libakrypt-0-x



Libakrypt: abstract
Libakrypt is a free and open source library (software crypto module) distributed under
the MIT License. This library written in C99 and provides some interfaces for
key management, data encryption, integrity checking, signing messages and verifying
of digital signatures. The main goal of Libakrypt is implementation a lot of Russian
crypto mechanisms, decribed by national standards and methodological recomendations
in accordance with R 1323565.1.012-2017
"Basic principles of creating and modernization for crypto modules".
We have implementation of:

GOST R 34.12-2015 block ciphers "Magma" & "Kuznechik" with 64 bit and 128 bit block sizes respectively,
see RFC 8891 and RFC 7801;
GOST R 34.13-2015 modes for block ciphers including CMAC algorithm;
ACPKM encryption mode described by R 1323565.1.017-2018 and RFC 8645;
XTS mode described by IEEE 1619-2007;
Authenticated encryption modes, including MGM (Multilinear Galois mode), described by R 1323565.026-2019,
see also here, and much faster XTSMAC mode,
developed by the authors of the library;
GOST R 34.11-2012 hash functions from Streebog family, see RFC-6986;
R 50.1.113-2016 crypto algorithms such as HMAC;
Password-based key derivation function (PBKDF2) described by R 50.1.111-2016;
A some set of pseudo random generators for various operation systems including R 1323565.1.006-2017 mechanism;
Montgomery arithmetic for prime fileds;
Group operations on elliptic curves in short Weierstrass and twisted Edwards forms for
all elliptic curves described by R 1323565.024-2019;
GOST R 34.10-2012 digital signature generation and verification algorithms, see ISO/IEC 14888-3:2016;
Low level ASN.1 routines for data encoding with support of DER and PEM formats;
x509 certificate management, including public keys formats described by R 1323565.023-2018 and PKCS #7;
Rolf Blom's scheme for symmetric keys generation.

The library can be compiled with many compilers,
such as gcc, clang, Microsoft Visual C, TinyCC and icc.
The build system is cmake.
Library can be used successfully under Linux, Windows and FreeBSD operation systems.
Also we have positive runs on ReactOS and mobile devices under Sailfish OS.
We support various architectures such as x86, x64, arm32v7, arm32v7eb, mips32r2 and mips64r2.