I recently created an example project which implements an ephemeral key exchange between a client and server over TCP. The program uses the Ring cryptography library to compute a shared secret using the X25519 algorithm. Two session keys are derived from the output of the key exchange using HKDF and… Read More »An Example ECDH Key Exchange with HKDF and Authenticated Encryption in Rust
Authenticated Encryption with Associated Data (AEAD) is a modern cryptography primitive that enables secure encryption and decryption of data using a symmetric key in a way that prevents it from being altered or tampered with. The Ring cryptography library implements the AES-GCM and ChaCha20-Poly1305 authenticated encryption algorithms which are two… Read More »Authenticated Encryption in Rust using Ring
I have been writing about the Ring cryptography library for a while now and so in this post I am sharing a resource which I think will be a useful reference for developers implementing applications or protocols using the library. This is basically a cheatsheet of example code showing how… Read More »Ring by Example – Sample Code Cheatsheet
The Ring cryptography library supports signing and verifying the integrity of messages using digital signatures. In this post I introduce digital signatures and explain how to use the sign and verify methods defined in the ring::signature module to create and then verify signatures for any given message. Introduction to Digital… Read More »Signing & Verifying Messages with Digital Signatures in Rust using Ring
In this post I show you how to implement an ECDH key exchange using the agreement module of the Rust cryptography library Ring. We will go through generating a public/private key pair, exchanging public keys with a peer and then using the agree_ephemeral function to securely compute a shared secret.… Read More »ECDH Key Agreement in Rust using Ring
fluent-hash is a new open source Rust library which I recently published to crates.io (see here). I wanted to try creating and publishing a Rust library and so I thought I’d start with something simple and hopefully useful for other developers. It is a simple and lightweight hashing library which… Read More »Introducing Fluent Hash – A Rust Hashing Library with a Fluent Interface
The Ring cryptography library provides an implementation of PBKDF2, a standardised key derivation function that can be used to securely hash passwords. Using the ring::pbkdf2 module, we can derive a password hash and then also verify whether or not a hash matches a given password. Introduction to PBKDF2 Password Based Key Derivation… Read More »Password Hashing with PBKDF2 in Rust using Ring
Ring is a popular Rust cryptography library which has support for generating cryptographic keys from a single input key using HKDF, the HMAC-based Extract-and-Expand Key Derivation Function. As you will see in this post, the ring::hkdf module supports securely generating pseudorandom bytes using the Salt::extract and Prk::expand methods implemented in… Read More »Deriving Cryptographic Keys with HKDF in Rust using Ring
Ring is one of the most popular Rust cryptography libraries and it provides a way to securely generate random numbers by using the ring::rand module. In this post I will show you how to generate random numbers correctly using the types provided by Ring. PRNGs vs CSPRNGs Computers are deterministic… Read More »Generating Random Numbers in Rust using Ring
In my previous post I introduced the Rust cryptography library Ring (see here). In this post I will show you how to use Ring to sign and verify messages using the HMAC algorithm. Introduction to HMAC First a bit of cryptography theory. There are four main properties which we would… Read More »Signing and Verifying Messages with HMAC in Rust using Ring