This Haskell package provides an incremental and one-pass, pure API to the SHA-256 cryptographic hash algorithm, with performance close to the fastest implementations available in other languages.

The implementation is made in C with a haskell FFI wrapper that hides the C implementation.

This library provides readers and writers for the Privacy Enhanced Mail (PEM) format.

This Haskell package provides implementation of MD5.

This library implements the SHA suite of message digest functions, according to NIST FIPS 180-2 (with the SHA-224 addendum), as well as the SHA-based HMAC routines. The functions have been tested against most of the NIST and RFC test vectors for the various functions. While some attention has been paid to performance, these do not presently reach the speed of well-tuned libraries, like OpenSSL.

This library provides functions to read and write X509 certificates.

This Haskell package provides a test framework for hash and cipher operations using the crypto-api interface. Known answer tests (KATs) for common cryptographic algorithms are included.

This package provides efficient cryptographic hash implementations for strict and lazy bytestrings. For now, CRC32 and Adler32 are supported; they are implemented as FFI bindings to efficient code from zlib.

This module provides Haskell bindings and extensions to the curve25519-donna codebase. It's a pretty straightforward implementation of the basic cryptographic routines you'd want from a project that uses curve25519: key generation, and key agreement. For further functionality, you'll want to look elsewhere.

Encrypted tokens/tickets to keep state in the client side.

This library implements the RSA encryption and signature algorithms for arbitrarily-sized ByteStrings. While the implementations work, they are not necessarily the fastest ones on the planet. Particularly key generation. The algorithms included are based of RFC 3447, or the Public-Key Cryptography Standard for RSA, version 2.1 (a.k.a, PKCS#1 v2.1).

This Haskell package provides an incremental and one-pass, pure API to the SHA-1 hash algorithm, including HMAC support, with performance close to the fastest implementations available in other languages.

The implementation is made in C with a haskell FFI wrapper that hides the C implementation.

HsOpenSSL is an OpenSSL binding for Haskell. It can generate RSA and DSA keys, read and write PEM files, generate message digests, sign and verify messages, encrypt and decrypt messages. It has also some capabilities of creating SSL clients and servers. This package is in production use by a number of Haskell based systems and stable. You may also be interested in the tls package, http://hackage.haskell.org/package/tls, which is a pure Haskell implementation of SSL.

This library contains io-streams routines for secure networking using OpenSSL (by way of HsOpenSSL).

This package provides a simple, fast, self-contained copy of the Ed25519 public-key signature system with a clean interface. It also includes support for detached signatures, and thorough documentation on the design and implementation, including usage guidelines.

Simple cryptographic random related types: a safe abstraction for CPRNGs.

This Haskell package provides AES cipher implementation.

The modes of operations available are ECB (Electronic code book), CBC (Cipher block chaining), CTR (Counter), XTS (XEX with ciphertext stealing), GCM (Galois Counter Mode).

The AES implementation uses AES-NI when available (on x86 and x86-64 architecture), but fallback gracefully to a software C implementation.

The software implementation uses S-Boxes, which might suffer for cache timing issues. However do notes that most other known software implementations, including very popular one (openssl, gnutls) also uses similar implementation. If it matters for your case, you should make sure you have AES-NI available, or you'll need to use a different implementation.

This package provides a simple monadic parser for ASN1 stream types, when ASN1 pattern matching is not convenient.

This package provides functions for X.509 certificate and revocation list validation.

This Haskell package provides helpers for using Persistent from Yesod.

This package provides an HTTP client engine, intended as a base layer for more user-friendly packages.

Gives you the tools to build parsers to decode JSON values, and gives good error messages when parsing fails. See also http://harry.garrood.me/blog/aeson-better-errors/.

Use websockets with WAI applications, primarily those hosted via Warp.

An HTTP client using the Snap Framework's io-streams library to handle the streaming IO. The API is optimized for ease of use for the rather common case of code needing to query web services and deal with the result.

This package provides the logging system for WAI.