Lib.rs

› Encoding | Cryptography
#data-encoding #constant-time #hex #binary-data #base64 #bech32 #security

no-std subtle-encoding

Encoders and decoders for common data encodings (base64, bech32, hex) which avoid data-dependent branching/table lookups and therefore provide "best effort" constant time. Useful for encoding/decoding secret values such as cryptographic keys.

by Tony Arcieri (iqlusion) and 33 contributors

12 releases

0.5.1 Feb 8, 2020
0.5.0 Oct 14, 2019
0.4.1 Oct 7, 2019
0.3.7 Jun 5, 2019
0.3.0 Nov 25, 2018

#1783 in Encoding

Download history 19904/week @ 2024-11-17 17684/week @ 2024-11-24 23146/week @ 2024-12-01 23008/week @ 2024-12-08 20211/week @ 2024-12-15 8787/week @ 2024-12-22 12842/week @ 2024-12-29 23751/week @ 2025-01-05 25312/week @ 2025-01-12 22657/week @ 2025-01-19 28610/week @ 2025-01-26 26974/week @ 2025-02-02 29650/week @ 2025-02-09 24525/week @ 2025-02-16 23133/week @ 2025-02-23 24958/week @ 2025-03-02

104,229 downloads per month
Used in 479 crates (66 directly)

Apache-2.0 OR MIT

51KB
1K SLoC

subtle-encoding iqlusion

Crate Docs Apache 2.0/MIT Licensed MSRV Safety Dance Build Status Gitter Chat

Rust crate for encoding/decoding binary data to/from base64 and hex encodings while avoiding data-dependent branching/table lookups, and therefore providing "best effort" constant-time operation.

Also includes a non-constant-time Bech32 encoder/decoder gated under the bech32-preview Cargo feature (with a goal of eventually making it constant-time).

Useful for encoding/decoding secret values such as cryptographic keys.

Documentation

Minimum Supported Rust Version

  • Rust 1.39

Security Notice

While this crate takes care to avoid data-dependent branching, that does not actually make it "constant time", which is an architecture-dependent property.

This crate is a "best effort" attempt at providing a constant time encoding library, however it presently provides no guarantees, nor has it been independently audited for security vulnerabilities.

Use at your own risk.

License

Copyright © 2018-2020 iqlusion

subtle-encoding is distributed under the terms of either the MIT license or the Apache License (Version 2.0), at your option.

See LICENSE (Apache License, Version 2.0) file in the iqlusioninc/crates toplevel directory of this repository or LICENSE-MIT for details.

Dependencies