mooncrypt
MoonBit · cryptography

Cryptography,
one package
per algorithm.

AES, SHA-2, BLAKE3, Ed25519, X25519, RSA, and the legacy ciphers that are still in use. Every package implements one of six traits, so a program links what it calls and nothing else.

Read the guide Open the showcase
4 targets
6 traits
11 families
FIPS · RFC · SP 800
Fig. 1 Rotor, 26 contacts. Scroll to turn it. index A
01

The tape

live · this browser
mooncrypt · digest
compiled to JavaScript 01 rows

Every keystroke goes through the library compiled to JavaScript. Characters that differ from the previous digest are marked: type one letter and the whole line changes, which is the avalanche the design asks for.

4build targets
6traits
11families
1algorithm per package
02

Parts index

11 families · 55 packages
Digests sha2 · sha3 · blake2 · blake3 · sm3 · sha1 · md5 · ripemd Authentication hmac · cmac · gmac · kmac · poly1305 · siphash Checksums crc32 · crc16 · adler32 · fnv · xxhash · murmur3 Key derivation hkdf · pbkdf2 · scrypt · argon2 · bcrypt · concat Block ciphers aes · sm4 · camellia · blowfish · des · mode Stream ciphers chacha20 · xchacha20 · salsa20 · rc4 Authenticated encryption gcm · chachapoly · ccm · siv · sm4gcm Signatures ed25519 · ed448 · ecdsa · sm2 · schnorr · rsa Key agreement x25519 · x448 · ecdh · dh Key files asn1 · key · curve One-time passwords otp
03

What it refuses

fail closed
Key agreement

A point off the curve

A share that is not on the curve, or one of low order, is rejected before any arithmetic touches it. There is no switch to turn the check off.

shared(peer) // raises Broken
Authenticated encryption

A tag that does not match

open raises instead of returning a short plaintext, so a caller cannot mistake a forgery for a message.

open(nonce~, cipher~)
Block ciphers

A block of the wrong length

Sixteen bytes or nothing. The trait cannot raise, so a short block stops the program rather than reading past the buffer.

encrypt(block) // 16 bytes