Cryptography & Hashing Packages
Cryptographic primitives, hashing, and encryption libraries for securing data at rest and in transit across your application stack.
Packages in Cryptography & Hashing
Kind
Sort:Used by Most Apps
PyJWT
A Python implementation of RFC 7519 for encoding, decoding, and verifying JSON Web Tokens.
crypto-js
A JavaScript library of crypto standards - hashing, HMAC, PBKDF2, and symmetric ciphers for Node.js and the browser.
otplib
TypeScript-first TOTP and HOTP library with a pluggable crypto/base32 architecture for Node, Bun, Deno, and browsers.
itsdangerous
A small Python toolkit for cryptographically signing data so you can trust it hasn't been tampered with when it comes back from an untrusted client.
OTPAuth
HOTP and TOTP one-time password library for Node.js, Deno, Bun, and browsers
webauthn
A spec-conformant WebAuthn and FIDO2 passkey server library for Go, handling registration and authentication ceremonies for passwordless and multi-factor login.
noble-hashes
Audited, zero-dependency JS/TS implementation of SHA2, SHA3, BLAKE, HMAC, HKDF, PBKDF2, Scrypt and Argon2 that tree-shakes down to a few kilobytes per hash.
argon2-cffi
Secure, high-level password hashing for Python using Argon2
Lego
A Go ACME client and library for Let's Encrypt, with built-in support for 200+ DNS providers, usable as a CLI or embedded directly in your own code.
phpseclib
Pure-PHP implementations of SSH2, SFTP, X.509, RSA, AES, and dozens of other cryptographic primitives
ring
Safe, fast, small cryptographic primitives for Rust, built on verified assembly from BoringSSL
rsa
Pure Rust implementation of RSA encryption, signing, and key handling
Vault API
The official Go client library for HashiCorp Vault, providing typed access to secrets, auth methods, and system endpoints.
pycryptodome
A self-contained, low-level Python library of cryptographic primitives — ciphers, hashes, MACs, and public-key algorithms — with no OpenSSL dependency.
altcha
Privacy-first, self-hosted CAPTCHA replacement that proves a visitor is human with invisible proof-of-work instead of puzzles, tracking, or third-party APIs.
argon2-cffi-bindings
Low-level CFFI bindings that compile the official Argon2 C library for direct use from Python.
aws-lc-rs
Rust cryptographic library backed by AWS-LC and API-compatible with ring, with optional FIPS support.
openidconnect-rs
A strongly-typed, extensible Rust implementation of the OpenID Connect protocol for building relying-party authentication and OIDC provider integrations.
php-encryption
Misuse-resistant authenticated encryption for PHP, with a simple key- or password-based API
snow
A pure-Rust implementation of the Noise Protocol Framework for building secure, encrypted handshakes and transport channels.
Sodium Compat
Pure PHP polyfill for the libsodium cryptography extension
webauthn-rs
A Rust implementation of the WebAuthn Relying Party protocol for passkey and passwordless authentication.
webauthn
Small, lightweight PHP WebAuthn (FIDO2/Passkey) server library for passwordless login.
xmlseclibs
A PHP library for XML digital signatures and encryption (XMLDSig and XML Encryption).
