CIRCL: Cloudflare Interoperable Reusable Cryptographic Library

Usable, easy and safe pure-Rust crypto

A Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API.

A Messaging Layer Security (RFC 9420, MLS) implementation in TypeScript

Pure Rust implementation of HPKE (https://www.rfc-editor.org/rfc/rfc9180.html)

Hybrid Public Key Encryption (HPKE) for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes

A Python implementation of CWT/COSE.

A small and easy to use HPKE implementation in Go.

HPKE implementation for Zig.

Crypto Forum Research Group's draft HPKE: Hybrid Public Key Encryption in Go

A Python Implementation of HPKE (Hybrid Public Key Encryption)

The Hybrid Public Key Encryption (HPKE) standard in Python

Encrypted HTTP Body Protocol (EHBP) encrypts the HTTP request and response body with HPKE

end-to-end encrypted messaging on deno

Attestation-bound encrypted tensor transport for confidential ML inference over VSock/TCP. Binary framing, X25519+ChaCha20Poly1305 AEAD, 3-message attested handshake.

AWS Nitro Enclaves Vault

Communication over untrusted networks

End-to-end encryption for HTTP APIs using RFC 9180 HPKE. Drop-in middleware for FastAPI, aiohttp, and httpx.

Offline-first CLI for sharing encrypted .env files and other secrets through Git

IETF drafts that describe AuthKEM and AuthKEM-PSK