Cryptology

The cryptology domain provides the building blocks for protecting data and establishing trust. It covers cryptographic hashes, encryption and decryption, signatures, certificates, keys, and the policies that help applications choose suitable algorithms. The APIs keep algorithm choices and serialized identifiers explicit so applications can evolve their formats as cryptographic guidance changes.

• Cryptology Overview
  • Storing and Verifying Passwords
  • Sensitive Data
  • Using Hash Algorithms
  • Reading X.509 Certificates
  • Creating TLS Certificates and Requests
  • Configuring TLS Profiles
  • Supported Hash Algorithms
• Configuring TLS Profiles
  • Reading a Profile List
  • Choosing Client and Server Material
  • Fallbacks and Empty Overrides
  • Resolving Files from Their Defining Source
  • Versioning and Material Sources
• Creating TLS Certificates and Requests
  • Choosing a Key Profile
  • Creating a Test Certificate Hierarchy
  • Writing the Setup Safely
  • Protecting a Private Key with a Password
  • Creating an Enterprise Signing Request
  • Validity and Reissuance
• Storing and Verifying Passwords
  • Run the Demo
  • Create the Local Pepper
  • Load Pepper Material
  • Read a Password
  • Hash and Store a Password
  • Verify a Login
  • Rotate Peppers
  • Unkeyed Records
  • Exact Unicode Behavior
  • Safe Local Persistence
  • Operational Protection Still Matters
  • Sensitive Erasure Boundary
• Supported Password Hashing Algorithms
  • Algorithm Overview
  • Argon2id
    • Recommended Policy
  • scrypt
  • The Pepper Layer
  • Storage Format
  • Automatic Migration
  • Unsafe Custom Costs
  • Why Other Algorithms Are Excluded
    • General SHA and Hasher
    • PBKDF2
    • bcrypt
• Using Hash Algorithms
  • Understanding Hash Algorithms
  • Hash with a Fixed Algorithm
    • Hasher Lifecycle
    • Hashing Text
  • Select an Algorithm Automatically
  • Store Hash Values
  • Persist the Used Algorithm
  • Defensive Hashing
• Supported Hash Algorithms
  • Overview
  • SHA3-256
  • SHA3-384
  • SHA3-512
  • SHA-256
  • SHA-384
  • SHA-512
  • SHA-1
  • MD5