hpke-rs
| Crates.io | hpke-rs |
| lib.rs | hpke-rs |
| version | 0.3.0 |
| created_at | 2020-11-10 10:45:54.907218+00 |
| updated_at | 2025-07-01 08:00:47.638612+00 |
| description | HPKE Implementation |
| homepage | |
| repository | https://github.com/cryspen/hpke-rs |
| max_upload_size | |
| id | 310757 |
| size | 127,995 |
Franziskus Kiefer (franziskuskiefer)
documentation
https://docs.rs/hpke-rs
README
HPKE
An implementation of HPKE (RFC 9180) with flexible crypto backends.
From the RFC:
This scheme provides a variant of public-key encryption of arbitrary-sized plaintexts for a recipient public key. It also includes three authenticated variants, including one which authenticates possession of a pre-shared key, and two optional ones which authenticate possession of a KEM private key.
Supported HPKE modes
- Base
- PSK
- Auth
- AuthPSK
Supported cipher suites
KEM
- DH KEM x25519
- DH KEM P256
AEAD
- AES GCM 128
- AES GCM 256
- ChaCha20 Poly1305
- Exporter only
KDF
- HKDF SHA-256
- HKDF SHA-384
- HKDF SHA-512
Crypto Backends
This crate does not implement the cryptographic primitives itself. Instead it expects an implementation of the HpkeCrypto trait.
Two backends are provided in this repository
- libcrux backend: a formally verified crypto backend but with limited ciphersuite support for now
- RustCrypto backend: a backend using well established crypto implementations