
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
The goal of krypt is to provide a platform- and library-independent cryptography API for the Ruby language (http://www.ruby-lang.org). It can be used with all C(++)-based Ruby implementations as well as JRuby.
The major part of krypt is implemented in Ruby, and it additionally offers the possibility to integrate OS- or language-specific native libraries to implement cryptographic primitives. krypt aims at offering performance while still improving the security and features of the Ruby cryptography infrastructure. Its motto is to keep all the good parts of what exists today and to improve the parts that need improvement. It offers an idiomatic, modern API that cherry-picks the best features of other popular libraries and also offers new features that are not offered by others today.
The C implementation of the krypt-core API to be used with all C-based Rubies. The repository can be found at
https://github.com/krypt/krypt-core-c.
Realizes the krypt-core API in Java to be used by Jruby (http://www.jruby.org). The repository can be found at
https://github.com/krypt/krypt-core-java.
An all Ruby implementation of krypt-core. Access to the native krypt-provider libraries is realized via FFI. The repository can be found at
https://github.com/krypt/krypt-core-ruby.
A realization of the krypt-provider API in C that utilizes OpenSSL (http://www.openssl.org). Can also be used by JRuby via krypt-core-ruby and FFI. The repository is at
https://github.com/krypt/krypt-provider-openssl.
Realization of the krypt-provider API in Java exclusively to be used by JRuby. The implementation is based on the JDK built-in security and cryptography library. The repository is at
https://github.com/krypt/krypt-provider-jdk.
Copyright (c) 2012-2013 Hiroshi Nakamura and Martin Boßlet. krypt and all its sub projects are distributed under the MIT License. See LICENSE for further details.
FAQs
Unknown package
We found that krypt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.