https://github.com/briansmith/ring

An experiment.
https://github.com/briansmith/ring

cryptography rust security

Last synced: 1 day ago
JSON representation

An experiment.

• Host: GitHub
• URL: https://github.com/briansmith/ring
• Owner: briansmith
• License: other
• Created: 2015-07-22T19:57:40.000Z (almost 10 years ago)
• Default Branch: main
• Last Pushed: 2025-04-13T19:57:41.000Z (9 days ago)
• Last Synced: 2025-04-21T14:32:23.110Z (1 day ago)
• Topics: cryptography, rust, security
• Language: Assembly
• Homepage:
• Size: 120 MB
• Stars: 3,920
• Watchers: 46
• Forks: 745
• Open Issues: 48
• Metadata Files:
  • Readme: README.md
  • License: LICENSE
  • Security: SECURITY.md
  • Authors: AUTHORS

Awesome Lists containing this project

• awesome-rust-cn - briansmith/ring - ci.org/briansmith/ring.svg?branch=master">](https://travis-ci.org/briansmith/ring) (Libraries / Cryptography)
• awesome-rust - briansmith/ring - ci.org/briansmith/ring.svg?branch=master">](https://travis-ci.org/briansmith/ring) (Libraries / Cryptography)
• awesome-cryptography-rust - ring - gcm, sha-256, sha-384, sha-512, hmac, hkdf, pbkdf2, p-256, p-384, x25519, chacha20-poly1305, ed25519). (Cryptography / Collection library)
• awesome-rust - briansmith/ring
• awesome-rust-cn - briansmith/ring
• awesome-rust-zh - briansmith/ring - 使用 Rust 和 BoringSSL 的加密原语，做到安全，快速，小型加密。[<img src="https://api.travis-ci.org/briansmith/ring.svg?branch=master">](https://travis-ci.org/briansmith/ring) (库 / 加密)
• awesome-rust - briansmith/ring - Safe, fast, small crypto using Rust and BoringSSL's cryptography primitives. (Libraries / Cryptography)
• awesome-rust - briansmith/ring - ci.org/briansmith/ring.svg?branch=master">](https://travis-ci.org/briansmith/ring) (库 Libraries / 密码学 Cryptography)
• fucking-awesome-rust - briansmith/ring - Safe, fast, small crypto using Rust and BoringSSL's cryptography primitives. (Libraries / Cryptography)
• fucking-awesome-rust - briansmith/ring - Safe, fast, small crypto using Rust and BoringSSL's cryptography primitives. (Libraries / Cryptography)

README

        
THE SOFTWARE IS PROVIDED "AS IS" AND BRIAN SMITH AND THE AUTHORS DISCLAIM

ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES

OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL BRIAN SMITH OR THE AUTHORS

BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY

DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN

AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF

OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

Most of the C and assembly language code in *ring* comes from BoringSSL. 

BoringSSL is a fork of OpenSSL. This quote from the BoringSSL README.md 

discouraging you from using it applies to this project:

> BoringSSL is a fork of OpenSSL that is designed to meet Google's needs.

>

> Although BoringSSL is an open source project, it is not intended for general

> use, as OpenSSL is. We don't recommend that third parties depend upon it.

This project was originally shared on GitHub in 2015 as an experiment. It was

put on crates.io shortly to help other people with their experiments. It is an

experiment.

Side Channels

-------------

See [SIDE-CHANNELS.md](SIDE-CHANNELS.md) for important information regarding

the limitations of the side channel mitigations in this project.

Toolchains & Targets

--------------------

Be especially weary about using toolchains (C compilers, etc.) or targets

that aren't supported by other projects, especially BoringSSL. The further you

are from using the same version of Clang that Chrome uses, the more weary you

should be.

Bug Reporting

-------------

For security vulnerabilities, see https://github.com/briansmith/ring/security/policy.

Please report bugs that aren't security vulnerabilities either as pull requests or as issues in

[the issue tracker](https://github.com/briansmith/ring/issues).

Release Notes

-------------

It is recommended that you review every commit in this project. Some

particularly noteworthy changes are noted in the [RELEASES.md](RELEASES.md). We could use some

help in making this better.