#key-derivation #modern #pure #crypto


pure implementation of various common modern cryptographic algorithms, WASM compatible

18 releases

0.4.4 Feb 17, 2023
0.4.2 Jan 31, 2022
0.3.6 Nov 3, 2021
0.3.3 May 18, 2021
0.1.0 Sep 18, 2018

#76 in Cryptography

Download history 3428/week @ 2024-01-12 3413/week @ 2024-01-19 4178/week @ 2024-01-26 4036/week @ 2024-02-02 3689/week @ 2024-02-09 4925/week @ 2024-02-16 3880/week @ 2024-02-23 4942/week @ 2024-03-01 5529/week @ 2024-03-08 4979/week @ 2024-03-15 5804/week @ 2024-03-22 4397/week @ 2024-03-29 4758/week @ 2024-04-05 5382/week @ 2024-04-12 5824/week @ 2024-04-19 3104/week @ 2024-04-26

19,816 downloads per month
Used in 119 crates (36 directly)


15K SLoC


Crates.io MIT licensed APACHE-2 licensed Build Status

API Docs

A pure Rust implementation of various modern cryptographic algorithms, which has no dependencies and no foreign code (specially C or assembly code). This is compatible with WASM and embedded devices.

This crates package aims to support as many architectures as possible with as little dependencies as possible.

Disclaimer: There are no warranties in use as everything is cryptographically-related


Cryptoxide is a cryptographic crates aiming at providing good quality and efficient pure-rust implementation of popular cryptographic algorithms.

It provides various common algorithms in the following categories :

  • Cryptographic digests: SHA1, SHA2, SHA3, Kekkak, Blake2, Ripemd160
  • Message Authentication Code (MAC): HMAC, Poly1305
  • Symmetric ciphers: Salsa, Chacha
  • Authenticated Encryption (AE): ChachaPoly1305
  • Key Derivation Function (KDF): Pbkdf2, HKDF, Scrypt

Our main goals is to provide a library that is usable in a wide array of contextes, by supporting many platforms, but only by providing a bare bone and close to rust core APIs.

cryptoxide has zero dependencies, and will remain dependency free. As much as possible we rely on rust primitives, core only apis and in few places rely on alloc to get dymamic memory functionalities until we can remove them (when const-generic is stable).

Fork information

This is a fork of Rust-Crypto by DaGenix, to which we owe a debt of gratitude for starting some good quality pure Rust implementations of various cryptographic algorithms.

Notable differences with the original sources:

  • Maintained.
  • Extended ED25519 support for extended secret key (64 bytes) support.
  • Proper implementation of ChaChaPoly1305 (according to spec).
  • Many cryptographic algorithms removed: AES, Blowfish, Fortuna, RC4, RIPEMD160, Whirlpool, MD5.

Running benches


cargo +nightly bench --features with-bench

or with all the cpu capability enabled:

RUSTFLAGS="-C target_cpu=native" cargo +nightly bench --features with-bench

supported compiler versions

Rust test

We will always aim to support the current stable version at a minimum. However, it is likely that older versions of the Rust compiler are also supported.


This project is licensed under either of the following licenses:

No runtime deps