1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
# crypto
[](https://opensource.org/licenses/Apache-2.0)
[](https://goreportcard.com/report/github.com/smallstep/crypto)
[](https://github.com/smallstep/crypto/actions/workflows/ci.yml)
[](https://codecov.io/gh/smallstep/crypto)
[](https://pkg.go.dev/mod/go.step.sm/crypto)
Crypto is a collection of packages used in [smallstep](https://smallstep.com) products. See:
* [step](https://github.com/smallstep/cli): A zero trust swiss army knife for
working with X509, OAuth, JWT, OATH OTP, etc.
* [step-ca](https://github.com/smallstep/certificates): A private certificate
authority (X.509 & SSH) & ACME server for secure automated certificate
management, so you can use TLS everywhere & SSO for SSH.
## Usage
To add this to a project just run:
```sh
go get go.step.sm/crypto
```
## Packages
### x509util
Package `x509util` implements utilities to build X.509 certificates based on JSON
templates.
### sshutil
Package `sshutil` implements utilities to build SSH certificates based on JSON
templates.
### keyutil
Package `keyutil` implements utilities to generate cryptographic keys.
### pemutil
Package `pemutil` implements utilities to parse keys and certificates. It also
includes a method to serialize keys, X.509 certificates and certificate requests
to PEM.
### randutil
Package `randutil` provides methods to generate random strings and salts.
### tlsutil
Package `tlsutil` provides utilities to configure tls client and servers.
### jose
Package `jose` is a wrapper for `gopkg.in/square/go-jose.v2` and implements
utilities to parse and generate JWT, JWK and JWKSets.
### x25519
Package `x25519` adds support for X25519 keys and the
[XEdDSA](https://signal.org/docs/specifications/xeddsa/) signature scheme.
### minica
Package `minica` implements a simple certificate authority.
### kms
Package `kms` implements interfaces to perform cryptographic operations like
signing certificates using cloud-based key management systems, PKCS #11 modules,
or just a YubiKey or an ssh-agent. On the cloud it supports:
* [Amazon AWS KMS](https://aws.amazon.com/kms/)
* [Google Cloud Key Management](https://cloud.google.com/security-key-management)
* [Microsoft Azure Key Vault](https://azure.microsoft.com/en-us/services/key-vault/)
### fingerprint
Package `fingerprint` provides methods for creating and encoding X.509
certificate, SSH certificate and SSH key fingerprints.
|
