5 unstable releases

0.3.2 Apr 27, 2023
0.3.1 Apr 18, 2023
0.3.0 Apr 18, 2023
0.2.0 Mar 7, 2023
0.1.0 Mar 2, 2023

#156 in Authentication

Download history 360/week @ 2023-07-18 167/week @ 2023-07-25 232/week @ 2023-08-01 122/week @ 2023-08-08 164/week @ 2023-08-15 166/week @ 2023-08-22 151/week @ 2023-08-29 357/week @ 2023-09-05 140/week @ 2023-09-12 151/week @ 2023-09-19 226/week @ 2023-09-26 320/week @ 2023-10-03 257/week @ 2023-10-10 298/week @ 2023-10-17 203/week @ 2023-10-24 102/week @ 2023-10-31

937 downloads per month
Used in 4 crates


4.5K SLoC

An OpenPGP certificate store abstraction and implementation.

This crates provides a unified, high-level API for different certificate stores via the Store and StoreUpdate traits. It also provides a number of helper functions and data structures, like UserIDIndex to help implement this functionality. Finally, the CertStore data structure combines multiple certificate backends in a transparent way to users.

This crate supports multiple backends: CertD uses an OpenPGP Certificate Directory. Certs manages a bunch of certificates in-memory. It can be loaded with certificates from a keyring, a keybox, a database, etc. It can also be used as the basis for a new backend, which actually writes changes back to the underlying store. Pep provides access to a pEp certificate store. Finally, there is a key server backend, which can fetch certificates via HKPS and WKD.


To use sequoia-cert-store from your project, you should add the following to your crate's Cargo.toml:

sequoia-cert-store = "0.3"
sequoia-openpgp = { version = "1.0.0", default-features = false }

To compile your crate you would then run:

$ cargo build --release --features sequoia-openpgp/crypto-default
$ cargo test --features sequoia-openpgp/crypto-default
$ cargo doc --no-deps --features sequoia-openpgp/crypto-default

If you do not disable the use of sequoia-openpgp's default features, then sequoia-openpgp will select the default cryptographic backend, and your users won't be able to easily compile your crate with a different cryptographic backend.

sequoia-openpgp currently uses Nettle as its default cryptographic backend. sequoia-openpgp also supports OpenSSL (sequoia-openpgp/crypto-openssl), Botan (sequoia-openpgp/crypto-botan), Windows CNG (sequoia-openpgp/crypto-cng), Rust Crypto (sequoia-openpgp/crypto-rust). For more information about building sequoia-openpgp, please refer to sequoia-openpgp's README. This also includes information about the different backends' build requirements.


sequoia-cert-store is distributed under the terms of LGPL 2.0 or later.

See LICENSE.txt and CONTRIBUTING.md for details.


~1M SLoC