Skip to content

Legrandin/pycryptodome

Folders and files

NameName
Last commit message
Last commit date

Latest commit

942b630 · Jan 18, 2025
Jan 18, 2025
Jan 16, 2025
Oct 4, 2024
Sep 10, 2024
Oct 4, 2024
Jan 3, 2021
Jul 27, 2023
Dec 11, 2022
Jan 18, 2025
Sep 25, 2019
Dec 11, 2022
Oct 31, 2021
Oct 4, 2024
Sep 8, 2024
Jan 21, 2018
Dec 29, 2023
Dec 14, 2022
Sep 13, 2023
Oct 4, 2024
Aug 12, 2024
Jan 18, 2025

Repository files navigation

https://github.com/Legrandin/pycryptodome/workflows/Integration%20test/badge.svg?branch=master

PyCryptodome

PyCryptodome is a self-contained Python package of low-level cryptographic primitives.

It supports Python 2.7, Python 3.6 and newer, and PyPy.

The installation procedure depends on the package you want the library to be in. PyCryptodome can be used as:

  1. an almost drop-in replacement for the old PyCrypto library. You install it with:

    pip install pycryptodome
    

    In this case, all modules are installed under the Crypto package.

    One must avoid having both PyCrypto and PyCryptodome installed at the same time, as they will interfere with each other.

    This option is therefore recommended only when you are sure that the whole application is deployed in a virtualenv.

  2. a library independent of the old PyCrypto. You install it with:

    pip install pycryptodomex
    

    In this case, all modules are installed under the Cryptodome package. PyCrypto and PyCryptodome can coexist.

For faster public key operations in Unix, you should install GMP in your system.

PyCryptodome is a fork of PyCrypto. It brings the following enhancements with respect to the last official version of PyCrypto (2.6.1):

  • Authenticated encryption modes (GCM, CCM, EAX, SIV, OCB)
  • Accelerated AES on Intel platforms via AES-NI
  • First class support for PyPy
  • Elliptic curves cryptography (NIST P-curves; Ed25519, Ed448, Curve25519, Curve448)
  • Better and more compact API (nonce and iv attributes for ciphers, automatic generation of random nonces and IVs, simplified CTR cipher mode, and more)
  • SHA-3 hash algorithms (FIPS 202) and derived functions (NIST SP-800 185):
    • SHAKE128 and SHA256 XOFs
    • cSHAKE128 and cSHAKE256 XOFs
    • KMAC128 and KMAC256
    • TupleHash128 and TupleHash256
  • KangarooTwelve, TurboSHAKE128, and TurboSHAKE256 XOFs
  • Truncated hash algorithms SHA-512/224 and SHA-512/256 (FIPS 180-4)
  • BLAKE2b and BLAKE2s hash algorithms
  • Salsa20 and ChaCha20/XChaCha20 stream ciphers
  • Poly1305 MAC
  • ChaCha20-Poly1305 and XChaCha20-Poly1305 authenticated ciphers
  • scrypt, bcrypt, HKDF, and NIST SP 800 108r1 Counter Mode key derivation functions
  • Deterministic (EC)DSA and EdDSA
  • Password-protected PKCS#8 key containers
  • Shamir's Secret Sharing scheme
  • Random numbers get sourced directly from the OS (and not from a CSPRNG in userspace)
  • Simplified install process, including better support for Windows
  • Cleaner RSA and DSA key generation (largely based on FIPS 186-4)
  • Major clean ups and simplification of the code base

PyCryptodome is not a wrapper to a separate C library like OpenSSL. To the largest possible extent, algorithms are implemented in pure Python. Only the pieces that are extremely critical to performance (e.g. block ciphers) are implemented as C extensions.

For more information, see the homepage.

For security issues, please send an email to security@pycryptodome.org.

All the code can be downloaded from GitHub.