krypteia — Cryptography Workspace
- Status:
Draft
- Version:
0.2.0
- Scope:
Full workspace — both
quantica(post-quantum) andarcana(classical) crates, plus the sharedsilentopstoolkit and the side-channel analysis annex.
The krypteia workspace is a pure-Rust cryptographic toolkit with
zero external dependencies, designed from the start for embedded
targets (Cortex-M, RISC-V) and hardened against physical
side-channel attacks. Five library crates are published on
crates.io under the krypteia-* namespace, alongside the C-ABI
(*_ffi) and WebAssembly (*_wasm) bindings:
quantica — post-quantum algorithms standardised as FIPS 203 / 204 / 205 (ML-KEM, ML-DSA, SLH-DSA);
arcana — classical algorithms (RSA, ECDSA/ECDH, EdDSA, AES, ChaCha20-Poly1305, hashes, MACs);
tessera — shared hash primitives: SHA-2 / SHA-3, the SHAKE / cSHAKE XOFs, BLAKE2 / BLAKE3, HMAC, SP 800-185 and the KDF family (HKDF, PBKDF2, SP 800-108, scrypt, Argon2);
silentops — side-channel toolkit: constant-time primitives, dudect-style timing leakage verifier, ctgrind Valgrind harness;
memory — TLSF allocator for bare-metal targets (os-alloc / self-alloc / global-alloc).
Documentation
- krypteia — Post-Quantum and Classical Cryptography in Rust
- krypteia-quantica — Post-Quantum Cryptography for the krypteia workspace
- krypteia-arcana — Classical Cryptography for the krypteia workspace
- Design rules
- Algorithms
- Cargo features
- Quick start
- Typed key wrappers (Zeroize-on-Drop)
- Parameter sets / curve families
- Design decisions
- Arithmetic layer (expert bricks)
- Side-channel countermeasures (summary)
- Performance
- Building
- Test validation
- Examples
- Module map
- Known limitations
- Roadmap
- References
- License
- krypteia-tessera — Shared Hash Primitives for the krypteia workspace
- krypteia-silentops — side-channel countermeasure toolkit
- krypteia-memory — TLSF allocator for the krypteia workspace
- Rust API reference