Authentication

Traits which describe the functionality of password hashing algorithms, with optional support for a `no_std`/`no_alloc`-friendly implementation of the PHC string format, as well as generic support for other formats (e.g. Modular Crypt Format)

Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services

OpenPGP data types and associated machinery

Pure Rust implementation of SSH key file format decoders/encoders as described in RFC4251/RFC4253 and OpenSSH key formats, as well as "sshsig" signatures and certificates (including certificate validation and certificate authority support), with further support for the `authorized_keys` and `known_hosts` file formats.

Webauthn Framework for Rust Web Servers

Pure Rust implementation of the Argon2 password hashing function with support for the Argon2d, Argon2i, and Argon2id algorithmic variants

Generic implementation of PBKDF2

The Rust SASL framework, aimed at both middleware-style protocol implementation and application code. Designed to make SASL authentication simple and safe while handing as much control to the user as possible.

Password authentication library with a focus on simplicity and ease-of-use, including support for Argon2, PBKDF2, and scrypt password hashing algorithms

Scrypt password-based key derivation function

Pure Rust implementation of the Balloon password hashing function

Pure Rust implementation of the SHA-crypt password hashing algorithm based on SHA-256/SHA-512 as implemented by the POSIX crypt C library, including support for generating and verifying password hash strings in the Modular Crypt Format

bcrypt-pbkdf password-based key derivation function

Authenticated port knocking - Seccomp wrapper

Pure Rust implementation of the Modular Crypt Format (MCF) which is used to store password hashes in the form `${id}$...`

DPoP (RFC 9449) implementation for TurboMCP with HSM support

RFC-compliant TOTP implementation with ease of use as a goal and additionnal QoL features.

Authenticated port knocking - Systemd support

Authenticated port knocking - Firewall backend communication protocol

Pure Rust implementation of SSH data type decoders/encoders as described in RFC4251

PASETO: Platform-Agnostic Security Tokens (in Rust)

Google cloud platform (GCP) authentication using default and custom service accounts

OAuth 2.1 and authentication for TurboMCP with MCP protocol compliance

Trait to extend reqwest for digest auth flow.

Webauthn Specification Bindings

Network services for OpenPGP

Generate signatures over Turnkey API requests using a P-256 key.

A cryptographically-secured system for establishing and verifying the authenticity of works

Type-safe Twitch OAuth 2.0 authentication library with CSRF protection and full scope support

Pubky SDK

Authenticated port knocking - Configuration parser

A Rust library for handling Entity Resource Names (ERNs), providing type-safe, hierarchical, and k-sortable resource identifiers for distributed systems and more.

Product OS : Security provides a suite of helper tools to easily perform cryptographic operations including generating hashes, encrypting and decrypting content.

Authenticated port knocking - Wire protocol

OpenID Connect & Discovery client library using async / await.

Shared traits and types for Greentic secrets backends.

Wascap - wasmCloud Capabilities. Library for extracting, embedding, and validating claims

Library for reading and writing wasmCloud capability provider archive files

A certificate database interface.

A set of tools designed to help canister developers integrate vetKeys into their Internet Computer (ICP) applications

asknothing

Core SPIFFE identity types and Workload API sources

Fast SOCKS5 client/server implementation written in Rust async/.await (tokio)

BLS signature implementation according to the IETF spec on the BLS12-381 curve.

The SPAKE2 password-authenticated key-exchange algorithm.

Canonical traits and data models for Greentic secrets (read/write, versioning, metadata).

End-to-end encryption and mutual authentication for distributed applications.

Firebase Admin SDK for Rust

Minimal implementation of JWT for OIDC and other applications

Creating a Machine ID hash for MacOS/Windows/Linux/iOS