obfs4proxy is a tool that attempts to circumvent censorship by transforming the Tor traffic between the client and the bridge. This way censors, who usually monitor traffic between the client and the bridge, will see innocent-looking transformed traffic instead of the actual Tor traffic.

Package blake256 implements BLAKE-256 and BLAKE-224 with SSE2, SSE4.1, and AVX acceleration and zero allocations.

This package implements the edwards25519 elliptic curve in Go, exposing the necessary APIs to build a wide array of higher-level primitives.

Package keccak implements the Keccak (SHA-3) hash algorithm. See http://keccak.noekeon.org.

This package implements RFC 7512 - the PKCS #11 URI Scheme; and errata specifications.

ejson is a utility (CLI and Go library) for managing a collection of secrets in source control.

The secrets are encrypted using public key, elliptic curve cryptography (NaCl Box: Curve25519 + Salsa20 + Poly1305-AES). Secrets are collected in a JSON file, in which all the string values are encrypted. Public keys are embedded in the file, and the decrypter looks up the corresponding private key from its local filesystem.

The ocicrypt library is the OCI image spec implementation of container image encryption. More details of the spec can be seen in the OCI repository. The purpose of this library is to encode spec structures and consts in code, as well as provide a consistent implementation of image encryption across container runtimes and build tools.

This package provides qtls, a QUIC-capable variant of the Go standard library's TLS 1.3 implementation.

This repository contains Go packages related to cryptographic standards that are not included in the Go standard library.

PKI based identities for use in go-libp2p.

This package provides an SFTP implementation, as described in https://filezilla-project.org/specs/draft-ietf-secsh-filexfer-02.txt, for Go.

This package provides a port of the XXH3 hash algorithm to Golang. XXH3 is an extremely fast non-cryptographic hash algorithm.

This package provides an Ed25519 implementation with validation rules intended for consensus-critical contexts.

This package provides Go bindings for GPGME, the GnuPG Made Easy library. It allows Go programs to use GPG for encryption, decryption, signing, and verification operations.

This is a pure Go implementation of the group operations on the Ristretto prime-order group built from Edwards25519.

Package agent implements the ssh-agent protocol, and provides both a client and a server. The client can talk to a standard ssh-agent that uses UNIX sockets, and one could implement an alternative ssh-agent process using the sample server.

Package pkcs12 implements some of PKCS#12 (also known as P12 or PFX). It is intended for decoding DER-encoded P12/PFX files for use with the crypto/tls package, and for encoding P12/PFX files for use by legacy applications which do not support newer formats. Since PKCS#12 uses weak encryption primitives, it SHOULD NOT be used for new applications.

Package xxhash implements the 64-bit variant of xxHash (XXH64) as described at https://xxhash.com/.

Obfs4 is a look-like nothing obfuscation protocol that incorporates ideas and concepts from Philipp Winter's ScrambleSuit protocol.

The notable differences between ScrambleSuit and obfs4 are:

• The handshake always does a full key exchange (no such thing as a Session Ticket Handshake).

• The handshake uses the Tor Project's ntor handshake with public keys obfuscated via the Elligator 2 mapping.

• The link layer encryption uses NaCl secret boxes (Poly1305/XSalsa20).

This package holds supplementary Go cryptography libraries, it's a fork of golang.org/x/crypto maintained by Tailscale.

This provides a fork of uTLS for the specific purpose of improving obfs4proxy's meek_lite transport.

This is a native Go implementation of the xxHash algorithm, an extremely fast non-cryptographic hash algorithm, working at speeds close to RAM limits.

This package implements the pseudo-random-function (PRF) HighwayHash. HighwayHash is a fast hash function designed to defend hash-flooding attacks or to authenticate short-lived messages.

This package produces a collection of cryptographic utilities, including the following:

• drbg: a cryptographically secure pseudorandom number generator as specified in NIST SP 800-90A

• encoding/base32: a compact base32 encoder

• secretkey: user-friendly secret keys that can be used with secretbox

• salsa20: a streaming interface (cipher.Stream) for the Salsa20 stream cipher

• poly1305: a streaming interface (hash.Hash) for the Poly1305 one-time authenticator as specified in poly1305