Package pinentry provides a client to GnuPG's pinentry.

This package implements a functionality for two parties to generate a mutual secret key by using a weak key that is known to both beforehand (e.g. via some other channel of communication). This is a simple API for an implementation of Password-Authenticated Key Exchange. This protocol is derived from Dan Boneh and Victor Shoup's cryptography book (pg 789, PAKE2 protocol).

Package imohash implements a fast, constant-time hash for files. It is based atop murmurhash3 and uses file size and sample data to construct the hash.

The pgpmail package implements PGP encryption for e-mail messages.

Chainhash provides a generic hash type and associated functions that allows the specific hash algorithm to be abstracted.

EME (ECB-Mix-ECB or, clearer, Encrypt-Mix-Encrypt) is a wide-block encryption mode developed by Halevi and Rogaway.

This package implements the edwards25519 elliptic curve in Go, exposing the necessary APIs to build a wide array of higher-level primitives.

This package provides an implementation of the Red October keyserver protocol for Golang. It uses the Two-Person Rule to protect sensitive data, which means it supports generating, distributing, and recovering keys among multiple parties with configurable quorum requirements. The package include Go source library and redoctober command.

blake3 implements the BLAKE3 cryptographic hash function. In addition to the pure-Go implementation, this package also contains AVX-512 and AVX2 routines (generated by avo) that greatly increase performance for large inputs and outputs.

This package implements the elliptic curves from NIST SP 800-186.

This package provides a Go translation of the reference C++ code for MetroHash, a high quality, high performance hash algorithm.

This package provides a port of the XXH3 hash algorithm to Golang. XXH3 is an extremely fast non-cryptographic hash algorithm.

This package provides Go bindings for GPGME, the GnuPG Made Easy library. It allows Go programs to use GPG for encryption, decryption, signing, and verification operations.

This package provides a Go implementation of common cryptographic routines used in secure systems. It includes support for various signature schemes and key management utilities.

ZCertificate parses X.509 certificates and runs @urlhttps://github.com/zmap/zlint,ZLint.

Keyring provides utility functions for and a common interface to a range of secure credential storage services. Originally developed as part of AWS Vault, a command line tool for securely managing AWS access from developer workstations.

Currently Keyring supports the following backends: macOS/OSX Keychain, Windows pcredential store, Pass, Secret Service, KDE Wallet, Encrypted File. This package provides an command line interface (CLI) tool.

This package provides an API to interact with the local GPG Agent from Golang.

Package sha1cd implements collision detection based on the whitepaper Counter-cryptanalysis from Marc Stevens. The original ubc implementation was done by Marc Stevens and Dan Shumow, and can be found at: @urlhttps://github.com/cr-marcstevens/sha1collisiondetection,https://github.com/cr-marcstevens/sha1collisiondetection.

ZLint is a X.509 certificate linter that checks for consistency with standards (e.g. RFC 5280) and other relevant PKI requirements (e.g. CA/Browser Forum Baseline Requirements).

This package provides ShāngMì 4 cipher suites implementation (GM SM2/3/4).

Main functions:

• SM2 national secret elliptic curve algorithm library

• SM3 national secret hash algorithm library

• SM4 national secret block cipher algorithm library

Rocacheck is a Go library for checking RSA public keys for the ROCA vulnerability (CVE-2017-15361) that affected certain Infineon cryptographic libraries and smart cards.

This package implements high-performance hexadecimal encoding and decoding. On AVX2-capable x86_64 CPUs, xhex enables SIMD acceleration at runtime.

This package provides a Go implementation of Tink cryptographic library.

This package provides a Golang implementation of the Fernet symmetric encryption specification. It handles key management, token creation, encryption/decryption, and integrity verification.