CycloneCRYPTO is a cryptographic toolkit designed for use in embedded systems. It provides a comprehensive set of cryptographic primitives (hash functions, stream and block ciphers, public key cryptography) that can be used to add security features to your embedded application.
CycloneCRYPTO is available either as open source (GPLv2, Evaluation) or under a royalty-free commercial license
Key Features
- Base64 data encoding
- MD2, MD4 and MD5 hash functions
- RIPEMD-128 and RIPEMD-160 hash functions
- SHA-1 hash function
- SHA-2 family hash functions (SHA-256, SHA-384, SHA-512, SHA-512/224 and SHA-512/256)
- SHA-3 family hash functions (SHA3-224, SHA3-256, SHA3-384 and SHA3-512)
- BLAKE2b family hash functions (BLAKE2b160, BLAKE2b256, BLAKE2b384, BLAKE2b512)
- BLAKE2s family hash functions (BLAKE2s128, BLAKE2s160, BLAKE2s224, BLAKE2s256)
- Tiger/192 hash function
- Whirlpool hash function
- SHAKE128 and SHAKE256 extendable-output functions (XOF)
- Keccak sponge function
- CMAC, HMAC and GMAC message-authentication code
- RC4 stream cipher
- Block ciphers (RC2, RC6, IDEA, DES, Triple DES, AES, Camellia, SEED, ARIA, PRESENT)
- Supports ECB, CBC, CFB, OFB, CTR and XTS operation modes for all symmetric block ciphers
- Cipher Block Chaining-MAC (CCM) and Galois Counter Mode (GCM)
- ChaCha encryption algorithm
- Poly1305 message-authentication code
- ChaCha20Poly1305 Authenticated Encryption with Associated Data (AEAD)
- RSA public key cryptography (PKCS #1 v1.5 and v2.2)
- Digital Signature Algorithm (DSA)
- Diffie-Hellman key exchange (PKCS #3)
- Password-Based Cryptography Standard (PKCS #5)
- Elliptic Curve Cryptography (ECC)
- Curve25519 (X25519) and Curve448 (X448) elliptic curves
- Elliptic Curve Diffie-Hellman (ECDH)
- Elliptic Curve Digital Signature Algorithm (ECDSA)
- EdDSA signature scheme (Ed25519 and Ed448 elliptic curves)
- Supports elliptic curves defined over prime fields (NIST-P and Brainpool)
- HKDF key derivation function
- Multiple precision arithmetic library with optimized assembly code (for ARM and MIPS-based microcontrollers)
- X.509 certificate, CRL and CSR parsing functions
- X.509 certification and CSR generation
- Parsing/Formatting of public/private keys (PKCS #1 and PKCS #8 formats supported)
- bcrypt and scrypt password hashing functions
- Flexible memory footprint. Built-time configuration to embed only the necessary features
- Portable architecture (supports little-endian and big-endian architectures)
- Extensive test suite available on request (for commercial licenses)
- STM32 hardware crypto support available on request
- Demo projects available on STM32 evaluation boards (Nucleo, Discovery, Eval)
License: Open Source (GPLv2, Evaluation) or Commercial
