#base64 #pem #phc

no-std base64ct

Pure Rust implementation of Base64 (RFC 4648) which avoids any usages of data-dependent branches/LUTs and thereby provides portable "best effort" constant-time operation and embedded-friendly no_std support

14 stable releases

1.7.3 Mar 13, 2025
1.7.0 Feb 26, 2025
1.6.0 Feb 26, 2023
1.5.3 Oct 18, 2022
0.2.1 Mar 8, 2021

#2301 in Cryptography

Download history 479530/week @ 2024-12-21 617427/week @ 2024-12-28 1124553/week @ 2025-01-04 1253932/week @ 2025-01-11 1149446/week @ 2025-01-18 1304888/week @ 2025-01-25 1399384/week @ 2025-02-01 1534722/week @ 2025-02-08 1401018/week @ 2025-02-15 1557637/week @ 2025-02-22 1844770/week @ 2025-03-01 1937232/week @ 2025-03-08 2115080/week @ 2025-03-15 2405464/week @ 2025-03-22 1775117/week @ 2025-03-29 1849600/week @ 2025-04-05

8,479,393 downloads per month
Used in 4,508 crates (177 directly)

Apache-2.0 OR MIT

73KB
1.5K SLoC

RustCrypto: Constant-Time Base64

crate Docs Build Status Apache2/MIT licensed Rust Version Project Chat

Pure Rust implementation of Base64 (RFC 4648).

Implements multiple Base64 alphabets without data-dependent branches or lookup tables, thereby providing portable "best effort" constant-time operation.

Supports no_std environments and avoids heap allocations in the core API (but also provides optional alloc support for convenience).

Documentation

About

This crate implements several Base64 alphabets in constant-time for sidechannel resistance, aimed at purposes like encoding/decoding the "PEM" format used to store things like cryptographic private keys (i.e. in the pem-rfc7468 crate).

The paper Util::Lookup: Exploiting key decoding in cryptographic libraries demonstrates how the leakage from non-constant-time Base64 parsers can be used to practically extract RSA private keys from SGX enclaves.

The padded variants require (=) padding. Unpadded variants expressly reject such padding.

Whitespace is expressly disallowed, with the exception of the Decoder::new_wrapped and Encoder::new_wrapped modes which provide fixed-width line wrapping.

Supported Base64 variants

  • Standard Base64: [A-Z], [a-z], [0-9], +, /
  • URL-safe Base64: [A-Z], [a-z], [0-9], -, _
  • bcrypt Base64: ., /, [A-Z], [a-z], [0-9]
  • crypt(3) Base64: ., -, [0-9], [A-Z], [a-z]

Minimum Supported Rust Version

This crate requires Rust 1.81 at a minimum.

We may change the MSRV in the future, but it will be accompanied by a minor version bump.

License

Licensed under either of:

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.

No runtime deps