RSA

A portable RSA implementation in pure Rust.

⚠️ WARNING: This crate has been audited by a 3rd party, but a full blog post with the results and the updates made since the audit has not been officially released yet. See #60 for more information.

Example

use rsa::{PublicKey, RSAPrivateKey, PaddingScheme};
use rand::rngs::OsRng;

let mut rng = OsRng;
let bits = 2048;
let priv_key = RSAPrivateKey::new(&mut rng, bits).expect("failed to generate a key");
let pub_key = RSAPublicKey::from(&priv_key);

// Encrypt
let data = b"hello world";
let enc_data = pub_key.encrypt(&mut rng, PaddingScheme::new_pkcs1v15(), &data[..]).expect("failed to encrypt");
assert_ne!(&data[..], &enc_data[..]);

// Decrypt
let dec_data = priv_key.decrypt(PaddingScheme::new_pkcs1v15(), &enc_data).expect("failed to decrypt");
assert_eq!(&data[..], &dec_data[..]);

Status

Currently at Phase 1 (v) 🚧.

There will be three phases before 1.0 🚢 can be released.

1. 🚧 Make it work
   • Prime generation ✅
   • Key generation ✅
   • PKCS1v1.5: Encryption & Decryption ✅
   • PKCS1v1.5: Sign & Verify ✅
   • PKCS1v1.5 (session key): Encryption & Decryption
   • OAEP: Encryption & Decryption
   • PSS: Sign & Verify
   • Key import & export
2. 🚀 Make it fast
   • Benchmarks ✅
   • compare to other implementations 🚧
   • optimize 🚧
3. 🔒 Make it secure
   • Fuzz testing
   • Security Audits

License

Licensed under either of

• Apache License, Version 2.0
• MIT license

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.