World Library  
Flag as Inappropriate
Email this Article


Article Id: WHEBN0008028323
Reproduction Date:

Title: Cryptlib  
Author: World Heritage Encyclopedia
Language: English
Subject: RSA BSAFE, LibreSSL, Certificate Management Protocol, Cryptographic software, BREACH (security exploit)
Publisher: World Heritage Encyclopedia


Developer(s) Peter Gutmann
Initial release 1995 (1995)
Stable release 3.4.2 (December 17, 2012 (2012-12-17) [1])
Written in C
Operating system Cross-platform
Type Security library
License Sleepycat (Berkeley Database) License[2][3]
Website .com.cryptlibwww

cryptlib is an open source cross-platform software security toolkit library. It is distributed under the Sleepycat License,[2] a free software license compatible with the GNU General Public License.[3] Alternatively, cryptlib is available under a standard commercial license for those preferring to use it under commercial terms.[4]


cryptlib is a security toolkit library that allows programmers to incorporate encryption and authentication services to software. It provides a high-level interface so strong security capabilities can be added to an application without needing to know many of the low-level details of encryption or authentication algorithms. It comes with an over 400 page programming manual.[5]

At the highest level, cryptlib provides implementations of complete security services such as S/MIME and PGP/OpenPGP secure enveloping, SSL/TLS and SSH secure sessions, CA services such as CMP, SCEP, RTCS, and OCSP, and other security operations such as secure timestamping. Since cryptlib uses industry-standard X.509, S/MIME, PGP/OpenPGP, and SSH/SSL/TLS data formats, the resulting encrypted or signed data can be easily transported to other systems and processed there, and cryptlib itself runs on many operating systems—all Windows versions and most Unix/Linux systems. This allows email, files, and EDI transactions to be authenticated with digital signatures and encrypted in an industry-standard format.

cryptlib provides other capabilities including full X.509/PKIX certificate handling (all X.509 versions from X.509v1 to X.509v4) with support for SET, Microsoft AuthentiCode, Identrus, SigG, S/MIME, SSL, and Qualified certificates, PKCS #7 certificate chains, handling of certification requests and CRLs (certificate revocation lists) including automated checking of certificates against CRLs and online checking using RTCS and OCSP, and issuing and revoking certificates using CMP and SCEP. It also implements a full range of certification authority (CA) functions provides complete CMP, SCEP, RTCS, and OCSP server implementations to handle online certificate enrolment/issue/revocation and certificate status checking. Alongside the certificate handling, it provides a sophisticated key storage interface that allows the use of a wide range of key database types ranging from PKCS #11 devices, PKCS #15 key files, and PGP/OpenPGP key rings through to commercial-grade RDBMS' and LDAP directories with optional SSL protection.

cryptlib can make use of the crypto capabilities of a variety of external crypto devices such as hardware crypto accelerators, Fortezza cards, PKCS #11 devices, hardware security modules (HSMs), and crypto smart cards. It can be used with a variety of crypto devices that have received FIPS 140 or ITSEC/Common Criteria certification. The crypto device interface also provides a general-purpose plug-in capability for adding new functionality that can be used by cryptlib.

cryptlib is written in C and supports BeOS, DOS, IBM MVS, Mac OS X, OS/2, Tandem, a variety of Unix versions (including AIX, Digital Unix, DGUX, FreeBSD/NetBSD/OpenBSD, HP-UX, IRIX, Linux, MP-RAS, OSF/1, QNX, SCO/UnixWare, Solaris, SunOS, Ultrix, and UTS4), VM/CMS, Windows 3.x, Windows 95/98/ME, Windows CE/PocketPC/SmartPhone and Windows NT/2000/XP/Vista. It is designed to be portable to other embedded system environments. It is available as a standard Windows DLL. Language bindings are available for C / C++, C# / .NET, Delphi,[6] Java, Python, and Visual Basic(VB).

Algorithm support

Algorithm Key size Block size
AES 128/192/256 128
Blowfish 448 64
CAST-128 128 64
DES [7] 56 64
Triple DES 112 / 168 64
IDEA [8] 128 64
RC2 [9] 1024 64
RC4 [9] 2048 8
RC5 [8] 832 64
Skipjack [9] 80 64
Algorithm Digest size
MD2 [7][9] 128
MD4 [7][9] 128
MD5 [7] 128
RIPEMD-160 160
SHA-1 160
SHA-2 / SHA-256 256
Algorithm Key size Digest size
HMAC-MD5 128 128
HMAC-RIPEMD-160 160 160
HMAC-SHA-1 160 160
HMAC-SHA-2 256 256
Algorithm Key size
Diffie–Hellman 4096
DSA 4096
ECDH 521
Elgamal 4096
RSA 4096

Release History

  • cryptlib 3.4.2 was released on December 17, 2012 (2012-12-17).[10]
  • cryptlib 3.4.1 was released on July 27, 2011 (2011-07-27).[11]
  • cryptlib 3.4.0 was released on October 6, 2010 (2010-10-06).[12]
  • cryptlib 3.3.2 was released on July 3, 2008 (2008-07-03).[13]
  • cryptlib 3.3.1 was released on February 1, 2007 (2007-02-01).[14]
  • cryptlib 3.3 was released on September 13, 2006 (2006-09-13).[15]
  • cryptlib 3.2.3a was released on August 29, 2006 (2006-08-29).[16]
  • cryptlib 3.2.3 was released on July 10, 2006 (2006-07-10).[17]
  • cryptlib 3.2.2 was released on September 6, 2005 (2005-09-06).[18]
  • cryptlib 3.2.1 was released on August 9, 2005 (2005-08-09).[19]
  • cryptlib 3.2 was released on April 18, 2005 (2005-04-18).[20]
  • cryptlib 3.1 was released on December 13, 2003 (2003-12-13).[21]

See also


  1. ^ "cryptlib 3.4.2 released". 2012-12-17. Retrieved 2014-06-16. 
  2. ^ a b
  3. ^ a b
  4. ^
  5. ^
  6. ^
  7. ^ a b c d Disabled by default due to its insecurity
  8. ^ a b Disabled by default due to it being patented
  9. ^ a b c d e Disabled by default due to it being obsolete
  10. ^
  11. ^
  12. ^
  13. ^
  14. ^
  15. ^
  16. ^
  17. ^
  18. ^
  19. ^
  20. ^
  21. ^

External links

  • Official website
This article was sourced from Creative Commons Attribution-ShareAlike License; additional terms may apply. World Heritage Encyclopedia content is assembled from numerous content providers, Open Access Publishing, and in compliance with The Fair Access to Science and Technology Research Act (FASTR), Wikimedia Foundation, Inc., Public Library of Science, The Encyclopedia of Life, Open Book Publishers (OBP), PubMed, U.S. National Library of Medicine, National Center for Biotechnology Information, U.S. National Library of Medicine, National Institutes of Health (NIH), U.S. Department of Health & Human Services, and, which sources content from all federal, state, local, tribal, and territorial government publication portals (.gov, .mil, .edu). Funding for and content contributors is made possible from the U.S. Congress, E-Government Act of 2002.
Crowd sourced content that is contributed to World Heritage Encyclopedia is peer reviewed and edited by our editorial staff to ensure quality scholarly research articles.
By using this site, you agree to the Terms of Use and Privacy Policy. World Heritage Encyclopedia™ is a registered trademark of the World Public Library Association, a non-profit organization.

Copyright © World Library Foundation. All rights reserved. eBooks from Project Gutenberg are sponsored by the World Library Foundation,
a 501c(4) Member's Support Non-Profit Organization, and is NOT affiliated with any governmental agency or department.