Go Cryptography Wrappers

This repository is parameter selection and lightweight wrapper around a number of Go cryptographic libraries. Its purpose isn't to implement primitives, rather to unify the API surface of existing libraries; limited to the tiny subset needed by the Dark Bio project.

• Certificates
  • x509 (RFC-5280): xDSA, xHPKE
• Digital signatures
  • xDSA (RFC-DRAFT): MLDSA, EdDSA, SHA512
    • EdDSA (RFC-8032): Ed25519
    • MLDSA (RFC-DRAFT): Security level 3 (ML-DSA-65)
  • RSA (RFC-8017): 2048-bit, SHA256
• Encryption
  • xHPKE (RFC-9180): X-WING, HKDF, SHA256, ChaCha20, Poly1305, dark-bio-v1: prefix
    • X-WING (RFC-DRAFT): MLKEM, ECC
      • ECC (RFC-7748): X25519
      • MLKEM(RFC-DRAFT): Security level 3 (ML-KEM-768)
  • STREAM (RFC N/A, Age): ChaCha20, Poly1305, 16B tag, 64KB chunk
• Key derivation
  • Argon2 (RFC-9106): id variant
  • HKDF (RFC-5869): SHA256
• Serialization
  • CBOR (RFC-8949): restricted to integer, text, bytes, array, map[int]
  • COSE (RFC-8152): COSE_Sign1, COSE_Encrypt0

Siblings

This is a sibling package with the Rust github.com/dark-bio/crypto-rs; as in, both repositories implement the same feature sets and API surfaces at the same version points. This naturally means PRs merged into one project necessarily have to have a counter-PR in the other project.