES, DES, RC4, CRC-32, digests, PBKDF2)38MIT
pqcoinpqcoin - Post-quantum digital currency using SPHINCS+ signatures38MIT
hashicorp-keyvaultA simple secret management crate for CRUD operations on secrets38MIT
openkit403HTTP-native wallet authentication for Solana38MIT
simple-bfvEducational implementation of BFV FHE scheme38CECILL-B OR Apache-2.0
shiaThe BSV BEEF Protocol Reference Implementation38non-standard
secure-authA high-security, enterprise-grade Rust authentication layer for handling user signup and login with encrypted storage.38MIT
ows-cantonCanton Network chain family plugin for Open Wallet Standard38MIT
hsh-digestGeneral-purpose cryptographic hashing primitives (SHA-2, SHA-3, BLAKE3) — NOT for password storage. Use `hsh::api` for passwords.38MIT OR Apache-2.0
redoubt-coreCore zeroization primitives and guards - placeholder reservation38MIT OR Apache-2.0
memcryptoStage-based AEAD encryption with ephemeral key isolation38MIT
cryptenStage-based AEAD encryption with ephemeral key isolation38MIT
redoubt-allocked-vecthe allocation-locked Vec that guarantees no reallocation of sensitive data after sealing. Part of the redoubt secure memory…38MIT OR Apache-2.0
attrkeyPure Rust implementation of a Selection-Sensitive Attribute-Based Key
Derivation Scheme.38MIT
wolfcrypt-conformanceCross-validation and trait conformance tests for wolfcrypt38MIT
hestiaHestia — local-first Web4 trust layer for AI agents. The core daemon: credential vault, MCP server, society state, witness chain.38AGPL-3.0-or-later
nsm1-verifyStandalone Merkle proof verifier for the NSM1 on-chain protocol (Nordic Shield)38MIT
polydigest-storage-fjallFjall-backed storage backend for the EML append-only library38non-standard
hanfei-shu术 — GPU-accelerated Multi-Scalar Multiplication for the Pallas elliptic curve. The first and only GPU MSM for the Halo2/Pasta…38Apache-2.0
kohaku-stealthERC-5564 stealth address primitives for Kohaku-compatible wallets38MIT
totalreclaw-memoryTotalReclaw memory backend — E2EE crypto, LSH, embeddings, reranker (Memory Taxonomy v1)38MIT
hxrts-aura-agentCapability-based agents with clean service layer architecture for identity management38Apache-2.0
tibet-iddropIdentity-bound capability transfer protocol — offer-first (proximity) + request-first (wire) over TBZ v2 sealed envelopes38MIT OR Apache-2.0
aes-elkELK (Encrypted LFSR Keystream) mode of operation for block ciphers37MIT OR Apache-2.0
aingle-argon2Pure Rust Argon2 password hashing - optimized for AIngle37MIT
kindiCryptographic evidence hunter for embedded firmware and software supply chains. SIMD Aho-Corasick, Rayon parallel, 33-175x…37Apache-2.0
es3Library for parsing, extracting, and verifying ES3 dossier files37MIT OR Apache-2.0
solixdbThe Universal Solana Indexing Layer. This crate reserves the solixdb namespace and redirects developers to the official…37MIT
shs-cliA CLI tool for Shamir's Secret Sharing — split secrets into n shares, reconstruct from any t37MIT
obelyzkobelyzk.rs — Verifiable AI engine built on STWO Circle STARKs. Provable inference for every model.37Apache-2.0
rune-sha512Compute SHA-512 hashes of byte slices and files37MIT
coldstarColdstar — Air-gapped cold wallet for Solana and Base37MIT
redoubt-allockedallocation-locked collections that guarantees no reallocation of sensitive data after sealing. Part of the redoubt secure memory…37MIT OR Apache-2.0
nahuiAuthenticated encryption (ChaCha20-Poly1305) and BLAKE3 content hashing for document attestation.37MIT OR Apache-2.0
ender-eyeEncrypt and decrypt messages using SGA encoding + AES-256-GCM, inspired by the Standard Galactic Alphabet from Minecraft.37MIT
r-licenseAn industrial-grade offline software licensing system with hardware binding and anti-rollback protection.37MIT
neco-nostr-wasmminimum dependency WebAssembly bindings for neco-secp and neco-vault37MIT
smp-zk-proofsZK proof primitives for verifiable location and ML-training claims. Stable Ed25519-transcript backend ships by default; Groth16…37MIT
bitcoin-uri-composerA Rust library for composing Bitcoin URIs according to BIP-321.37MIT
wh0passA modern, lightweight, and secure CLI password manager built with Rust.37GPL-3.0
xark-poseidonPoseidon hash gadget for xark zero-knowledge circuits.37MIT
solana-secp256k1-schnorr-adaptorSign and verify Secp256k1 Schnorr adaptor signatures in SVM37MIT
stellar-agent-sep53SEP-53 prefixed-message sign/verify primitive for the Stellar agent wallet.37Apache-2.0
plonkwasmWebAssembly wrapper for dusk-plonk.37MPL-2.0
infrix-typesCore types for Infrix smart contracts37MIT
rvf-federationFederated RVF transfer learning -- PII stripping, differential privacy, federated averaging36MIT OR Apache-2.0
tropic01-driverUnofficial no_std, panic-free Rust driver for the TROPIC01 secure element.36GPL-3.0-or-later
est-caRFC 7030 Enrollment over Secure Transport (EST) — client, server, and an internal X.509 CA in pure Rust.36Apache-2.0 OR MIT
chunkstore-coreContent-addressed chunk storage with deduplication and refcount GC36MIT
nula-keyringPersist nostr `Keys` in the operating system's secure keychain (macOS Keychain, Linux Secret Service, Windows Credential Manager).36MIT OR Apache-2.0
nula-blossomBlossom blob transport client (BUD-01/02/12) with NIP-24242 authorization, built on nula-core signers.36MIT OR Apache-2.0
mars-clientHigh-level client library for the Capability Mesh Protocol36MIT OR Apache-2.0
bitsage-sdkBitSage Network SDK - Verifiable ML inference, ZKML transaction classifier, and agent firewall36MIT OR Apache-2.0
df-verifyEd25519 verifier for Dynamic Feed (dynamicfeed.ai) DF-VERIFY/1 signed envelopes — byte-identical canonicalization with the Python…36MIT
agent-idAgent Identity Protocol - cryptographic identity and authentication for AI agents36Apache-2.0
vauban-x402-jcs-conformanceReference 5th-implementation runner for JCS (RFC 8785) preimage discipline in x402 STARK Receipt Format Extension…36Apache-2.0
redoubt-poly1305Poly1305 impl for the redoubt secure memory framework. - placeholder reservation36MIT OR Apache-2.0
secret-sharing-rsSecret-sharing primitives (Shamir, Blakley, ramp, VSS, CRT, visual, etc.) implemented directly from the original papers with no…36BSD-2-Clause
rune-blake3Compute BLAKE3 hashes of byte slices and files — faster than SHA-256 and cryptographically secure36MIT
jitterentropy-rsRust rewrite scaffold for the CPU timing jitter entropy source36BSD-3-Clause OR GPL-2.0-or-later
memcodeAllocation-free, zeroizing serialization for sensitive data36MIT
memzerRAII guards with systematic zeroization and drop verification36MIT
memvaultEncryption-at-rest for secrets in RAM with ephemeral key derivation36MIT
securetarRust reader primitives for SecureTar v3 encrypted streams (used in Home Assistant backups)36Apache-2.0
oxo-license-issuerCLI maintenance tool for issuing and managing oxo-license signed licenses36non-standard
axum-encipherEncrypted session middleware for axum — stateless, no database required36Apache-2.0
cruxi-sopsSOPS encrypted configuration support for Cruxi framework36MIT
self_crypto_keyA library for self-modifying encrypted key storage in binaries36MIT
paratro-sdkOfficial Rust SDK for Paratro MPC Wallet Gateway36MIT
hyde-teeUnified abstraction layer for hardware-based TEE in Rust36MIT
xark-test-harnessTest harness for xark circuits: compile-and-solve helpers shared across the gadget test suites.36MIT
deputy-idMATA mID verification (pure Rust) and Deputy's identity & session model.36MIT OR Apache-2.0
kyriotes-csk2Kyriotēs-CSK2 makes encrypted data require permission, not just a key. Even if someone has the decryption key, Kyriotēs-CSK2 can…36MIT
fiudp-cliUnidirectional UDP sender for TRMNL e-paper displays — FEC + ChaCha20-Poly1305 AEAD36GPL-3.0-only
ananse_traceRegister-column execution trace and linear-memory access log for the Ananse zkVM36MIT OR Apache-2.0
quipu-mcpModel Context Protocol server exposing a Quipu-Log audit store to LLM agents: query logs, walk entity history, and verify store…36Apache-2.0
tor-dirpublishPublish documents to Tor directory servers.36MIT OR Apache-2.0
tenzro-device-keyHardware-backed device keys for Tenzro — macOS/iOS Secure Enclave P-256 signing + ECIES secret-wrapping, with a biometric…36Apache-2.0
personaeThe identity and carry layer for the Merely ecosystem: a master Ed25519 keypair, deterministic per-protocol key derivation…36MIT OR Apache-2.0
memguard-rsSecure memory handling primitives for Rust — zeroization on drop, mlock-protected regions, constant-time comparison, and…35MIT OR Apache-2.0
okamiPost-quantum cryptographic identity for AI agents35MIT OR Apache-2.0
rustchain-walletNative Rust CLI wallet for RustChain — create, import, send, receive, and manage RTC35MIT
qux-pqcPost-Quantum Cryptography library implementing NIST FIPS 203 (ML-KEM) and FIPS 204 (ML-DSA)35MIT OR Apache-2.0
rune-sha1Compute SHA-1 hashes of byte slices and files35MIT
rune-md5Compute MD5 checksums of byte slices and files35MIT
mpp-test-sdkRust SDK for the Machine Payments Protocol (MPP) - HTTP 402 payment flow on Solana35MIT
lupine-cliCLI for the Lupine PQC suite35MIT OR Apache-2.0
canus-lupuscanus-lupus — Post-quantum Swiss Army Knife CLI (Layer 2 of the canus-lupus stack)35MIT OR Apache-2.0
mtls-tcpRaw TCP adapter for mTLS authentication with IP whitelisting35GPL-3.0
gmssl-rustRust bindings for GmSSL cryptographic library35Apache-2.0
celerityPure Rust sans-IO ZMTP 3.1 messaging core with Tokio TCP and Unix socket transports.35MIT OR Apache-2.0
deaddrop-cryptoClient-side at-rest crypto for the deaddrop E2EE file-transfer service: Argon2id KDF + AES-256-GCM with AAD binding.35MIT
halftimeHalftimeHash: almost-universal hashing for long strings35Apache-2.0 OR MIT
scp-mediaReal-time media transport types for SCP (Shared Context Protocol)35Apache-2.0
poprf-ristrettoRFC 9497 POPRF over ristretto255-SHA51235MIT OR Apache-2.0
mdns_covertCovert message transmission via mDNS with ChaCha20-Poly1305 encryption35MIT
usg-est-clientRFC 7030 compliant EST (Enrollment over Secure Transport) client35Apache-2.0
quipu-voprfCliente y servidor VOPRF sobre ristretto255 con pruebas DLEQ. Primitivas del servicio Quipu OPRF.35Apache-2.0
elara-smtKey-addressed sparse Merkle tree (256-bit path, SHA3-256, identity-bound domain-separated leaves) with empty-subtree-compressed…35MIT OR Apache-2.0
agentid-verifyVerify AI agent passports — Ed25519 JWT credentials with W3C did:key34MIT
avx-browserHigh-security web browser implementing 7-layer onion routing architecture with cryptographic anonymity guarantees34MIT OR Apache-2.0
apohara-sealchainapohara-sealchain MCP server + CLI: verifiable receipts for AI artifacts34MIT OR Apache-2.0
simpleaes256cliMinimal AES-256-GCM file encryption CLI — encrypt/decrypt files with a password34MIT
kxco-verifyReceiver-side verifier for the KXCO hybrid HMAC + ML-DSA-65 webhook signature scheme34MIT
rswxpayWeChat Pay V3 API SDK for Rust — pure Rust crypto, no OpenSSL34MIT
xark-cliThe xark toolchain CLI34MIT
pq-transport-gatewayPost-Quantum secure proxy for QKD infrastructure (ETSI 014). Wire-incompatible with the broken 1.0.0; do not use 1.0.0.34MIT OR Apache-2.0
tpm-rsWindows TPM 2.0 hardware security — key management, attestation, EK certificates34MIT
intent-cipherIntent-keyed stream cipher — research artifact, illustrative use only. Not production cryptography.34MIT
motosan-solana-wallet-coreSolana signer + broadcaster paired with motosan-solana-envelope. HD wallet, ed25519 keystore, RPC operations.34MIT
xark-rustcThe `rustc_driver` half of the xark toolchain — a `RUSTC` shim (nightly).34MIT
tenzro-walletMPC wallet for Tenzro Network — FROST-Ed25519 + ML-DSA-65 hybrid threshold wallets, Argon2id keystore, transaction history,…34Apache-2.0
polar-bear-biochipBio-chip intelligence framework: multi-sensor EEG+motion fusion + rig-core LLM orchestration + ECDSA-signed data provenance34MIT OR Apache-2.0
rosalind-receiptRosalind's canonical-JSON, self-hashing BLAKE3 reproducibility receipt: the RunManifest model, content-addressed claim hashing,…34MIT OR Apache-2.0
xenv-vaultA Rust library for loading and decrypting .env.vault files encrypted with AES-256-GCM34MIT
gm-save-coreEncrypted slot-based save system — core logic for the gm-save GameMaker extension34MIT OR Apache-2.0
quipu-clientReference client for quipu-server: timeouts, exponential backoff with jitter, idempotent retransmission, and an opt-in local disk…34Apache-2.0
solar-capiSolar compiler C API34MIT OR Apache-2.0
aip7h3DEPRECATED — renamed to protocol-7h3. Use: protocol-7h3 = "0.4"34MIT
trustgrant-errorError types for the TrustGrant delegation protocol34MIT OR Apache-2.0
knotoidPhysical primitives for witnessing digital change: hash-chained, hardware-signed witness entries (COSE_Sign1 + deterministic…33MIT OR Apache-2.0
quilibrium-names-sdkRust SDK for Quilibrium Name Service - resolve and manage domain names on Quilibrium33MIT
mtls-rocketRocket fairing for mTLS authentication with IP whitelisting33GPL-3.0
mtls-grpcgRPC adapter for mTLS authentication with IP whitelisting33GPL-3.0
trident-langA minimal, security-first universal language for provable computation33non-standard
lib-q-transcriptShared CFRG sigma / Fiat-Shamir duplex-transcript discipline for lib-Q ZK proofs — K12 (out-of-circuit) and Poseidon-256…33Apache-2.0
soroban-verifier-gen-coreCore logic for generating Soroban Groth16 verifier contracts.33MIT
kwtKDL Web Token (KWT) — production Rust implementation33GPL-3.0-or-later
shieldedvault-safetySafety checks for credential detection, leak prevention, prompt injection mitigation, and Zcash-specific detectors.33MIT OR Apache-2.0
national-grade-cryptoNational-grade secure AES-256 key generation library with advanced obfuscation, memory protection, and anti-debugging33MIT
xaorAdaptive regenerative cryptographic engine — memory-hard, chaos-keyed, GPU/ASIC-resistant33MIT
allkiriEstonian digital signature creation and validation33Apache-2.0
trustgrant-domainCore domain types for the TrustGrant protocol (authority IDs, selector kinds, principal IDs, operation names)33MIT OR Apache-2.0
vardheim-challenge-tlsRuntime-independent TLS ACME challenge primitives for Vardheim33MIT OR Apache-2.0
elara-recordElara Protocol data layer: ValidationRecord, the byte-exact post-quantum wire codec, receipt types, hierarchical ZoneId, uuid7,…33MIT OR Apache-2.0
flamberge-keysKey acquisition for Flamberge: PID generation, offline name+CC keygen, and platform key extraction32MIT
jkipsecUserspace IKEv2/IPsec VPN responder for terminating iOS VPN tunnels and exposing the inner IP traffic. Pairs with jktcp for a…32MIT
fabric-gatewayRust client for the Hyperledger Fabric Gateway — a port of fabric-gateway-go32Apache-2.0
avx-bignumBig integer arithmetic (U1024, U2048, U4096, I4096)32MIT OR Apache-2.0
rok-cryptoPure cryptographic primitives — encryption, password hashing, ID generation, TOTP, JWT, password policies, and secure random…32MIT
backbone-ml-kemML-KEM (FIPS 203) implementation: Module-Lattice-Based Key Encapsulation Mechanism32Apache-2.0
backbone-ml-dsaML-DSA (FIPS 204) implementation: Module-Lattice-Based Digital Signature Standard32Apache-2.0
backbone-hqcHQC (FIPS 209) implementation: Hamming Quasi-Cyclic KEM.32Apache-2.0
avx-asyncRevolutionary async runtime - Quantum, Neural Networks, Blockchain, Genetic Algorithms, Zero dependencies32MIT OR Apache-2.0
coprimeZero-dependency, no_std u64 number theory and modular arithmetic. Public, secret-free — Stage One, no constant-time guarantees…32BSD-3-Clause
enigma-protocolHigh-level orchestrator that composes the Enigma crates into a production-ready messaging protocol32MIT
TLViteratorA high-performance, zero-copy binary TLV parser and writer. Supports ASN.1 BER/DER, ISO7816, and DGI formats for embedded,…32MIT
frost-schnorrkel25519A Schnorr signature scheme over the prime-order Ristretto group that supports FROST.32MIT OR Apache-2.0
attack-on-ecdsaEducational Rust implementation of ECDSA cryptographic attacks (research and learning purposes only).32Apache-2.0
zks_wasmWebAssembly bindings for ZKS Protocol SDK32AGPL-3.0-only
oxigeo-securityEnterprise security features for OxiGeo: encryption, access control, compliance32Apache-2.0
hashstrConvenient string-like types that wrap RustCrypto hashers32LGPL-3.0-or-later
zkboo-circuit-hashCryptographic fingerprinting for ZKBoo circuits.32LGPL-3.0-or-later
relaylyRust SDK for Relayly - self-hosted end-to-end encrypted WebSocket relay32MIT
pqc-rs-ml-kemStandards-focused Rust implementation of ML-KEM for PQC-rs.32Apache-2.0 OR MIT
hyperion-vpn-clientHyperion VPN admin client: knock + Noise tunnel, local port forwards, and fake-IP TUN mode32AGPL-3.0-only
hyperion-vpn-serverHyperion VPN server daemon: SPA knock sniffer, nftables gating, and the egress-allowlisted relay32AGPL-3.0-only
vardheim-coreRuntime-independent ACME protocol foundations for Vardheim32MIT OR Apache-2.0
vardheim-challenge-httpRuntime-independent HTTP ACME challenge primitives for Vardheim32MIT OR Apache-2.0
vardheim-challenge-dnsRuntime-independent DNS ACME challenge primitives for Vardheim32MIT OR Apache-2.0
pyde-cryptoPost-quantum cryptographic primitives for the Pyde blockchain: FALCON-512 signatures and Poseidon2 hashing over the Goldilocks…31Apache-2.0
wechat_work_cryptoPure Rust implementation of WeChat Work (企业微信) message encryption/decryption library31MIT
nulaLayer-5 Nostr SDK facade: Client + ClientBuilder composing nula-core, nula-relay, nula-gossip, nula-sync.31MIT OR Apache-2.0
zatboardPrivate filesystem-style bulletin board and chat over Zcash memos31MIT
backbone-sntrupStreamlined NTRU Prime implementation: KEM based on NTRU lattices.31Apache-2.0
enigma-storageEncrypted local storage for Enigma with mandatory at-rest encryption and cross-platform key vault providers.31MIT
debsign-rsSign Debian packages with GPG31MIT OR Apache-2.0
enclaviaEncrypted HTTP client SDK for the Enclavia enclave runtime: Noise tunnel over WebSocket with built-in attestation verification.31Apache-2.0 OR MIT
paseto-authPaseto v4.public microservice compatible library for token creation and validation31MIT OR Apache-2.0
abir_guardAbir-Guard: Quantum-Resilient Agentic Vault for AI Agent Memory with NIST-standard Post-Quantum Cryptography31MIT
lupine-wasmWebAssembly bindings for Lupine post-quantum cryptography31MIT OR Apache-2.0
enigma-media-e2eeApplication-level media frame encryption using Enigma aead primitives31MIT
tenzro-keystore-unlockPlatform-agnostic keystore-unlock trait for Tenzro wallets — lets node embedders supply the keystore password from any source…31Apache-2.0
lib-q-blind-tokenPROVISIONAL post-quantum blind-signature token (homomorphic Module-lattice blind issuance; not 2HashDH/RSA, pre-standard)31Apache-2.0
lib-q-mveMulti-recipient verifiable encryption (verifiable rekey) for the consumer — lib-q-mve (RED, PENDING HUMAN SIGN-OFF)31Apache-2.0
cosigner-clientLocal and proxy-backed Arch Network signers for the arch-cosigner custody proxy31MIT
zkboo-eccElliptic curve cryptography primitives for the ZKBoo ecosystem.31LGPL-3.0-or-later
fortress-passA powerful, feature-rich password generator with strength scoring, policies, and memorable passwords31MIT
xark-poseidon2Poseidon2 hash gadget for xark zero-knowledge circuits.31MIT
nqvNQV: A hardware-accelerated (AVX2), high-throughput Quasigroup Vector cipher implementation in pure Rust.31Apache-2.0
ananse_airRegister-shaped AIR (algebraic intermediate representation) for the Ananse zkVM31MIT OR Apache-2.0
pkix-zlint-bridgeSubprocess + NDJSON-parsing bridge to ZLint for runtime adapters and differential oracles31Apache-2.0 OR MIT
tydence-cliCommand-line interface for tydence31MIT OR Apache-2.0
trustgrant-documentTrustGrant document parsing, validation, normalization, and JSON schema types31MIT OR Apache-2.0
xlsx_encryptorAn xlsx encryption library based on umya-spreadsheet and ms-offcrypto-writer.31BSD-3-Clause
personaldb-protocolCanonical signing and authenticated-state protocol types for PersonalDB31Apache-2.0
qcomm-corePost-quantum cryptographic primitives: ML-KEM-1024, SPHINCS+, Triple Ratchet with forward secrecy30MIT OR Apache-2.0
secretx-tpm2TPM 2.0 backend for secretx.30MIT
nula-signerNIP-46 (Nostr Connect) remote signer client built on top of `nula-relay`. Implements `nula_core::NostrSigner`.30MIT OR Apache-2.0
zorph-cryptoCryptographic primitives for the Zorph platform30MIT
backbone-ntruplrNTRU LPRime implementation: KEM based on NTRU lattices.30Apache-2.0
bdo-rsRust client SDK for BDO (Blockchain Data Objects) - a Planet Nine microservice for persistent data storage with cryptographic…30MIT OR Apache-2.0
bandersnatch-ffiC FFI bindings for Bandersnatch VRF - ring signatures and ticket ID computation30MIT OR Apache-2.0
lib-q-threshold-raccoonPROVISIONAL post-quantum lattice threshold signature (Raccoon-family FS over a BDLOP-committed key; consumes lib-q-dkg shares;…30Apache-2.0
sec-memHigh-assurance, attack-resistant cryptographic memory allocator and hardware-enforced secret container30MIT OR Apache-2.0
private-accumulator-proof-delegationCryptographic accumulators with private proof update delegation. Supports RSA, class-group, and bilinear-pairing constructions.30MIT OR Apache-2.0
xark-verifierSolana on-chain Groth16 BN254 verifier consuming xark-exported VK + proof bytes.30MIT