This package provides generic X509 support for Haskell.

This package provides a simple monadic parser for ASN1 stream types, when ASN1 pattern matching is not convenient.

This library contains io-streams routines for secure networking using OpenSSL (by way of HsOpenSSL).

This Haskell package provides an incremental and one-pass, pure API to the SHA-256 cryptographic hash algorithm, with performance close to the fastest implementations available in other languages.

The implementation is made in C with a haskell FFI wrapper that hides the C implementation.

This package provides a repository of cryptographic primitives.

• Symmetric ciphers: AES, DES, 3DES, CAST5, Blowfish, Twofish, Camellia, RC4, Salsa, XSalsa, ChaCha.

• Hash: SHA1, SHA2, SHA3, SHAKE, MD2, MD4, MD5, Keccak, Skein, Ripemd, Tiger, Whirlpool, Blake2.

• MAC: HMAC, KMAC, Poly1305

• Asymmetric crypto: DSA, RSA, DH, ECDH, ECDSA, ECC, Curve25519, Curve448, Ed25519, Ed448

• Key Derivation Function: PBKDF2, Scrypt, HKDF, Argon2, BCrypt, BCryptPBKDF

• Cryptographic Random generation: System Entropy, Deterministic Random Generator

• Data related: Anti-Forensic Information Splitter (AFIS)

This package provides a cross-platform library that tries to find a (reasonable) CA certificate bundle that can be used with HsOpenSSL to verify the certificates of remote peers. It is for HsOpenSSL what x509-system is for the tls package, and borrows some ideas from x509-system.

Simple cryptographic random related types: a safe abstraction for CPRNGs.

This library implements the SHA suite of message digest functions, according to NIST FIPS 180-2 (with the SHA-224 addendum), as well as the SHA-based HMAC routines. The functions have been tested against most of the NIST and RFC test vectors for the various functions. While some attention has been paid to performance, these do not presently reach the speed of well-tuned libraries, like OpenSSL.

This package provides efficient cryptographic hash implementations for strict and lazy bytestrings. For now, CRC32 and Adler32 are supported; they are implemented as FFI bindings to efficient code from zlib.

This package provides a Haskell-only implementation of the MD5 digest (hash) algorithm. This now supports the crypto-api class interface.

Simple crypto pseudo-random-number-generator with really good randomness property.

Using ent, a randomness property maker on one 1Mb sample:

• Entropy = 7.999837 bits per byte.

• Optimum compression would reduce the size of this 1048576 byte file by 0 percent.

• Chi square distribution for 1048576 samples is 237.02.

• Arithmbetic mean value of data bytes is 127.3422 (127.5 = random).

• Monte Carlo value for Pi is 3.143589568 (error 0.06 percent).

Compared to urandom with the same sampling:

• Entropy = 7.999831 bits per byte.

• Optimum compression would reduce the size of this 1048576 byte file by 0 percent.

• Chi square distribution for 1048576 samples is 246.63.

• Arithmetic mean value of data bytes is 127.6347 (127.5 = random).

• Monte Carlo value for Pi is 3.132465868 (error 0.29 percent).

This package provides tools for operating system dependent X.509 stores, storage methods, and accessors.

This library provides readers and writers for the Privacy Enhanced Mail (PEM) format.

Native Haskell TLS and SSL protocol implementation for server and client. This provides a high-level implementation of a sensitive security protocol, eliminating a common set of security issues through the use of the advanced type system, high level constructions and common Haskell features. Currently implement the SSL3.0, TLS1.0, TLS1.1 and TLS1.2 protocol, and support RSA and Ephemeral (Elliptic curve and regular) Diffie Hellman key exchanges, and many extensions.

HsOpenSSL is an OpenSSL binding for Haskell. It can generate RSA and DSA keys, read and write PEM files, generate message digests, sign and verify messages, encrypt and decrypt messages. It has also some capabilities of creating SSL clients and servers. This package is in production use by a number of Haskell based systems and stable. You may also be interested in the tls package, http://hackage.haskell.org/package/tls, which is a pure Haskell implementation of SSL.

This package provides a reader and writer for ASN1 data in raw form with supports for high level forms of ASN1 (BER, and DER).

Encrypted tokens/tickets to keep state in the client side.

This package is a repository of cryptographic primitives for Haskell. It supports a wide range of symmetric ciphers, cryptographic hash functions, public key algorithms, key derivation numbers, cryptographic random number generators, and more.

This library provides functions to read and write X509 certificates.

This library implements the RSA encryption and signature algorithms for arbitrarily-sized ByteStrings. While the implementations work, they are not necessarily the fastest ones on the planet. Particularly key generation. The algorithms included are based of RFC 3447, or the Public-Key Cryptography Standard for RSA, version 2.1 (a.k.a, PKCS#1 v2.1).

The package provides the standard types for dealing with the ASN.1 format.

This Haskell package provides AES cipher implementation.

The modes of operations available are ECB (Electronic code book), CBC (Cipher block chaining), CTR (Counter), XTS (XEX with ciphertext stealing), GCM (Galois Counter Mode).

The AES implementation uses AES-NI when available (on x86 and x86-64 architecture), but fallback gracefully to a software C implementation.

The software implementation uses S-Boxes, which might suffer for cache timing issues. However do notes that most other known software implementations, including very popular one (openssl, gnutls) also uses similar implementation. If it matters for your case, you should make sure you have AES-NI available, or you'll need to use a different implementation.

This package provides conduit interfaces for some of cryptonite's implementations of cryptographic primitives.

Generic cryptography public keys algorithm types.