The bsaes is a portable pure-Go constant time AES implementation based on the code from BearSSL. On appropriate systems, with a sufficiently recent Go runtime, it will transparently call crypto/aes when NewCipher is invoked.

ZLint is a X.509 certificate linter that checks for consistency with standards (e.g. RFC 5280) and other relevant PKI requirements (e.g. CA/Browser Forum Baseline Requirements).

Libsignal-protocol-go is a Go implementation of the Signal Client Protocol.

This package provides a Go implementation of common cryptographic routines used in secure systems. It includes support for various signature schemes and key management utilities.

This is a Go implementation of the Google Authenticator library as specified in RFC 4226 and RFC 6238.

This package provides an optimized pure Go implementation of elliptic curve cryptography operations over the secp256k1 curve as well as data structures and functions for working with public and private secp256k1 keys as cpecified in the https://www.secg.org/sec2-v2.pdf standard.

In addition, sub packages are provided to produce, verify, parse, and serialize ECDSA signatures and EC-Schnorr-DCRv0 (a custom Schnorr-based signature scheme specific to Decred) signatures. See the README.md files in the relevant sub packages for more details about those aspects.

This package implements RFC 6979, which describes how to generate deterministic ECDSA signatures. Deterministic signatures remove the need for a random number generator during signing.

This package provides a native Go implementation of Austin Appleby's third MurmurHash revision (aka MurmurHash3).

This package provides a Golang implementation of the Fernet symmetric encryption specification. It handles key management, token creation, encryption/decryption, and integrity verification.

Go-Bloom implements bloom filter using double hashing.

GoPtLib is a library for writing Tor pluggable transports in Go.

Package pbkdf2 implements password-based key derivation using the PBKDF2 algorithm described in RFC 2898 and RFC 8018.

This package implements crypto.Signer for PKCS #11 private keys.

This package implements RC2 Cipher in Golang.

Keyring provides utility functions for and a common interface to a range of secure credential storage services. Originally developed as part of AWS Vault, a command line tool for securely managing AWS access from developer workstations.

Currently Keyring supports the following backends: macOS/OSX Keychain, Windows pcredential store, Pass, Secret Service, KDE Wallet, Encrypted File. This package provides an command line interface (CLI) tool.

Package crypt is a implementation of crypt(3) by golang, originated from https://code.google.com/p/go-crypt.

Package ssh wraps the crypto/ssh package with a higher-level API for building SSH servers. The goal of the API was to make it as simple as using net/http, so the API is very similar. It's alternative fork of https://github.com/gliderlabs/ssh.

This package was initially based on the pure go BLAKE2b implementation of Dmitry Chestnykh and merged with the (cgo dependent) AVX optimized BLAKE2 implementation (which in turn is based on the official implementation. It does so by using Go's Assembler for amd64 architectures with a golang only fallback for other architectures.

In addition to AVX there is also support for AVX2 as well as SSE. Best performance is obtained with AVX2 which gives roughly a 4X performance increase approaching hashing speeds of 1GB/sec on a single core.

Boiler-plate to securely seed Go's random number generator (if possible).

The purpose of this package is to provide a version of arbitrary sized arithmetic, in a safer (i.e. constant-time) way, for cryptography.

This package is a drop-in replacement for the standard library hash/crc32 package, that features AVX 512 optimizations on x64 platforms, for a 2x speedup for IEEE CRC32 checksums. See Cyclic redundancy check for information.

Package pinentry provides a client to GnuPG's pinentry.

Package ed25519 implements the Ed25519 signature algorithm.

uTLS is a fork of crypto/tls, which provides ClientHello fingerprinting resistance, low-level access to handshake, fake session tickets and some other features. Handshake is still performed by crypto/tls, this library merely changes ClientHello part of it and provides low-level access.