#base64-codec #constant-time-cryptography #key-value #constant-time #base64 #data-encoding #constant-time-lookup

no-std subtle-encoding

Encoders and decoders for common data encodings (base64, bech32, hex) which avoid data-dependent branching/table lookups and therefore provide "best effort" constant time. Useful for encoding/decoding secret values such as cryptographic keys.

12 releases

0.5.1 Feb 8, 2020
0.5.0 Oct 14, 2019
0.4.1 Oct 7, 2019
0.3.7 Jun 5, 2019
0.3.0 Nov 25, 2018

#627 in Cryptography

Download history 23080/week @ 2024-12-03 22967/week @ 2024-12-10 18436/week @ 2024-12-17 9121/week @ 2024-12-24 14315/week @ 2024-12-31 24659/week @ 2025-01-07 24151/week @ 2025-01-14 23301/week @ 2025-01-21 28585/week @ 2025-01-28 29020/week @ 2025-02-04 27576/week @ 2025-02-11 25222/week @ 2025-02-18 23821/week @ 2025-02-25 26461/week @ 2025-03-04 29145/week @ 2025-03-11 22371/week @ 2025-03-18

106,083 downloads per month
Used in 486 crates (66 directly)

Apache-2.0 OR MIT

51KB
1K SLoC

subtle-encoding iqlusion

Crate Docs Apache 2.0/MIT Licensed MSRV Safety Dance Build Status Gitter Chat

Rust crate for encoding/decoding binary data to/from base64 and hex encodings while avoiding data-dependent branching/table lookups, and therefore providing "best effort" constant-time operation.

Also includes a non-constant-time Bech32 encoder/decoder gated under the bech32-preview Cargo feature (with a goal of eventually making it constant-time).

Useful for encoding/decoding secret values such as cryptographic keys.

Documentation

Minimum Supported Rust Version

  • Rust 1.39

Security Notice

While this crate takes care to avoid data-dependent branching, that does not actually make it "constant time", which is an architecture-dependent property.

This crate is a "best effort" attempt at providing a constant time encoding library, however it presently provides no guarantees, nor has it been independently audited for security vulnerabilities.

Use at your own risk.

License

Copyright © 2018-2020 iqlusion

subtle-encoding is distributed under the terms of either the MIT license or the Apache License (Version 2.0), at your option.

See LICENSE (Apache License, Version 2.0) file in the iqlusioninc/crates toplevel directory of this repository or LICENSE-MIT for details.

Dependencies