Comparison of cryptography libraries

On this page

List article

The tables below compare cryptography libraries that deal with cryptography algorithms and have application programming interface (API) function calls to each of the supported features.

Cryptography libraries

Name of implementation

Initiative

Main implementation language

Open-source software

Software license

Latest release

Botan

Jack Lloyd

C++

Yes

Simplified BSD

3.6.1 (October 26, 2024; 4 months ago (2024-10-26)¹) [±]

Bouncy Castle

Legion of the Bouncy Castle Inc.

Java, C#

Yes

MIT License

Java	1.80 / January 14, 2025; 2 months ago (2025-01-14)²
Java LTS	BC-LJA 2.73.7 / November 8, 2024; 4 months ago (2024-11-08)³
Java FIPS	BC-FJA 2.0.0 / July 30, 2024; 7 months ago (2024-07-30)⁴
C#	2.5.1 / February 14, 2025; 38 days ago (2025-02-14)⁵
C# FIPS	BC-FNA 1.0.2 / March 11, 2024; 12 months ago (2024-03-11)⁶

BSAFE

Dell, formerly RSA Security

Java, C, Assembly

Proprietary

Crypto-C Micro Edition: 4.1.5 (December 17, 2020; 4 years ago (2020-12-17)⁷) [±]

Micro Edition Suite: 5.0.3 (December 3, 2024; 3 months ago (2024-12-03)⁸) [±]Crypto-J: 7.0.1 (March 17, 2025; 7 days ago (2025-03-17)⁹) [±]

6.3 (April 4, 2023; 23 months ago (2023-04-04)¹⁰) [±]

cryptlib

Peter Gutmann

Yes

Sleepycat License or commercial license

3.4.5 (2019; 6 years ago (2019)¹¹) [±]

Crypto++

The Crypto++ project

C++

Yes

Boost (all individual files are public domain)

Jan 10, 2023 (8.9.0)

GnuTLS

Nikos Mavrogiannopoulos, Simon Josefsson

Yes

LGPL-2.1-or-later

3.8.9¹² 2025-02-08

Java's default JCA/JCE providers

Oracle

Java

Yes

GNU GPL v2 and commercial license

23.0.1 (October 15, 2024; 5 months ago (2024-10-15)¹³) [±]21.0.5 LTS (October 15, 2024; 5 months ago (2024-10-15)¹⁴) [±]17.0.13 LTS (October 15, 2024; 5 months ago (2024-10-15)¹⁵) [±]11.0.25 LTS (October 15, 2024; 5 months ago (2024-10-15)¹⁶) [±]8u431 LTS (October 15, 2024; 5 months ago (2024-10-15)¹⁷) [±]

LibreSSL

OpenBSD Foundation

Yes

Apache 1.0

4.0.0¹⁸ 2024-10-14

Libgcrypt

GnuPG community and g10code

Yes

GNU LGPL v2.1+

stable	1.11.0 / June 19, 2024; 9 months ago (2024-06-19)¹⁹
LTS	1.8.11 / November 16, 2023; 16 months ago (2023-11-16)²⁰

libsodium

Frank Denis

Yes

ISC

Sep 13, 2023 (1.0.19)

Mbed TLS

Arm Limited

Yes

Apache 2.0

3.0.0 (July 7, 2021; 3 years ago (2021-07-07)²¹) [±]

2.27.0 (July 7, 2021; 3 years ago (2021-07-07)) [±]2.16.11 (July 7, 2021; 3 years ago (2021-07-07)) [±]

NaCl

Daniel J. Bernstein, Tanja Lange, Peter Schwabe

Yes

Public domain

February 21, 2011²²

Nettle

Yes

GNU GPL v2+ or GNU LGPL v3

3.10.1²³ 2024-12-30

Network Security Services (NSS)

Mozilla

Yes

MPL 2.0

Standard	3.84 / October 12, 2022; 2 years ago (2022-10-12)²⁴
Extended Support Release	3.79.1 / August 18, 2022; 2 years ago (2022-08-18)²⁵

OpenSSL

The OpenSSL Project

Yes

Apache 2.0

3.4.1²⁶ 2025-02-11

wolfCrypt

wolfSSL, Inc.

Yes

GNU GPL v2 or commercial license

5.7.6 (December 31, 2024; 2 months ago (2024-12-31)²⁷) [±]

FIPS 140

This table denotes, if a cryptography library provides the technical requisites for FIPS 140, and the status of their FIPS 140 certification (according to NIST's CMVP search,²⁸ modules in process list²⁹ and implementation under test list).³⁰

Implementation	FIPS 140-2 mode	FIPS 140-2 validated	FIPS 140-3 validated
Botan	No	No	No
Bouncy Castle	Yes	Yes³¹	Yes³²
BSAFE	Yes	Yes³³ ³⁴	Yes³⁵
cryptlib	Yes	No	No
Crypto++	No	No³⁶	No
GnuTLS	No	Yes³⁷ ³⁸	In process³⁹
Java's default JCA/JCE providers	No	No⁴⁰ ⁴¹	No
Libgcrypt	Yes	Yes⁴² ⁴³	In process⁴⁴
libsodium	No	No	No
Mbed TLS	No	No	No
NaCl	No	No	No
Nettle	No	No	No
Network Security Services (NSS)	Yes	Yes⁴⁵ ⁴⁶	In process⁴⁷
OpenSSL	Yes	Yes⁴⁸ ⁴⁹	In process⁵⁰
wolfCrypt	Yes	Yes⁵¹	Yes⁵²

Key operations

Key operations include key generation algorithms, key exchange agreements, and public key cryptography standards.

Public key algorithms

Further information: Public-key cryptography

Implementation	RSA	DSA	ECDSA	EdDSA	Ed448	DH	ECDH	ECIES	ElGamal	NTRU(IEEE P1363.1)	DSS
Botan	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes
Bouncy Castle	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
BSAFE	Yes	Yes	Yes	No	No	Yes	Yes	Yes	No	No	No
cryptlib	Yes	Yes	Yes	No	No	Yes	Yes	No	Yes	No	Yes
Crypto++	Yes	Yes	Yes	No	No	Yes	Yes	Yes	Yes	No	Yes
GnuTLS	Yes	No	No	No	No	No	No	No	No	No	No
Java's default JCA/JCE providers	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	No	No	Yes
Libgcrypt	Yes	Yes	Yes	Yes	Yes	Yes	Yes⁵³	No	Yes	No	Yes
libsodium	No	No	No	Yes	No	No	No	No	No	No	No
Mbed TLS	Yes	Yes	Yes	No	No	Yes	Yes	No	No	No	No
Nettle	Yes	Yes	No	Yes	No	No	No	No	No	No	No
OpenSSL	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	No	No	No
wolfCrypt	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes

Elliptic-curve cryptography (ECC) support

Further information: Elliptic-curve cryptography

Implementation	NIST	SECG	ECC Brainpool	Curve25519	Curve448	GOST R 34.10⁵⁴	SM2
Botan	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Bouncy Castle	Yes	Yes	Yes	Yes	Yes	Yes	Yes
BSAFE	Yes	Yes	No	No	No	No	No
cryptlib	Yes	Yes	Yes	No	No	No	No
Crypto++	Yes	Yes	Yes	Yes	No	No	No
GnuTLS	Yes	No	No	No	No	No	No
Java's default JCA/JCE providers	Yes	Yes	No	Yes	Yes	No	No
Libgcrypt	Yes	Yes	Yes	Yes	Yes	Yes	Yes
libsodium	Yes	No	No	Yes	Yes	No	No
Mbed TLS	Yes	Yes	Yes	Yes	No	No	No
Nettle	Yes	Partial	No	Yes	No	No	No
OpenSSL	Yes	Yes	Yes	Yes	Yes	Yes	Yes
wolfCrypt	Yes	Yes	Yes	Yes	Yes	No	Yes

Public key cryptography standards

Further information: PKCS

Implementation	PKCS #1	PKCS #5,⁵⁵ PBKDF2	PKCS #8	PKCS #12	IEEE P1363	ASN.1
Botan	Yes	Yes	Yes	No	Yes	Yes
Bouncy Castle	Yes	Yes	Yes	Yes	Yes	Yes
BSAFE Crypto-J	Yes	Yes	Yes	Yes	No	Yes
cryptlib	Yes	Yes	Yes	Yes	No	Yes
Crypto++	Yes	Yes	Yes⁵⁶	No	Yes	Yes
GnuTLS
Java's default JCA/JCE providers	Yes	Yes	Yes	Yes	Yes	Yes
Libgcrypt	Yes	Yes⁵⁷	Yes⁵⁸	Yes⁵⁹	Yes⁶⁰	Yes⁶¹
libsodium	No	No	No	No	No	No
Mbed TLS	Yes	No	Yes	Yes	No	Yes
Nettle	Yes	Yes	No	No	No	No
OpenSSL	Yes	Yes	Yes	Yes	No	Yes
wolfCrypt	Yes	Yes	Yes	Yes	No	Yes

Hash functions

Comparison of supported cryptographic hash functions. Here hash functions are defined as taking an arbitrary length message and producing a fixed size output that is virtually impossible to use for recreating the original message.

Implementation	MD5	SHA-1	SHA-2	SHA-3	RIPEMD-160	Tiger	Whirlpool	BLAKE2	GOST R 34.11-94 ⁶²(aka GOST 34.311-95)	GOST R 34.11-2012(Stribog)⁶³	SM3
Botan	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Bouncy Castle	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
BSAFE Crypto-J	Yes	Yes	Yes	Yes	Yes	No	No	No	No	No	No
cryptlib	Yes	Yes	Yes	Yes	Yes	No	Yes	No	No	No	No
Crypto++	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes
GnuTLS
Java's default JCA/JCE providers	Yes	Yes	Yes	Yes	No	No	No	No	No	No	No
Libgcrypt	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
libsodium	No	No	Yes	No	No	No	No	Yes	No	No	No
Mbed TLS	Yes	Yes	Yes	Yes	Yes	No	No	No	No	No	No
Nettle	Yes	Yes	Yes	Yes	Yes	No	No	No	Yes	No	No
OpenSSL	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes
wolfCrypt	Yes	Yes	Yes	Yes	Yes	No	No	Yes	No	No	Yes

MAC algorithms

Comparison of implementations of message authentication code (MAC) algorithms. A MAC is a short piece of information used to authenticate a message—in other words, to confirm that the message came from the stated sender (its authenticity) and has not been changed in transit (its integrity).

Implementation	HMAC-MD5	HMAC-SHA1	HMAC-SHA2	Poly1305	BLAKE2-MAC
Botan	Yes	Yes	Yes	Yes	Yes
Bouncy Castle	Yes	Yes	Yes	Yes	Yes
BSAFE Crypto-J	Yes	Yes	Yes	Yes	No
cryptlib	Yes	Yes	Yes	No	No
Crypto++	Yes	Yes	Yes	Yes	Yes
GnuTLS
Java's default JCA/JCE providers	Yes	Yes	Yes	No	No
Libgcrypt	Yes	Yes	Yes	Yes	Yes
libsodium	No	No	Yes	Yes	Yes
Mbed TLS	Yes	Yes	Yes	No	No
Nettle	Yes	Yes	Yes	Yes	No
OpenSSL	Yes	Yes	Yes	Yes	Yes
wolfCrypt	Yes	Yes	Yes	Yes	Yes

Block ciphers

Table compares implementations of block ciphers. Block ciphers are defined as being deterministic and operating on a set number of bits (termed a block) using a symmetric key. Each block cipher can be broken up into the possible key sizes and block cipher modes it can be run with.

Block cipher algorithms

Further information: Block cipher

Implementation	AES	3DES	Camellia	Blowfish	Twofish	IDEA	CAST5	ARIA	GOST 28147-89 ⁶⁴/ GOST R 34.12-2015(Magma⁶⁵ & Kuznyechik⁶⁶)	SM4
Botan	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Bouncy Castle ⁶⁷	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
BSAFE Crypto-J	Yes	Yes	No	No	No	No	No	No	No	No
cryptlib ⁶⁸	Yes	Yes	No	Yes	No	Yes	Yes	No	No	No
Crypto++	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Partial⁶⁹	Yes
GnuTLS	Yes	No	Yes	No	No	No	No	No	No	No
Java's default JCA/JCE providers	Yes	Yes	No	Yes	No	No	No	No	No	No
Libgcrypt	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
libsodium	Partial⁷⁰	No	No	No	No	No	No	No	No	No
Mbed TLS	Yes	Yes	Yes	Yes	No	No	No	No	No	No
Nettle	Yes	Yes	Yes	Yes	No	No	No	No	No	No
OpenSSL	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes	Yes
wolfCrypt	Yes	Yes	Yes	No	No	Yes	No	Yes	No	Yes

Cipher modes

Further information: Block cipher mode of operation

Implementation	ECB	CBC	OFB	CFB	CTR	CCM	GCM	OCB	XTS	AES-Wrap	Stream	EAX
Botan	No	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
Bouncy Castle	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes
BSAFE	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	No
cryptlib	Yes	Yes	Yes	Yes	No	No	Yes	No	No	No	No	No
Crypto++	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	No	Yes	Yes
GnuTLS
Java's default JCA/JCE providers	Yes	Yes	Yes	Yes	Yes	No	Yes	No	No	Yes	Yes	No
Libgcrypt	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
libsodium	No	No	No	No	Yes	No	Yes	No	No	No	No	No
Mbed TLS	Yes	Yes	No	Yes	Yes	Yes	Yes	No	No	No	No	No
Nettle	Yes	Yes	No	No	Yes	Yes	Yes	No	No	No	No	No
OpenSSL	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No
wolfCrypt	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	Yes	Yes

Stream ciphers

The table below shows the support of various stream ciphers. Stream ciphers are defined as using plain text digits that are combined with a pseudorandom cipher digit stream. Stream ciphers are typically faster than block ciphers and may have lower hardware complexity, but may be more susceptible to attacks.

Implementation	RC4	HC-256	Rabbit	Salsa20	ChaCha	SEAL	Panama	WAKE	Grain	VMPC	ISAAC
Botan	Yes	No	No	Yes	Yes	No	No	No	No	No	No
Bouncy Castle	Yes	Yes	No	Yes	Yes	No	No	No	Yes	Yes	Yes
BSAFE Crypto-J	Yes	No	No	No	Yes	No	No	No	No	No	No
cryptlib	Yes	No	No	No	No	No	No	No	No	No	No
Crypto++	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	No	No	No
GnuTLS
Java's default JCA/JCE providers	Yes	No	No	No	Yes	No	No	No	No	No	No
Libgcrypt	Yes	No	No	Yes	Yes	No	No	No	No	No	No
libsodium	No	No	No	Yes	Yes	No	No	No	No	No	No
Mbed TLS	Yes	No	No	No	Yes	No	No	No	No	No	No
Nettle	Yes	No	No	Yes	Yes	No	No	No	No	No	No
OpenSSL	Yes	No	No	No	Yes	No	No	No	No	No	No
wolfCrypt	Yes	No	No	Yes	Yes	No	No	No	No	No	No

Hardware-assisted support

These tables compare the ability to use hardware enhanced cryptography. By using the assistance of specific hardware, the library can achieve greater speeds and/or improved security than otherwise.

Smart card, SIM, HSM protocol support

Further information: Smart card, SIM card, and Hardware security module

Implementation	PKCS #11	PC/SC	CCID
Botan	Yes	No	No
Bouncy Castle	Yes⁷¹	No	No
BSAFE	Yes⁷²	No	No
cryptlib	Yes	No	No
Crypto++	No	No	No
GnuTLS	Yes	No	No
Java's default JCA/JCE providers	Yes	No⁷³	No⁷⁴
Libgcrypt	Yes⁷⁵	Yes⁷⁶	Yes⁷⁷
libsodium	No	No	No
Mbed TLS	Yes⁷⁸	No	No
OpenSSL	Yes⁷⁹	No	No
wolfCrypt	Yes	No	No

General purpose CPU, platform acceleration support

Further information: CPU

Implementation	AES-NI	SSSE3, SSE4.1	AVX, AVX2	AVX-512	RDRAND	VIA PadLock	Intel QuickAssist	ARMv7-A NEON	ARMv8-A cryptography instructions	Power ISA v2.03 (AltiVec ⁸⁰)	Power ISA v2.07 (e.g., POWER8 and later⁸¹)
Botan	Yes	Yes	Yes	Yes	Yes	No	No	Yes	Yes	Yes	Yes
BSAFE	Yes⁸²	Yes⁸³	Yes⁸⁴	No	Yes⁸⁵	No	No	No	Yes⁸⁶	No	No
cryptlib	Yes	Yes	Yes	No	Yes	Yes	No	No	No	No	No
Crypto++	Yes	Yes	Yes	No	Yes	Yes⁸⁷	No	Yes	Yes	Yes	Yes
GnuTLS	Yes	No	No	No	No	Yes	No	No	No	No	No
Java's default JCA/JCE providers	Yes⁸⁸	Yes⁸⁹	Yes⁹⁰	Yes⁹¹	Yes⁹²	No	No	No	Yes⁹³	No	Yes⁹⁴
Libgcrypt ⁹⁵	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes	No	Yes
libsodium	Yes	Yes	Yes	No	No	No	No	No	No	No	No
OpenSSL	Yes	Yes	Yes	Yes	Yes⁹⁶	Yes	No	Yes	Yes	Yes	Yes
wolfCrypt	Yes	Yes	Yes	No	Yes	No	Yes⁹⁷	Yes	Yes⁹⁸	No	No

Code size and code to comment ratio

Implementation	Source code size (kSLOC = 1000 lines of source code)	Code to comment lines ratio
Botan	133⁹⁹	4.55¹⁰⁰
Bouncy Castle	1359¹⁰¹	5.26¹⁰²
BSAFE Crypto-J	271¹⁰³	1.3¹⁰⁴
cryptlib	241	2.66
Crypto++	115¹⁰⁵	5.74¹⁰⁶
GnuTLS	363¹⁰⁷	7.30¹⁰⁸
Java's default JCA/JCE providers
Libgcrypt	216¹⁰⁹	6.27¹¹⁰
libsodium	44¹¹¹	21.92¹¹²
Mbed TLS	105¹¹³	33.9¹¹⁴
Nettle	111¹¹⁵	4.08¹¹⁶
OpenSSL	472¹¹⁷	4.41¹¹⁸
wolfCrypt	39	5.69

Portability

Implementation	Supported operating system	Thread safe
Botan	Linux, Windows, macOS, Android, iOS, FreeBSD, NetBSD, OpenBSD, DragonflyBSD, Solaris, AIX, QNX, Haiku	Yes
Bouncy Castle	General Java API: J2ME, Java Runtime Environment 1.1+, Android. Java FIPS API: Java Runtime 1.5+, Android. C# API (General & FIPS): CLR 4.
BSAFE Crypto-J	Solaris, Linux, Android, FreeBSD, AIX, 32 and 64-bit Windows, macOS (Darwin)	Yes
cryptlib	AMX, ARINC 653, BeOS, ChorusOS, CMSIS-RTOS/mbed-rtos, DOS, DOS32, eCOS, embOS, FreeRTOS/OpenRTOS, uItron, MQX, MVS, Nucleus, OS/2, Palm OS, QNX Neutrino, RTEMS, SMX, Tandem NonStop, Telit, ThreadX, uC/OS II, Unix (AIX, FreeBSD, HP-UX, Linux, macOS, Solaris, etc.), VDK, VM/CMS, VxWorks, Win16, Win32, Win64, WinCE/PocketPC/etc, XMK	Yes
Crypto++	Unix (AIX, OpenBSD, Linux, MacOS, Solaris, etc.), Win32, Win64, Android, iOS, ARM	Yes¹¹⁹
GnuTLS	Runs on most Unix platforms and Windows¹²⁰	?
Libgcrypt	All 32- and 64-bit Unix Systems (Linux, FreeBSD, NetBSD, macOS etc.), Win32, Win64, WinCE, and more	Yes¹²¹
libsodium	macOS, Linux, OpenBSD, NetBSD, FreeBSD, DragonflyBSD, Android, iOS, 32 and 64-bit Windows (Visual Studio, MinGW, C++ Builder), NativeClient, QNX, JavaScript, AIX, MINIX, Solaris	Yes
Mbed TLS	Win32/64, Unix Systems, embedded Linux, Micrium's μC/OS, FreeRTOS	?
OpenSSL	Solaris, IRIX, HP-UX, MPE/iX, Tru64, Linux, Android, BSD (OpenBSD, NetBSD, FreeBSD, DragonflyBSD), NextSTEP, QNX, UnixWare, SCO, AIX, 32 and 64-bit Windows (Visual Studio, MinGW, UWIN, CygWin), UEFI, macOS (Darwin), iOS, HURD, VxWorks, uClinux, VMS, DJGPP (DOS), Haiku	Yes
wolfCrypt	Win32/64, Linux, macOS, Solaris, ThreadX, VxWorks, FreeBSD, NetBSD, OpenBSD, embedded Linux, WinCE, Haiku, OpenWRT, iPhone (iOS), Android, Nintendo Wii and Gamecube through DevKitPro, QNX, MontaVista, NonStop, TRON/ITRON/μITRON, Micrium's μC/OS, FreeRTOS, SafeRTOS, Freescale MQX, Nucleus, TinyOS, HP-UX	Yes

References

"Botan: Release Notes". Retrieved 2025-01-22. https://botan.randombit.net/#releases ↩
"Download Bouncy Castle for Java - bouncycastle.org". 2025-01-14. Retrieved 2025-02-16. https://www.bouncycastle.org/download/bouncy-castle-java/ ↩
"Download Bouncy Castle for Java LTS - bouncycastle.org". 2024-11-08. Retrieved 2024-11-29. https://www.bouncycastle.org/download/bouncy-castle-java-lts/ ↩
"Download Bouncy Castle for Java FIPS - bouncycastle.org". 2024-07-30. Retrieved 2024-11-29. https://www.bouncycastle.org/download/bouncy-castle-java-fips/ ↩
"Download Bouncy Castle for C# .NET - bouncycastle.org". 2025-02-14. Retrieved 2024-02-16. https://www.bouncycastle.org/download/bouncy-castle-c/ ↩
"Download Bouncy Castle for C# .NET FIPS - bouncycastle.org". 2024-03-11. Retrieved 2024-11-29. https://www.bouncycastle.org/download/bouncy-castle-c-fips/ ↩
"Dell BSAFE Crypto-C Micro Edition 4.1.5 and Micro Edition Suite 4.6 Release Advisory". https://www.dell.com/support/kbdoc/000181234 ↩
"Dell BSAFE Micro Edition Suite 5.0.3 Release Advisory". https://www.dell.com/support/kbdoc/000254066 ↩
"Dell BSAFE Crypto-J 7.0.1 Release Advisory". https://www.dell.com/support/kbdoc/000296109/dell-bsafe-crypto-j-7-0-1-release-advisory ↩
"Dell BSAFE Crypto-J 6.3 Release Advisory". https://www.dell.com/support/kbdoc/000212037/dell-bsafe-crypto-j-6-3-release-advisory ↩
Gutmann, Peter (2019). "Downloading". cryptlib. University of Auckland School of Computer Science. Retrieved 2019-08-07. /wiki/Peter_Gutmann_(computer_scientist) ↩
Daiki Ueno (8 February 2025). https://lists.gnupg.org/pipermail/gnutls-help/2025-February/004875.html. Retrieved 13 February 2025. {{cite web}}: Missing or empty |title= (help) https://lists.gnupg.org/pipermail/gnutls-help/2025-February/004875.html ↩
"Java™ SE Development Kit 23, 23.0.1 Release Notes". Oracle Corporation. Retrieved 2024-10-16. https://www.oracle.com/java/technologies/javase/23-0-1-relnotes.html ↩
"Java™ SE Development Kit 21, 21.0.5 Release Notes". Oracle Corporation. Retrieved 2024-10-16. https://www.oracle.com/java/technologies/javase/21-0-5-relnotes.html ↩
"Java™ SE Development Kit 17, 17.0.13 Release Notes". Oracle Corporation. Retrieved 2024-10-16. https://www.oracle.com/java/technologies/javase/17-0-13-relnotes.html ↩
"Java™ SE Development Kit 11, 11.0.25 Release Notes". Oracle Corporation. Retrieved 2024-10-16. https://www.oracle.com/java/technologies/javase/11-0-25-relnotes.html ↩
"Java™ SE Development Kit 8, Update 431 Release Notes". Oracle Corporation. Retrieved 2024-10-16. https://www.oracle.com/java/technologies/javase/8u431-relnotes.html ↩
"LibreSSL 4.0.0 Released". 14 October 2024. Retrieved 15 October 2024. https://marc.info/?l=openbsd-announce&m=172897399729957&w=2 ↩
"Libgcrypt 1.11.0 released". dev.gnupg.org. 2024-06-19. Retrieved 2024-06-20. https://lists.gnu.org/archive/html/info-gnu/2024-06/msg00004.html ↩
"Libgcrypt 1.8.11 released". dev.gnupg.org. 2023-11-16. Retrieved 2023-11-16. https://dev.gnupg.org/source/libgcrypt/browse/LIBGCRYPT-1.8-BRANCH/NEWS%3Blibgcrypt-1.8.11?view=raw ↩
"Mbed TLS releases". 2021-07-07. Retrieved 2021-10-14. https://github.com/ARMmbed/mbedtls/releases ↩
Downloading and installing NaCl, Bernstein, Lange, Schwabe, retrieved 2017-05-22 https://nacl.cr.yp.to/install.html ↩
Niels Möller (30 December 2024). "ANNOUNCE: Nettle-3.10.1". Retrieved 1 January 2025. https://lists.gnu.org/archive/html/info-gnu/2024-12/msg00008.html ↩
"NSS:Release versions". Mozilla Wiki. Retrieved 7 November 2022. https://wiki.mozilla.org/NSS:Release_Versions ↩
"NSS:Release versions". Mozilla Wiki. Retrieved 7 November 2022. https://wiki.mozilla.org/NSS:Release_Versions ↩
"OpenSSL 3.4.1". 11 February 2025. Retrieved 11 February 2025. https://github.com/openssl/openssl/releases/tag/openssl-3.4.1 ↩
"wolfSSL ChangeLog". 2024-12-31. Retrieved 2024-12-31. https://www.wolfssl.com/docs/wolfssl-changelog/ ↩
Computer Security Division, Information Technology Laboratory (2016-10-11). "Search - Cryptographic Module Validation Program | CSRC | CSRC". CSRC | NIST. Retrieved 2024-11-22. https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search ↩
Computer Security Division, Information Technology Laboratory (2016-10-11). "Modules In Process List - Cryptographic Module Validation Program | CSRC | CSRC". CSRC | NIST. Retrieved 2024-11-22. https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/Modules-In-Process-List ↩
"Cryptographic Module Validation Program CMVP". csrc.nist.gov. 11 October 2016. https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/IUT-List ↩
"Cryptographic Module Validation Program". CSRC.nist.gov. Archived from the original on 2021-10-21. https://web.archive.org/web/20211021224834/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&Vendor=bouncy+castle&CertificateStatus=Active&ValidationYear=0 ↩
"Certificate #4743". CSRC. 16 February 2025. https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4743 ↩
"Cryptographic Module Validation Program". CSRC.nist.gov. Archived from the original on 2021-09-24. https://web.archive.org/web/20210924205508/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=crypto-c&CertificateStatus=Active&ValidationYear=0 ↩
"Cryptographic Module Validation Program". CSRC.nist.gov. Archived from the original on 2021-10-23. https://web.archive.org/web/20211023002317/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=crypto-j&CertificateStatus=Active&ValidationYear=0 ↩
"Cryptographic Module Validation Program | CSRC". https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Advanced&ModuleName=bsafe&Standard=140-3&CertificateStatus=Active&ValidationYear=0 ↩
Crypto++ received three FIPS 140 validations from 2003 through 2008. In 2016 NIST moved Crypto++ to the Historical Validation List. ↩
"Search - Cryptographic Module Validation Program". CSRC. Retrieved 2022-05-29. https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=GnuTLS&CertificateStatus=Active&ValidationYear=0 ↩
While GnuTLS is not FIPS 140-2 validated by GnuTLS.org, validations exist for versions from Amazon Web Services Inc., Oracle Corporation, Red Hat Inc. and SUSE LLC. ↩
"Implementation Under Test List - Cryptographic Module Validation Program". CSRC. 11 October 2016. https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/iut-list ↩
"Search - Cryptographic Module Validation Program". CSRC. 11 October 2016. https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=Java&CertificateStatus=Active&ValidationYear=0 ↩
While none of default JDK JCA/JCE providers is FIPS 140-2 validated, there are other JCE/JCA third party providers which are FIPS 140-2 validated. ↩
Computer Security Division, Information Technology Laboratory (October 11, 2016). "Search - Cryptographic Module Validation Program | CSRC | CSRC". CSRC | NIST. https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=libgcrypt&CertificateStatus=Active&ValidationYear=0 ↩
While Libgcrypt is not FIPS 140-2 validated by g10code, validations exist for versions from Amazon Web Services Inc., Canonical Ltd., Oracle Corporation, Red Hat Inc. and SUSE LLC. ↩
"Implementation Under Test List - Cryptographic Module Validation Program". CSRC. 11 October 2016. https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/iut-list ↩
"Cryptographic Module Validation Program". CSRC.nist.gov. Archived from the original on 2021-09-24. https://web.archive.org/web/20210924205511/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=NSS+&CertificateStatus=Active&ValidationYear=0 ↩
While the Network Security Services (NSS) are not FIPS 140-2 validated by the Mozilla Foundation, validations exist for versions from Amazon Web Services Inc., Canonical Ltd., Cisco Systems Inc., Hewlett Packard Enterprise, Oracle Corporation, Red Hat Inc., SafeLogic Inc., SUSE LLC and Trend Micro Inc. ↩
"Implementation Under Test List - Cryptographic Module Validation Program". CSRC. 11 October 2016. https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/iut-list ↩
"Cryptographic Module Validation Program". CSRC.nist.gov. Archived from the original on 2021-04-14. https://web.archive.org/web/20210414133436/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=openssl&CertificateStatus=Active&ValidationYear=0 ↩
While OpenSSL is not FIPS 140-2 validated by OpenSSL.org, validations exist for versions from Amazon Web Services Inc., Aqua Security Software Ltd., Broadcom Inc., Canonical Ltd., Cisco Systems Inc., Cohesity Inc., ControlUp Technologies Inc., Crestron Electronics Inc., Dell Inc., Gallagher Group, Hewlett Packard Enterprise, IBM Corporation, ICU Medical Inc., Intelligent Waves, Ixia, KeyPair Consulting Inc., Koninklijke Philips N.V., Lenovo Group Limited, LG Electronics Inc., LogRhythm, McAfee LLC, Metaswitch Networks Ltd, NetBrain Technologies Inc., Nutanix Inc., Onclave Networks Inc., Oracle Corporation, REDCOM Laboratories Inc., Red Hat Inc., SafeLogic Inc., Super Micro Computer Inc., SUSE LLC, Tanium Inc., Trend Micro Inc., Unisys Corporation, Verizon, VMware Inc. and Wickr Inc. ↩
"Implementation Under Test List - Cryptographic Module Validation Program". CSRC. 11 October 2016. https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/iut-list ↩
Computer Security Division, Information Technology Laboratory (October 11, 2016). "Cryptographic Module Validation Program | CSRC | CSRC". CSRC | NIST. https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3389 ↩
"Cryptographic Module Validation Program | CSRC". https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4718 ↩
By using the lower level interface. ↩
RFC 7091 /wiki/RFC_(identifier) ↩
RFC 8018 /wiki/RFC_(identifier) ↩
The library offers X.509 and PKCS #8 encoding without PEM by default. For PEM encoding of public and private keys the PEM Pack is needed. https://www.cryptopp.com/wiki/PEM_Pack ↩
These Public Key Cryptographic Standards (PKCS) are supported by accompanying libraries and tools, which are also part of the GnuPG framework, although not by the actual libgcrypt library. https://gnupg.org/download/ ↩
These Public Key Cryptographic Standards (PKCS) are supported by accompanying libraries and tools, which are also part of the GnuPG framework, although not by the actual libgcrypt library. https://gnupg.org/download/ ↩
These Public Key Cryptographic Standards (PKCS) are supported by accompanying libraries and tools, which are also part of the GnuPG framework, although not by the actual libgcrypt library. https://gnupg.org/download/ ↩
These Public Key Cryptographic Standards (PKCS) are supported by accompanying libraries and tools, which are also part of the GnuPG framework, although not by the actual libgcrypt library. https://gnupg.org/download/ ↩
These Public Key Cryptographic Standards (PKCS) are supported by accompanying libraries and tools, which are also part of the GnuPG framework, although not by the actual libgcrypt library. https://gnupg.org/download/ ↩
RFC 5831 /wiki/RFC_(identifier) ↩
RFC 6986 /wiki/RFC_(identifier) ↩
RFC 5830 /wiki/RFC_(identifier) ↩
RFC 8891 /wiki/RFC_(identifier) ↩
RFC 7801 /wiki/RFC_(identifier) ↩
Bouncy Castle Specifications, bouncycastle.org, retrieved 2018-04-10 https://www.bouncycastle.org/specifications.html ↩
cryptlib Encryption Toolkit, Peter Gutmann, retrieved 2015-11-28 https://www.cs.auckland.ac.nz/~pgut001/cryptlib/ ↩
Crypto++ only supports GOST 28147-89, but not GOST R 34.12-2015. ↩
libsodium only supports AES-256, but not AES-128 or AES-192. ↩
In conjunction with the PKCS#11 provider, or through the implementation of operator interfaces providing access to basic operations. ↩
When using BSAFE Crypto-J in native mode using BSAFE Crypto-C Micro Edition. ↩
Support is available through javax.smartcardio package of JDK. ↩
Support is available through javax.smartcardio package of JDK. ↩
With Scute, scute.org http://www.scute.org/scute.html/Overview.html ↩
With GnuPG's SCdaemon & gpg-agent, gnupg.org https://www.gnupg.org/documentation/manuals/gnupg/Scdaemon-Options.html ↩
With GnuPG's SCdaemon & gpg-agent, gnupg.org https://www.gnupg.org/documentation/manuals/gnupg/Scdaemon-Options.html ↩
With an libp11 engine https://github.com/OpenSC/libp11 ↩
With an libp11 engine https://github.com/OpenSC/libp11 ↩
AltiVec includes POWER4 through POWER8 SIMD processing. POWER8 added in-core crypto, which provides accelerated AES, SHA and PMUL similar to ARMv8.1. /wiki/AltiVec ↩
AltiVec includes POWER4 through POWER8 SIMD processing. POWER8 added in-core crypto, which provides accelerated AES, SHA and PMUL similar to ARMv8.1. /wiki/AltiVec ↩
When using RSA BSAFE Crypto-J in native mode using BSAFE Crypto-C Micro Edition ↩
When using RSA BSAFE Crypto-J in native mode using BSAFE Crypto-C Micro Edition ↩
When using RSA BSAFE Crypto-J in native mode using BSAFE Crypto-C Micro Edition ↩
When using RSA BSAFE Crypto-J in native mode using BSAFE Crypto-C Micro Edition ↩
When using RSA BSAFE Crypto-J in native mode using BSAFE Crypto-C Micro Edition ↩
Crypto++ only provides access to the Padlock random number generator. Other functions, like AES acceleration, are not provided. ↩
When using the HotSpot JVM /wiki/HotSpot_(virtual_machine) ↩
When using the HotSpot JVM /wiki/HotSpot_(virtual_machine) ↩
When using the HotSpot JVM /wiki/HotSpot_(virtual_machine) ↩
When using the HotSpot JVM /wiki/HotSpot_(virtual_machine) ↩
When using the HotSpot JVM /wiki/HotSpot_(virtual_machine) ↩
When using the HotSpot JVM /wiki/HotSpot_(virtual_machine) ↩
When using the HotSpot JVM /wiki/HotSpot_(virtual_machine) ↩
hwfeatures.c, dev.gnupg.org https://dev.gnupg.org/source/libgcrypt/browse/master/src/hwfeatures.c ↩
OpenSSL RDRAND support is provided through the ENGINE interface. The RDRAND generator is not used by default. ↩
"WolfSSL Asynchronous Intel QuickAssist Support - wolfSSL". 18 January 2017. https://www.wolfssl.com/wolfSSL/Blog/Entries/2017/1/18_wolfSSL_Asynchronous_Intel_QuickAssist_Support.html ↩
"WolfSSL ARMv8 Support - wolfSSL". 13 October 2016. https://www.wolfssl.com/wolfSSL/Blog/Entries/2016/10/13_wolfSSL_ARMv8_Support.html ↩
Language Analysis of Botan, OpenHub.net, retrieved 2018-07-18 https://www.openhub.net/p/botan/analyses/latest/languages_summary ↩
Language Analysis of Botan, OpenHub.net, retrieved 2018-07-18 https://www.openhub.net/p/botan/analyses/latest/languages_summary ↩
Language Analysis of Bouncy Castle, OpenHub.net, retrieved 2015-12-23 https://www.openhub.net/p/5523/analyses/latest/languages_summary ↩
Language Analysis of Bouncy Castle, OpenHub.net, retrieved 2015-12-23 https://www.openhub.net/p/5523/analyses/latest/languages_summary ↩
Based on Crypto-J 6.2.5, excluding tests source. Generated using https://github.com/XAMPPRocky/tokei https://github.com/XAMPPRocky/tokei ↩
Based on Crypto-J 6.2.5, excluding tests source. Generated using https://github.com/XAMPPRocky/tokei https://github.com/XAMPPRocky/tokei ↩
Language Analysis of Crypto++, OpenHub.net, retrieved 2018-07-18 https://www.openhub.net/p/3522/analyses/latest/languages_summary ↩
Language Analysis of Crypto++, OpenHub.net, retrieved 2018-07-18 https://www.openhub.net/p/3522/analyses/latest/languages_summary ↩
Language Analysis of GnuTLS, OpenHub.net, retrieved 2020-09-15 https://www.openhub.net/p/gnutls/analyses/latest/languages_summary ↩
Language Analysis of GnuTLS, OpenHub.net, retrieved 2020-09-15 https://www.openhub.net/p/gnutls/analyses/latest/languages_summary ↩
Language Analysis of Libgcrypt, OpenHub.net, retrieved 2015-12-23 https://www.openhub.net/p/libgcrypt/analyses/latest/languages_summary ↩
Language Analysis of Libgcrypt, OpenHub.net, retrieved 2015-12-23 https://www.openhub.net/p/libgcrypt/analyses/latest/languages_summary ↩
Language Analysis of libsodium, OpenHub.net, retrieved 2017-05-07 https://www.openhub.net/p/libsodium/analyses/latest/languages_summary ↩
Language Analysis of libsodium, OpenHub.net, retrieved 2017-05-07 https://www.openhub.net/p/libsodium/analyses/latest/languages_summary ↩
Language Analysis of mbed-tls, OpenHub.net, retrieved 2019-09-15 https://www.openhub.net/p/mbed-tls/analyses/latest/languages_summary ↩
Language Analysis of mbed-tls, OpenHub.net, retrieved 2019-09-15 https://www.openhub.net/p/mbed-tls/analyses/latest/languages_summary ↩
Language Analysis of Nettle, OpenHub.net, retrieved 2015-12-23 https://www.openhub.net/p/nettle/analyses/latest/languages_summary ↩
Language Analysis of Nettle, OpenHub.net, retrieved 2015-12-23 https://www.openhub.net/p/nettle/analyses/latest/languages_summary ↩
Language Analysis of OpenSSL, OpenHub.net, retrieved 2017-05-07 https://www.openhub.net/p/openssl/analyses/latest/languages_summary ↩
Language Analysis of OpenSSL, OpenHub.net, retrieved 2017-05-07 https://www.openhub.net/p/openssl/analyses/latest/languages_summary ↩
Crypto++ is thread safe at the object level, i.e. there is no shared data among instances. If two different threads access the same object then the user is responsible for locking. ↩
GnuTLS - features, GnuTLS.org, retrieved 2022-09-15 https://www.gnutls.org/#features ↩
GnuPG documentation: Libgcrypt overview - thread safety, GnuPG.org, retrieved 2016-04-16 https://gnupg.org/documentation/manuals/gcrypt-devel/Overview.html ↩