View source for Comparison of cryptography libraries

{{short description|None}}
The tables below compare [[Cryptography|cryptography]] libraries that deal with cryptography algorithms and have API function calls to each of the supported features.
 
== Cryptography libraries ==

{| class="wikitable sortable" style="text-align: left"
|-
! Name of Implementation || Initiative || [[Programming language|Main Implementation Language]] || [[Open-source software]] || [[Software license|Software License]] || Latest Release
|-
| [[Software:Botan (programming library)|Botan]] || Jack Lloyd || C++ || {{Yes}} || [[Software:BSD licenses#2-clause license ("Simplified BSD License" or "FreeBSD License")|Simplified BSD]] ||{{Latest stable software release/Botan}}
|-
| [[Software:Bouncy Castle (cryptography)|Bouncy Castle]] || Legion of the Bouncy Castle Inc. || Java, C# || {{Yes}} || [[Software:MIT License|MIT License]] ||{{Latest stable software release/Bouncy Castle}}
|-
| [[Software:BSAFE|BSAFE]] || [[Company:Dell|Dell]], formerly [[Company:RSA Security|RSA Security]] || Java, C, Assembly || {{No}} || [[Proprietary software|Proprietary]] ||'''Crypto-C Micro Edition''': {{Latest stable software release/BSAFE Crypto-C Micro Edition}}<br />'''Micro Edition Suite''': {{Latest stable software release/BSAFE Micro Edition Suite}}<br />'''Crypto-J''': {{Latest stable software release/RSA BSAFE Crypto-J}}
|-
| [[Software:Cryptlib|cryptlib]] || [[Biography:Peter Gutmann (computer scientist)|Peter Gutmann]] || C || {{Yes}} || [[Software:Sleepycat License|Sleepycat License]] or commercial license ||{{Latest stable software release/cryptlib}}
|-
| [[Software:Crypto++|Crypto++]] || The Crypto++ project || C++ || {{Yes}}  || Boost Software License (all individual files are [[Social:Public domain|public domain]]) || Aug 7, 2022 (8.7.0)
|-
| [[Software:GnuTLS|GnuTLS]] || Nikos Mavrogiannopoulos, Simon Josefsson || C || {{Yes}} || [[Software:GNU Lesser General Public License|LGPL-2.1-or-later]] || {{wikidata|property|preferred|references|edit|Q1533305|P348|P548=Q2804309}} {{wikidata|qualifier|raw|preferred|single|Q1533305|P348|P548=Q2804309|P577}}
|-
| [[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers || [[Company:Oracle Corporation|Oracle]] || Java || {{Yes}} || [[Software:GNU General Public License#Version 2|GNU GPL v2]] and commercial license || {{Latest stable software release/Java (software platform)}}
|-
| [[Software:LibreSSL|LibreSSL]]  || OpenBSD Foundation || C || {{Yes}} || [[Software:Apache License|Apache-1.0]] || {{wikidata|property|preferred|references|edit|Q16590706|P348|P548=Q2804309}} {{wikidata|qualifier|raw|preferred|single|Q16590706|P348|P548=Q2804309|P577}}
|-
| [[Software:Libgcrypt|Libgcrypt]] || [[Software:GNU Privacy Guard|GnuPG]] community and g10code || C || {{Yes}} || [[Software:GNU Lesser General Public License|GNU LGPL]] v2.1+ ||{{Latest stable software release/Libgcrypt}}
|-
||[[Software:NaCl#Implementations|libsodium]] || Frank Denis || C || {{Yes}} || ISC License || May 30, 2019 (1.0.18)
|-
| [[Software:Mbed TLS|Mbed TLS]] || Arm Limited || C || {{Yes}} || [[Software:Apache License|Apache License 2.0]] ||{{Latest stable software release/mbed TLS}}
|-
| [[Software:NaCl|NaCl]] || [[Biography:Daniel J. Bernstein|Daniel J. Bernstein]], [[Biography:Tanja Lange|Tanja Lange]], Peter Schwabe || C || {{Yes}} || [[Social:Public domain|Public domain]] || February 21, 2011<ref>[https://nacl.cr.yp.to/install.html Downloading and installing NaCl], Bernstein, Lange, Schwabe, retrieved 2017-05-22</ref>
|-
| [[Software:Nettle (cryptographic library)|Nettle]] || || C || {{Yes}} || [[Software:GNU General Public License|GNU GPL v2+]] or [[Software:GNU Lesser General Public License|GNU LGPL]] v3 ||{{Latest stable software release/Nettle}}
|-
| [[Software:Network Security Services|Network Security Services]] (NSS) || Mozilla || C || {{Yes}} || [[Software:Mozilla Public License|MPL 2.0]] ||{{Latest stable software release/Network Security Services}}
|-
| [[Software:OpenSSL|OpenSSL]] || The OpenSSL Project || C || {{Yes}} || [[Software:Apache License|Apache-2.0]] || {{wikidata|property|preferred|references|edit|Q1052790|P348|P548=Q2804309}} {{wikidata|qualifier|raw|preferred|single|Q1052790|P348|P548=Q2804309|P577}}
|-
| wolfCrypt || wolfSSL, Inc. || C || {{Yes}} || [[Software:GNU General Public License#Version 2|GNU GPL v2]] or commercial license ||{{Latest stable software release/wolfSSL}}
|}

== FIPS 140 ==
This table denotes, if a cryptography library provides the technical requisites for [[FIPS 140]], and the status of their FIPS 140 certification (according to NIST's [https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search CMVP search], [https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/Modules-In-Process-List modules in process list] and [https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/IUT-List implementation under test list]).
{| class="wikitable sortable" style="text-align: left"
|-
! Implementation 
!FIPS 140-2 mode|| [[FIPS 140-2]] validated || [[FIPS 140-3]] validated
|-
| [[Software:Botan (programming library)|Botan]] 
|  {{No}} || {{No}} || {{No}}
|-
| [[Software:Bouncy Castle (cryptography)|Bouncy Castle]] 
| {{Yes}} || {{Yes}}<ref>{{cite web |url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&Vendor=bouncy+castle&CertificateStatus=Active&ValidationYear=0 |title=Cryptographic Module Validation Program {{!}} CSRC |website=csrc.nist.gov |url-status=dead |archive-url=https://web.archive.org/web/20211021224834/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&Vendor=bouncy+castle&CertificateStatus=Active&ValidationYear=0 |archive-date=2021-10-21}}</ref> || {{maybe|In Process}}<ref name="nist_cmvp_mip">{{Cite web|url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list|title = Modules In Process List - Cryptographic Module Validation Program &#124; CSRC}}</ref>
|-
| [[Software:BSAFE|BSAFE]] 
| {{Yes}} || {{Yes}}<ref>{{cite web |url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=crypto-c&CertificateStatus=Active&ValidationYear=0 |title=Cryptographic Module Validation Program {{!}} CSRC |website=csrc.nist.gov |url-status=dead |archive-url=https://web.archive.org/web/20210924205508/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=crypto-c&CertificateStatus=Active&ValidationYear=0 |archive-date=2021-09-24}}</ref><ref>{{cite web |url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=crypto-j&CertificateStatus=Active&ValidationYear=0 |title=Cryptographic Module Validation Program {{!}} CSRC |website=csrc.nist.gov |url-status=dead |archive-url=https://web.archive.org/web/20211023002317/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=crypto-j&CertificateStatus=Active&ValidationYear=0 |archive-date=2021-10-23}}</ref> || {{maybe|In Process}}<ref name="nist_cmvp_mip" /> 
|-
| [[Software:Cryptlib|cryptlib]] 
| {{Yes}} || {{No}} || {{No}}
|-
| [[Software:Crypto++|Crypto++]] 
| {{No}} || {{No}}<ref group=lower-alpha name="cryptopp-fips" /> || {{No}}
|-
| [[Software:GnuTLS|GnuTLS]] 
| {{No}} || {{Yes}}<ref>{{cite web |url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=GnuTLS&CertificateStatus=Active&ValidationYear=0 |title=Search - Cryptographic Module Validation Program &#124; CSRC &#124; CSRC |access-date=2022-05-29}}</ref><ref group=lower-alpha name="gnutls-fips" /> || {{maybe|In Process}}<ref name="csrc.nist.gov">{{Cite web|url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/iut-list|title = Implementation Under Test List - Cryptographic Module Validation Program &#124; CSRC &#124; CSRC}}</ref> 
|-
| [[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers 
| {{No}} || {{No}}<ref>{{Cite web|url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=Java&CertificateStatus=Active&ValidationYear=0|title = Search - Cryptographic Module Validation Program &#124; CSRC &#124; CSRC|date = 11 October 2016}}</ref><ref group=lower-alpha name="jcajce-fips" /> || {{No}}
|-
| [[Software:Libgcrypt|Libgcrypt]] 
| {{Yes}} || {{Yes}}<ref>https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=libgcrypt&CertificateStatus=Active&ValidationYear=0 </ref><ref group=lower-alpha name="libgcrypt-fips" /> || {{maybe|In Process}}<ref name="csrc.nist.gov"/> |-
||[[Software:NaCl#Implementations|libsodium]] 
| {{No}} || {{No}} || {{No}}
|-
| [[Software:Mbed TLS|Mbed TLS]] 
| {{No}} || {{No}} || {{No}}
|-
| [[Software:NaCl|NaCl]] 
| {{No}} || {{No}} || {{No}}
|-
| [[Software:Nettle (cryptographic library)|Nettle]] 
| {{No}} || {{No}} || {{No}}
|-
| [[Software:Network Security Services|Network Security Services]] (NSS) 
| {{Yes}} || {{Yes}}<ref>{{cite web |url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=NSS+&CertificateStatus=Active&ValidationYear=0 |title=Cryptographic Module Validation Program {{!}} CSRC |website=csrc.nist.gov |url-status=dead |archive-url=https://web.archive.org/web/20210924205511/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=NSS+&CertificateStatus=Active&ValidationYear=0 |archive-date=2021-09-24}}</ref><ref group=lower-alpha name="nss-fips" /> ||  {{maybe|In Process}}<ref name="csrc.nist.gov"/> 
|-
| [[Software:OpenSSL|OpenSSL]] 
| {{Yes}} || {{Yes}}<ref>{{cite web |url=https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=OpenSSL&CertificateStatus=Active&ValidationYear=0 |title=Cryptographic Module Validation Program {{!}} CSRC |website=csrc.nist.gov |url-status=dead |archive-url=https://web.archive.org/web/20210414133436/https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search?SearchMode=Basic&ModuleName=openssl&CertificateStatus=Active&ValidationYear=0 |archive-date=2021-04-14}}</ref><ref group=lower-alpha name="openssl-fips" /> || {{maybe|In Process}}<ref name="csrc.nist.gov"/> 
|-
| wolfCrypt 
| {{Yes}} || {{Yes}}<ref>https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/3389</ref> || {{maybe|In Process}}<ref name="nist_cmvp_mip" />
|}

{{Reflist|group=lower-alpha|refs=
<ref name="cryptopp-fips">Crypto++ received three FIPS 140 validations from 2003 through 2008. In 2016 NIST moved Crypto++ to the Historical Validation List.</ref>
<ref name="gnutls-fips">While GnuTLS is not FIPS 140-2 validated by GnuTLS.org, validations exist for versions from Amazon Web Services Inc., Oracle Corporation, Red Hat Inc. and SUSE LLC.</ref>
<ref name="jcajce-fips">While none of default JDK JCA/JCE providers is FIPS 140-2 validated, there are other JCE/JCA third party providers which are FIPS 140-2 validated.</ref>
<ref name="libgcrypt-fips">While Libgcrypt is not FIPS 140-2 validated by g10code, validations exist for versions from Amazon Web Services Inc., Canonical Ltd., Oracle Corporation, Red Hat Inc. and SUSE LLC.</ref>
<ref name="nss-fips">While the Network Security Services (NSS) are not FIPS 140-2 validated by the Mozilla Foundation, validations exist for versions from Amazon Web Services Inc., Canonical Ltd., Cisco Systems Inc., Hewlett Packard Enterprise, Oracle Corporation, Red Hat Inc., SafeLogic Inc., SUSE LLC and Trend Micro Inc.</ref>
<ref name="openssl-fips">While OpenSSL is not FIPS 140-2 validated by OpenSSL.org, validations exist for versions from Amazon Web Services Inc., Aqua Security Software Ltd., Broadcom Inc., Canonical Ltd., Cisco Systems Inc., Cohesity Inc., ControlUp Technologies Inc., Crestron Electronics Inc., Dell Inc., Gallagher Group, Hewlett Packard Enterprise, IBM Corporation, ICU Medical Inc., Intelligent Waves, Ixia, KeyPair Consulting Inc., Koninklijke Philips N.V., Lenovo Group Limited, LG Electronics Inc., LogRhythm, McAfee LLC, Metaswitch Networks Ltd, NetBrain Technologies Inc., Nutanix Inc., Onclave Networks Inc., Oracle Corporation, REDCOM Laboratories Inc., Red Hat Inc., SafeLogic Inc., Super Micro Computer Inc., SUSE LLC, Tanium Inc., Trend Micro Inc., Unisys Corporation, Verizon,  VMware Inc. and Wickr Inc.</ref>
}}

== Key operations ==

Key operations include key generation algorithms, key exchange agreements and public key cryptography standards.

=== [[Public-key cryptography|Public key algorithms]] ===
{| class="wikitable sortable" style="text-align: left"
|-
!Implementation
![[RSA (cryptosystem)|RSA]]
![[Digital Signature Algorithm|DSA]]
!ECDSA
![[EdDSA]]
![[EdDSA#Ed448|Ed448]]
![[Diffie–Hellman key exchange|DH]]
![[Elliptic-curve Diffie–Hellman|ECDH]]
![[Integrated Encryption Scheme|ECIES]]
!ElGamal
![[NTRU]]<br />([[IEEE P1363#Lattice-based public key cryptography (IEEE Std 1363.1-2008)|IEEE P1363.1]])
![[Digital Signature Services|DSS]]
|-

|[[Software:Botan (programming library)|Botan]] 
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]] 
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:BSAFE|BSAFE]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}} 
|-

|[[Software:Cryptlib|cryptlib]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-

|[[Software:Crypto++|Crypto++]]  
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-

|[[Software:GnuTLS|GnuTLS]]  
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}} 
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|-

|[[Software:Libgcrypt|Libgcrypt]]  
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}<ref group=lower-alpha name="libgcrypt-keygen" /> 
|{{No}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-

|[[Software:NaCl|libsodium]]
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Mbed TLS|Mbed TLS]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Nettle (cryptographic library)|Nettle]]
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:OpenSSL|OpenSSL]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}} 
|-

|wolfCrypt
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}} 
|-
|}

{{Reflist|group=lower-alpha|refs=
<ref name="libgcrypt-keygen">By using the lower level interface.</ref>
}}

===  [[Elliptic-curve cryptography|Elliptic-curve cryptography (ECC)]] support ===
{| class="wikitable sortable" style="text-align: left"
|-
! Implementation
!NIST
!SECG
!ECC Brainpool
![[Curve25519]]
![[Curve448]]
!GOST R 34.10<ref>{{IETF RFC|7091}}</ref>
![https://tools.ietf.org/html/draft-shen-sm2-ecdsa-02 SM2]
|-

|[[Software:Botan (programming library)|Botan]] 
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]] 
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{No}}
|-

|[[Software:BSAFE|BSAFE]]
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Cryptlib|cryptlib]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Crypto++|Crypto++]]  
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:GnuTLS|GnuTLS]]  
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|-

|[[Software:Libgcrypt|Libgcrypt]]  
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:NaCl|libsodium]]
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|-

|[[Software:Mbed TLS|Mbed TLS]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Nettle (cryptographic library)|Nettle]]
|{{Yes}}
|{{Partial}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:OpenSSL|OpenSSL]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|wolfCrypt
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|-
|}

=== [[PKCS|Public key cryptography standards]] ===
{| class="wikitable sortable" style="text-align: left"
|-
! Implementation
![[PKCS 1|PKCS #1]]
![[PKCS|PKCS #5]]<ref>{{IETF RFC|8018}}</ref> / [[PBKDF2]]
![[PKCS 8|PKCS #8]]
![[PKCS 12|PKCS #12]]
![[IEEE P1363#Traditional public-key cryptography (IEEE Std 1363-2000 and 1363a-2004)|IEEE P1363]]
![[ASN.1]]
|-

|[[Software:Botan (programming library)|Botan]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:BSAFE|BSAFE]] Crypto-J
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-

|[[Software:Cryptlib|cryptlib]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}	
|{{Yes}}				
|-

|[[Software:Crypto++|Crypto++]]
|{{Yes}}
|{{Yes}}
|{{Yes}}<ref group=lower-alpha name="cryptopp-standards" />
|{{No}}
|{{Yes}}
|{{Yes}}
|-
|[[Software:GnuTLS|GnuTLS]]
|
|
|
|
|
|
|-

|[[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:Libgcrypt|Libgcrypt]]
|{{Yes}}
|{{Yes}}<ref group=lower-alpha name="libgcrypt-standards" />
|{{Yes}}<ref group=lower-alpha name="libgcrypt-standards" />
|{{Yes}}<ref group=lower-alpha name="libgcrypt-standards" />
|{{Yes}}<ref group=lower-alpha name="libgcrypt-standards" />
|{{Yes}}<ref group=lower-alpha name="libgcrypt-standards" />
|-

|[[Software:NaCl|libsodium]]
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Mbed TLS|Mbed TLS]]
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-

|[[Software:Nettle (cryptographic library)|Nettle]]
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:OpenSSL|OpenSSL]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-

|wolfCrypt
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-
|}

{{Reflist|group=lower-alpha|refs=
<ref name="cryptopp-standards">The library offers X.509 and PKCS #8 encoding without PEM by default. For PEM encoding of public and private keys the [https://www.cryptopp.com/wiki/PEM_Pack PEM Pack] is needed.</ref>
<ref name="libgcrypt-standards">These Public Key Cryptographic Standards (PKCS) are supported by accompanying libraries and tools, which are also part of the [https://gnupg.org/download/ GnuPG framework], although not by the actual libgcrypt library.</ref>}}

== Hash functions ==
Comparison of supported [[Cryptographic hash function|cryptographic hash function]]s. Here hash functions are defined as taking an arbitrary length message and producing a fixed size output that is virtually impossible to use for recreating the original message.

{| class="wikitable sortable" style="text-align: left"
|-
! Implementation
![[MD5]]
![[SHA-1]]
![[SHA-2]]
![[SHA-3]]
!RIPEMD-160
!Tiger
!Whirlpool
![[BLAKE2]]
![[GOST (hash function)|GOST R 34.11-94]]<ref>{{IETF RFC|5831}}</ref><br />(aka [[GOST (hash function)|GOST 34.311-95]])
![[Streebog|GOST R 34.11-2012<br />(Stribog)]]<ref>{{IETF RFC|6986}}</ref>
![[SM3 (hash function)|SM3]]
|-

|[[Software:Botan (programming library)|Botan]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:BSAFE|BSAFE]] Crypto-J
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Cryptlib|cryptlib]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Crypto++|Crypto++]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-
|[[Software:GnuTLS|GnuTLS]]
|
|
|
|
|
|
|
|
|
|
|
|-

|[[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Libgcrypt|Libgcrypt]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:NaCl|libsodium]]
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Mbed TLS|Mbed TLS]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Nettle (cryptographic library)|Nettle]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|-

|[[Software:OpenSSL|OpenSSL]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|-

|wolfCrypt
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|-
|}

== MAC algorithms ==
Comparison of implementations of [[Message authentication code|message authentication code]] (MAC) algorithms. A MAC is a short piece of information used to authenticate a message—in other words, to confirm that the message came from the stated sender (its authenticity) and has not been changed in transit (its integrity).

{| class="wikitable sortable" style="text-align: left"
|-
! Implementation
![[HMAC]]-[[MD5]]
!HMAC-SHA1
!HMAC-SHA2
![[Poly1305]]
![[BLAKE (hash function)#BLAKE2|BLAKE2-MAC]]
|-

|[[Software:Botan (programming library)|Botan]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:BSAFE|BSAFE]] Crypto-J
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|-

|[[Software:Cryptlib|cryptlib]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}										
|{{No}}										
|-

|[[Software:Crypto++|Crypto++]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}										
|-
|[[Software:GnuTLS|GnuTLS]]
|
|
|
|
|
|-

|[[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers 
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}										
|-

|[[Software:Libgcrypt|Libgcrypt]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}										
|-

|[[Software:NaCl|libsodium]]
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:Mbed TLS|Mbed TLS]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|-

|[[Software:Nettle (cryptographic library)|Nettle]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}										
|-

|[[Software:OpenSSL|OpenSSL]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|wolfCrypt
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-
|}

== Block ciphers ==
Table compares implementations of block ciphers. Block ciphers are defined as being deterministic and operating on a set number of bits (termed a block) using a symmetric key. 
Each block cipher can be broken up into the possible key sizes and block cipher modes it can be run with.

===  [[Block cipher]] algorithms ===
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
![[Advanced Encryption Standard|AES]]
!3DES
!Camellia
!Blowfish
!Twofish
!IDEA
!CAST5
!ARIA
!GOST 28147-89<ref>{{IETF RFC|5830}}</ref><br />/ GOST R 34.12-2015<br />(Magma<ref>{{IETF RFC|8891}}</ref> & Kuznyechik<ref>{{IETF RFC|7801}}</ref>)
!SM4
|-

|[[Software:Botan (programming library)|Botan]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]]<ref>[https://www.bouncycastle.org/specifications.html Bouncy Castle Specifications], bouncycastle.org, retrieved 2018-04-10</ref>
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:BSAFE|BSAFE]] Crypto-J
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Cryptlib|cryptlib]]<ref>[https://www.cs.auckland.ac.nz/~pgut001/cryptlib/ cryptlib Encryption Toolkit], [[Biography:Peter Gutmann (computer scientist)|Peter Gutmann]], retrieved 2015-11-28</ref>
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}} 
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Crypto++|Crypto++]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}} 
|{{Yes}} 
|{{Yes}} 
|{{Yes}} 
|{{Yes}}
|{{Partial}}<ref group=lower-alpha name="cryptopp-gost" />
|{{Yes}}
|-

|[[Software:GnuTLS|GnuTLS]]
|{{Yes}}
|{{No}}
|{{Yes}}
|{{No}} 
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers 
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{No}} 
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Libgcrypt|Libgcrypt]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}} 
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:NaCl|libsodium]]
|{{Partial}}<ref group=lower-alpha name="nacl-aes" />
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Mbed TLS|Mbed TLS]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Nettle (cryptographic library)|Nettle]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:OpenSSL|OpenSSL]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|wolfCrypt
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-
|}

{{Reflist|group=lower-alpha|refs=
<ref name="cryptopp-gost">Crypto++ only supports GOST 28147-89, but not GOST R 34.12-2015.</ref>
<ref name="nacl-aes">libsodium only supports AES-256, but not AES-128 or AES-192.</ref>
}}

=== [[Block cipher mode of operation|Cipher modes]] ===
{| class="wikitable sortable" style="text-align: left"
|-
! Implementation
!ECB
!CBC
![[Block cipher mode of operation#Output Feedback (OFB)|OFB]]
![[Block cipher mode of operation#Cipher Feedback (CFB)|CFB]]
!CTR
![[CCM mode|CCM]]
!GCM
![[OCB mode|OCB]]
!XTS
![https://tools.ietf.org/html/rfc3394 AES-Wrap]
![[Stream cipher|Stream]]
![[EAX mode|EAX]]
|-

|[[Software:Botan (programming library)|Botan]] 
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]] 
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:BSAFE|BSAFE]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|-

|[[Software:Cryptlib|cryptlib]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Crypto++|Crypto++]]
|{{Yes}}
|{{Yes}}
|{{Yes}} 
|{{Yes}} 
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|-
|[[Software:GnuTLS|GnuTLS]]
|
|
|
|
|
|
|
|
|
|
|
|
|-

|[[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|-

|[[Software:Libgcrypt|Libgcrypt]]  
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:NaCl|libsodium]]
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Mbed TLS|Mbed TLS]]
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Nettle (cryptographic library)|Nettle]]
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:OpenSSL|OpenSSL]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|-

|wolfCrypt
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|-
|}

== Stream ciphers ==
The table below shows the support of various [[Stream cipher|stream cipher]]s. Stream ciphers are defined as using plain text digits that are combined with a pseudorandom cipher digit stream. Stream ciphers are typically faster than block ciphers and may have lower hardware complexity, but may be more susceptible to attacks.

{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
!Implementation
![[RC4]]
!HC-256
!Rabbit
![[Salsa20]]
!ChaCha
!SEAL
![[Panama (cryptography)|Panama]]
!WAKE
!Grain
!VMPC
!ISAAC
|-

|[[Software:Botan (programming library)|Botan]]
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]]
|{{Yes}}
|{{Yes}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|-

|[[Software:BSAFE|BSAFE]] Crypto-J
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Cryptlib|cryptlib]]
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Crypto++|Crypto++]]
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|-
|[[Software:GnuTLS|GnuTLS]]
|
|
|
|
|
|
|
|
|
|
|
|-

|[[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Libgcrypt|Libgcrypt]]
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:NaCl|libsodium]]
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Mbed TLS|Mbed TLS]]
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:Nettle (cryptographic library)|Nettle]]
|{{Yes}}
|{{No}}
|{{No}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|[[Software:OpenSSL|OpenSSL]]
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-

|wolfCrypt
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{Yes}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|{{No}}
|-
|}

== Hardware-assisted support ==
These tables compare the ability to utilize hardware enhanced cryptography.  By using the assistance of specific hardware the library can achieve greater speeds and / or improved security than otherwise.

=== [[Smart card]], [[SIM card|SIM]] and [[Finance:Hardware security module|HSM]] protocol support ===
{| class="wikitable sortable" style="text-align: left"
|-
! Implementation
! PKCS #11
! PC/SC
! [[CCID (protocol)|CCID]]
|-

| [[Software:Botan (programming library)|Botan]]
| {{Yes}}
| {{No}}
| {{No}}
|-

| [[Software:Bouncy Castle (cryptography)|Bouncy Castle]]
| {{Yes}}<ref group=lower-alpha name="bcpkcs11" />
| {{No}}
| {{No}}
|-

| [[Software:BSAFE|BSAFE]]
| {{Yes}}<ref group=lower-alpha name="bsafe-cryptoj-p11" />
| {{No}}
| {{No}}
|-

| [[Software:Cryptlib|cryptlib]]
| {{Yes}}
| {{No}}
| {{No}}
|-

| [[Software:Crypto++|Crypto++]]
| {{No}}
| {{No}}
| {{No}}
|-

| [[Software:GnuTLS|GnuTLS]]
| {{Yes}}
| {{No}}
| {{No}}
|-

| [[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers
| {{Yes}}
| {{No}}<ref group=lower-alpha name="javax-smartcardio" />
| {{No}}<ref group=lower-alpha name="javax-smartcardio" />
|-

| [[Software:Libgcrypt|Libgcrypt]]
| {{Yes}}<ref>With [http://www.scute.org/scute.html/Overview.html Scute], scute.org</ref>
| {{Yes}}<ref name="SCdaemon">With GnuPG's [https://www.gnupg.org/documentation/manuals/gnupg/Scdaemon-Options.html SCdaemon] & gpg-agent, gnupg.org</ref>
| {{Yes}}<ref name="SCdaemon"/>
|-

| [[Software:NaCl|libsodium]]
| {{No}}
| {{No}}
| {{No}}
|-

| [[Software:Mbed TLS|Mbed TLS]]
| {{Yes}}<ref name="libp11"/>
| {{No}}
| {{No}}
|-

| [[Software:OpenSSL|OpenSSL]]
| {{Yes}}<ref name="libp11">With an [https://github.com/OpenSC/libp11 libp11] engine</ref>
| {{No}}
| {{No}}
|-

| wolfCrypt
| {{Yes}}
| {{No}}
| {{No}}
|-
|}

{{Reflist|group=lower-alpha|refs=
<ref name="bcpkcs11">In conjunction with the PKCS#11 provider, or through the implementation of operator interfaces providing access to basic operations.</ref>
<ref name="bsafe-cryptoj-p11">When using BSAFE Crypto-J in native mode using BSAFE Crypto-C Micro Edition.</ref>
<ref name="javax-smartcardio">Support is available through javax.smartcardio package of JDK.</ref>}}

=== General purpose CPU / platform acceleration support ===
{| class="wikitable sortable" style="text-align: left; font-size: smaller"
|-
! Implementation
! [[AES instruction set#x86 architecture processors|AES-NI]]
! [[SSSE3]] / SSE4.1
! [[Advanced Vector Extensions|AVX / AVX2]]
! [[AVX-512]]
! [[RDRAND]]
! [[VIA PadLock]]
! [http://www.intel.com/content/www/us/en/embedded/technology/quickassist/overview.html Intel QuickAssist]
! [[ARM architecture#Advanced SIMD (Neon)|ARMv7-A NEON]]
! [[ARM architecture#Armv8-A|ARMv8-A cryptography instructions]]
! [[Power ISA#Power ISA v.2.03|Power ISA v2.03]] ([[Engineering:AltiVec|AltiVec]]<ref group=lower-alpha name="altivec-arch" />)
! [[Power ISA#Power ISA v.2.07|Power ISA v2.07]] (e.g., POWER8 and later<ref group=lower-alpha name="altivec-arch" />)
|-

| [[Software:Botan (programming library)|Botan]]
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
|-

| [[Software:BSAFE|BSAFE]]
| {{Yes}}<ref group=lower-alpha name="bsafe-cryptoj-native" />
| {{Yes}}<ref group=lower-alpha name="bsafe-cryptoj-native" />
| {{Yes}}<ref group=lower-alpha name="bsafe-cryptoj-native" />
| {{No}}
| {{Yes}}<ref group=lower-alpha name="bsafe-cryptoj-native" />
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<ref group=lower-alpha name="bsafe-cryptoj-native" />
| {{No}}
| {{No}}
|-

| [[Software:Cryptlib|cryptlib]]
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
|-

| [[Software:Crypto++|Crypto++]]
| {{Yes}}
| {{Yes}} 
| {{Yes}} 
| {{No}}
| {{Yes}} 
| {{Yes}}<ref group=lower-alpha name="cryptopp-padlock" />
| {{No}}
| {{Yes}} 
| {{Yes}} 
| {{Yes}}
| {{Yes}}
|-

| [[Software:GnuTLS|GnuTLS]]
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
|-

| [[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers
| {{Yes}}<ref group=lower-alpha name="hotspot-native" />
| {{Yes}}<ref group=lower-alpha name="hotspot-native" />
| {{Yes}}<ref group=lower-alpha name="hotspot-native" />
| {{Yes}}<ref group=lower-alpha name="hotspot-native" />
| {{Yes}}<ref group=lower-alpha name="hotspot-native" />
| {{No}}
| {{No}}
| {{No}}
| {{Yes}}<ref group=lower-alpha name="hotspot-native" />
| {{No}}
| {{Yes}}<ref group=lower-alpha name="hotspot-native" />
|-

| [[Software:Libgcrypt|Libgcrypt]]<ref>[https://dev.gnupg.org/source/libgcrypt/browse/master/src/hwfeatures.c hwfeatures.c], dev.gnupg.org</ref>
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
|-

| [[Software:NaCl|libsodium]]
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
| {{No}}
|-

| [[Software:OpenSSL|OpenSSL]]
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}<ref group=lower-alpha name="openssl-rdrand" />
| {{Yes}}
| {{No}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{Yes}}
|-

| wolfCrypt
| {{Yes}}
| {{Yes}}
| {{Yes}}
| {{No}}
| {{Yes}}
| {{No}}
| {{Yes}}<ref>{{Cite web|url=https://www.wolfssl.com/wolfSSL/Blog/Entries/2017/1/18_wolfSSL_Asynchronous_Intel_QuickAssist_Support.html|title = WolfSSL Asynchronous Intel QuickAssist Support - wolfSSL|date = 18 January 2017}}</ref>
| {{Yes}}
| {{Yes}}<ref>{{Cite web|url=https://www.wolfssl.com/wolfSSL/Blog/Entries/2016/10/13_wolfSSL_ARMv8_Support.html|title = WolfSSL ARMv8 Support - wolfSSL|date = 13 October 2016}}</ref>
| {{No}}
| {{No}}
|-
|}

{{Reflist|group=lower-alpha|refs=
<ref name="altivec-arch">[[Engineering:AltiVec|AltiVec]] includes POWER4 through POWER8 SIMD processing. POWER8 added in-core crypto, which provides accelerated AES, SHA and PMUL similar to ARMv8.1.</ref>
<ref name="cryptopp-padlock">Crypto++ only provides access to the Padlock random number generator. Other functions, like AES acceleration, are not provided.</ref>
<ref name="openssl-rdrand">OpenSSL RDRAND support is provided through the ENGINE interface. The RDRAND generator is not used by default.</ref>
<ref name="bsafe-cryptoj-native">When using RSA BSAFE Crypto-J in native mode using BSAFE Crypto-C Micro Edition</ref>
<ref name="hotspot-native">When using the [[Software:HotSpot (virtual machine)|HotSpot JVM]]</ref>
}}

== Code size and code to comment ratio ==

{| class="wikitable sortable" style="text-align: left"
|-
! Implementation
! Source Code Size<br />
(kSLOC = 1000 lines of source code)
! Code Lines to Comment Lines Ratio
|-

|[[Software:Botan (programming library)|Botan]]
|133<ref name="OpenHub_language-analysis_Botan">[https://www.openhub.net/p/botan/analyses/latest/languages_summary Language Analysis of Botan], OpenHub.net, retrieved 2018-07-18</ref>
|4.55<ref name="OpenHub_language-analysis_Botan" />
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]]
|1359<ref name="OpenHub_language-analysis_BouncyCastle">[https://www.openhub.net/p/5523/analyses/latest/languages_summary Language Analysis of Bouncy Castle], OpenHub.net, retrieved 2015-12-23</ref>
|5.26<ref name="OpenHub_language-analysis_BouncyCastle" />
|-

|[[Software:BSAFE|BSAFE]] Crypto-J
|271<ref group=lower-alpha name="code-comment-ratio-cryptoj" />
|1.3<ref group=lower-alpha name="code-comment-ratio-cryptoj" />
|-

|[[Software:Cryptlib|cryptlib]]
|241
|2.66								
|-

|[[Software:Crypto++|Crypto++]]
|115<ref name="OpenHub_language-analysis_Cryptopp">[https://www.openhub.net/p/3522/analyses/latest/languages_summary Language Analysis of Crypto++], OpenHub.net, retrieved 2018-07-18</ref>
|5.74<ref name="OpenHub_language-analysis_Cryptopp" />
|-

|[[Software:GnuTLS|GnuTLS]]
|363<ref name="OpenHub_language-analysis_GnuTLS">[https://www.openhub.net/p/gnutls/analyses/latest/languages_summary Language Analysis of GnuTLS], OpenHub.net, retrieved 2020-09-15</ref>
|7.30<ref name="OpenHub_language-analysis_GnuTLS" />
|-

|[[Software:Java (software platform)|Java's]] default [[Java Cryptography Architecture|JCA]]/[[Java Cryptography Extension|JCE]] providers
|{{-}}
|{{-}}
|-

|[[Software:Libgcrypt|Libgcrypt]]
|216<ref name="OpenHub_language-analysis_Libgcrypt">[https://www.openhub.net/p/libgcrypt/analyses/latest/languages_summary Language Analysis of Libgcrypt], OpenHub.net, retrieved 2015-12-23</ref>
|6.27<ref name="OpenHub_language-analysis_Libgcrypt" />
|-

|[[Software:NaCl|libsodium]]
|44<ref name="OpenHub_language-analysis_libsodium">[https://www.openhub.net/p/libsodium/analyses/latest/languages_summary Language Analysis of libsodium], OpenHub.net, retrieved 2017-05-07</ref>
|21.92<ref name="OpenHub_language-analysis_libsodium" />
|-

|[[Software:Mbed TLS|Mbed TLS]]
|105<ref name="OpenHub_language-analysis_mbed">[https://www.openhub.net/p/mbed-tls/analyses/latest/languages_summary Language Analysis of mbed-tls], OpenHub.net, retrieved 2019-09-15</ref>
|33.9<ref name="OpenHub_language-analysis_mbed" />
|-

|[[Software:Nettle (cryptographic library)|Nettle]]
|111<ref name="OpenHub_language-analysis_Nettle">[https://www.openhub.net/p/nettle/analyses/latest/languages_summary Language Analysis of Nettle], OpenHub.net, retrieved 2015-12-23</ref>
|4.08<ref name="OpenHub_language-analysis_Nettle" />
|-

|[[Software:OpenSSL|OpenSSL]]
|472<ref name="OpenHub_language-analysis_OpenSSL">[https://www.openhub.net/p/openssl/analyses/latest/languages_summary Language Analysis of OpenSSL], OpenHub.net, retrieved 2017-05-07</ref>
|4.41<ref name="OpenHub_language-analysis_OpenSSL" />
|-

|wolfCrypt
|39
|5.69
|-
|}
{{Reflist|group=lower-alpha|refs=
<ref name="code-comment-ratio-cryptoj">Based on Crypto-J 6.2.5, excluding tests source. Generated using https://github.com/XAMPPRocky/tokei</ref>}}

== Portability ==

{| class="wikitable sortable" style="text-align: left"
|-
! Implementation
! Supported Operating System
! Thread safe
|-

|[[Software:Botan (programming library)|Botan]]
| Linux, Windows, macOS, Android, iOS, FreeBSD, NetBSD, OpenBSD, DragonflyBSD, Solaris, AIX, QNX, Haiku
| {{Yes}}					
|-

|[[Software:Bouncy Castle (cryptography)|Bouncy Castle]]
| General Java API: J2ME, Java Runtime Environment 1.1+, Android. Java FIPS API: Java Runtime 1.5+, Android. C# API (General & FIPS): CLR 4.
|					
|-

| [[Software:BSAFE|BSAFE]] Crypto-J
| Solaris, Linux, Android, FreeBSD, AIX, 32 and 64-bit Windows, macOS (Darwin)
| {{Yes}}
|-

| [[Software:Cryptlib|cryptlib]]
| AMX, ARINC 653, BeOS, ChorusOS, CMSIS-RTOS/mbed-rtos, DOS, DOS32, eCOS, embOS, FreeRTOS/OpenRTOS, uItron, MQX, MVS, Nucleus, OS/2, Palm OS, QNX Neutrino, RTEMS, SMX, Tandem NonStop, Telit, ThreadX, uC/OS II, Unix (AIX, FreeBSD, HP-UX, Linux, macOS, Solaris, etc.), VDK, VM/CMS, VxWorks, Win16, Win32, Win64, WinCE/PocketPC/etc, XMK
| {{Yes}}						
|-

| [[Software:Crypto++|Crypto++]]
| Unix (AIX, OpenBSD, Linux, MacOS, Solaris, etc.), Win32, Win64, Android, iOS, ARM
| {{Yes}}<ref group=lower-alpha name="cryptopp-threading" />
|-

| [[Software:GnuTLS|GnuTLS]]
| Runs on most Unix platforms and Windows<ref>[https://www.gnutls.org/#features GnuTLS - features], GnuTLS.org, retrieved 2022-09-15</ref>						
| ?
|-

| [[Software:Libgcrypt|Libgcrypt]]
| All 32 and 64 bit Unix Systems (Linux, FreeBSD, NetBSD, macOS etc.), Win32, Win64, WinCE and more
| {{Yes}}<ref name="Libgcrypt_thread-safety">[https://gnupg.org/documentation/manuals/gcrypt-devel/Overview.html GnuPG documentation: Libgcrypt overview - thread safety], GnuPG.org, retrieved 2016-04-16</ref> 
|-

| [[Software:NaCl|libsodium]]
| macOS, Linux, OpenBSD, NetBSD, FreeBSD, DragonflyBSD, Android, iOS, 32 and 64-bit Windows (Visual Studio, MinGW, C++ Builder), NativeClient, QNX, JavaScript, AIX, MINIX, Solaris
| {{Yes}}
|-

| [[Software:Mbed TLS|Mbed TLS]]
| Win32/64, Unix Systems, embedded Linux, Micrium's µC/OS, FreeRTOS
| ?
|-

| [[Software:OpenSSL|OpenSSL]]
| Solaris, IRIX, HP-UX, MPE/iX, Tru64, Linux, Android, BSD (OpenBSD, NetBSD, FreeBSD, DragonflyBSD), NextSTEP, QNX, UnixWare, SCO, AIX, 32 and 64-bit Windows (Visual Studio, MinGW, UWIN, CygWin), UEFI, macOS (Darwin), iOS, HURD, VxWorks, uClinux, VMS, DJGPP (DOS), Haiku
| {{Yes}}
|-

| wolfCrypt
| Win32/64, Linux, macOS, Solaris, ThreadX, VxWorks, FreeBSD, NetBSD, OpenBSD, embedded Linux, WinCE, Haiku, OpenWRT, iPhone (iOS), Android, Nintendo Wii and Gamecube through DevKitPro, QNX, MontaVista, NonStop, TRON/ITRON/µITRON, Micrium's µC/OS, FreeRTOS, SafeRTOS, Freescale MQX, Nucleus, TinyOS, HP-UX
| {{Yes}}
|-
|}
{{Reflist|group=lower-alpha|refs=
<ref name="cryptopp-threading">Crypto++ is thread safe at the object level, i.e. there is no shared data among instances. If two different threads access the same object then the user is responsible for locking.</ref>}}

== References ==
{{reflist}}

{{DEFAULTSORT:Cryptography library comparison}}
[[Category:Computer libraries]]
[[Category:Security software comparisons|Cryptography libraries]]

{{Sourceattribution|Comparison of cryptography libraries}}