[Caml-list] Crypto libraries for OCaml: Recommendations?

[Caml-list] Crypto libraries for OCaml: Recommendations?

[Joshua Guttman]

[-- Attachment #1: Type: text/plain, Size: 636 bytes --]

It's a while since I've done a project with OCaml,
though I used it a lot a decade or more back.  But
now I have something for which I think OCaml is
the perfect tool.

It does involve relying on a few crypto primitives,
though, and I see on ocaml.org that there are now
a good number of crypto packages on offer.

In my case, I just need a decent hash, access to AES
both as a pure cipher and with the usual modes, and
subsequently decent elliptic curve signature and key
exchange.

Are there packages that provides access to decent
implementations of these things, and are currently
well maintained?

Thanks a lot!

        Joshua
--

[-- Attachment #2: Type: text/html, Size: 1566 bytes --]

Re: [Caml-list] Crypto libraries for OCaml: Recommendations?

[Xavier Leroy]

[-- Attachment #1: Type: text/plain, Size: 1189 bytes --]

Hello Joshua,

Welcome back! Nice to hear from you after all this time!

On Tue, May 18, 2021 at 6:51 PM Joshua Guttman <joshua.guttman@gmail.com>
wrote:

> It's a while since I've done a project with OCaml,
> though I used it a lot a decade or more back.  But
> now I have something for which I think OCaml is
> the perfect tool.
>
> It does involve relying on a few crypto primitives,
> though, and I see on ocaml.org that there are now
> a good number of crypto packages on offer.
>
> In my case, I just need a decent hash, access to AES
> both as a pure cipher and with the usual modes, and
> subsequently decent elliptic curve signature and key
> exchange.
>
> Are there packages that provides access to decent
> implementations of these things, and are currently
> well maintained?
>

The mirage-crypto libraries are going strong, with impressive support for
formally-verified elliptic curve crypto: https://hannes.nqsb.io/Posts/EC

My aging cryptokit <https://github.com/xavierleroy/cryptokit> library  is
still maintained, and provides a bunch of hashes and symmetric ciphers, but
lacks ECC support entirely...

Enjoy,

- Xavier Leroy


> Thanks a lot!
>
>         Joshua
> --
>
>

[-- Attachment #2: Type: text/html, Size: 2971 bytes --]

Re: [Caml-list] Crypto libraries for OCaml: Recommendations?

[Jonathan Protzenko]

[-- Attachment #1: Type: text/plain, Size: 1292 bytes --]

Hi Joshua,

Allow me to recommend the formally verified cryptography from the 
Everest project. We support a wide variety of algorithms 
<https://hacl-star.github.io/Supported.html> so hopefully your needs 
would be met. We have official OCaml bindings, available via `opam 
install hacl-star`. And we can easily extend the OCaml bindings if 
there's a C algorithm that hasn't been exposed via OCaml yet.

Those bindings are used by Tezos' blockchain, which I hope provides a 
good endorsement that they are "production ready".

Best,

Jonathan

On 5/18/21 9:51 AM, Joshua Guttman wrote:
> It's a while since I've done a project with OCaml,
> though I used it a lot a decade or more back. But
> now I have something for which I think OCaml is
> the perfect tool.
>
> It does involve relying on a few crypto primitives,
> though, and I see on ocaml.org <http://ocaml.org/> that there are now
> a good number of crypto packages on offer.
>
> In my case, I just need a decent hash, access to AES
> both as a pure cipher and with the usual modes, and
> subsequently decent elliptic curve signature and key
> exchange.
>
> Are there packages that provides access to decent
> implementations of these things, and are currently
> well maintained?
>
> Thanks a lot!
>
>         Joshua
> --
>


[-- Attachment #2: Type: text/html, Size: 4098 bytes --]