orion
Usable, easy and safe pure-Rust crypto [Moved to: https://github.com/orion-rs/orion] (by brycx)
cargo-supply-chain
Gather author, contributor and publisher data on crates in your dependency graph. (by rust-secure-code)
| orion | cargo-supply-chain | |
|---|---|---|
| 5 | 20 | |
| 236 | 311 | |
| - | 1.3% | |
| 6.6 | 4.9 | |
| about 3 years ago | about 1 month ago | |
| Rust | Rust | |
| MIT License | Apache License 2.0 |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
orion
Posts with mentions or reviews of orion.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-03-28.
-
orion 0.16 - const generics, organization changes and a new maintainer
GitHub: https://github.com/orion-rs/orion Crates.io: https://crates.io/crates/orion
-
Looking for an open-source project to join part-time
I'm the author and maintainer of a pure-Rust crypto library called Orion. I've been at it for a couple of years now, working on it in my spare time as well. There are a few people involved already, but we're still missing someone that is involved enough to be a "co-maintainer". There are some larger features that have been planned, but I lack the time currently to start too many new things. Of course, you can contribute in any amount you want.
-
Look-up tables for bcrypt, scrypt and Argon2?
Custom (the ones I have in the implementation I wrote)
-
How to implement a simple password-based encryption with ring?
With that said, i think multiple people are working on crypto libraries that take footguns out of it - which is what i think we definitely need. https://github.com/brycx/orion seems like a solid attempt at making crypto fool-proof , so i do have hope.
-
Does any interesting projects need help?
You're more than welcome to swing by at Orion (a pure-Rust crypto lib). You can also check the new Matrix room for a small chat.
cargo-supply-chain
Posts with mentions or reviews of cargo-supply-chain.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2023-01-04.
-
Release of Structsy 0.5
Great news! Sounds like a good way to add caching to cargo supply-chain. There's a lot of small chunks of data we want to persist.
-
greater supply chain attack risk due to large dependency trees?
Shameless plug: https://github.com/rust-secure-code/cargo-supply-chain shows the supply chain attack surface for your Rust project.
-
Announcement: xflags 3.0.0
bpaf: https://github.com/rust-secure-code/cargo-supply-chain/blob/29bfcb256001cdef46830544b554d33c56602030/src/cli.rs
-
Yet another command line argument parser: bpaf 0.5.2
I'm very happy with it for cargo supply-chain. I appreciate that it has no unsafe code, no sprawling dependency tree, and supports OsStr in addition to just &str.
-
Best way to protect a project from supply chain attacks?
cargo supply-chain to see your attack surface for supply chain attacks
- Cargo-supply-chain: Rust author, contributor and publisher data for dep. crates
-
Comparing Rust supply chain safety tools
See also: cargo supply-chain
-
Yet another command line argument parser: bpaf 0.4.0
I've used bpaf for cargo supply-chain and I'm very happy with it.
-
Fundamental - finding out who you can fund in dependency tree
https://github.com/rust-secure-code/cargo-supply-chain can also help here.
-
Announcing `cargo supply-chain` v0.3: revamped CLI, separate JSON schema
cargo supply-chain list the publishers of all crates in your dependency graph. With it you can:
What are some alternatives?
When comparing orion and cargo-supply-chain you can also consider the following projects:
ring - Safe, fast, small crypto using Rust
cap-std - Capability-oriented version of the Rust standard library
rust-djangohashers - A Rust port of the password primitives used in Django Project.
paru - Feature packed AUR helper
rust-crypto - A (mostly) pure-Rust implementation of various cryptographic algorithms.
cargo-crev - A cryptographically verifiable code review system for the cargo (Rust) package manager.
RustCrypto - Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
cargo-auditable - Make production Rust binaries auditable
octavo - Highly modular & configurable hash & crypto library
eve-rs - A simple, intuitive, express-like HTTP library
suruga - [INACTIVE] TLS 1.2 implementation in Rust
cargo-msrv - 🦀 Find the minimum supported Rust version (MSRV) for your project
orion vs ring
cargo-supply-chain vs cap-std
orion vs rust-djangohashers
cargo-supply-chain vs paru
orion vs rust-crypto
cargo-supply-chain vs cargo-crev
orion vs RustCrypto
cargo-supply-chain vs cargo-auditable
orion vs octavo
cargo-supply-chain vs eve-rs
orion vs suruga
cargo-supply-chain vs cargo-msrv