RustCrypto: block ciphers

Collection of block ciphers written in pure Rust.

Higher level constructions

Crates in this repository implement ONLY raw block cipher functionality defined by traits in the cipher crate. In practice block ciphers are rarely used in isolation. Instead, they usually play role of a building block for higher level constructions. In RustCrypto such constructions are implemented generically over block ciphers in separate repositories:

AEADs: GCM, SIV, CCM, MGM, etc.
MACs: CMAC, PMAC.
Block modes: CTR, CBC, CFB, etc.
Key wrapping: AES-KW.

Most users should use constructions defined in these repositories without directly relying on raw block cipher functionality.

Warnings

Currently only the aes crate provides constant-time implementation and has received a third-party security audit.

Other crates in this repository are not implemented in a constant-time manner and have not yet received any formal cryptographic and security reviews.

It’s generally recommended not to use other cipher implementations in this repository besides the aes crate.

USE AT YOUR OWN RISK.

Supported algorithms

Name	Crate name	crates.io	Docs	MSRV
AES (Rijndael)	`aes`
ARIA	`aria`
BelT block cipher	`belt-block`
Blowfish	`blowfish`
Camellia	`camellia`
CAST5 (CAST-128)	`cast5`
CAST6 (CAST-256)	`cast6`
DES + 3DES (DEA, 3DEA)	`des`
IDEA	`idea`
Kuznyechik (GOST R 34.12-2015)	`kuznyechik`
Magma (GOST R 34.12-2015)	`magma`
RC2 (ARC2)	`rc2`
RC5	`rc5`
Serpent	`serpent`
SM4	`sm4`
Speck	`speck-cipher`
Threefish	`threefish`
Twofish	`twofish`
XTEA	`xtea`

Minimum Supported Rust Version (MSRV) Policy

MSRV bump is considered a breaking change and will be performed only with a minor version bump.

License

All crates licensed under either of

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.