Cryptographic Libraries

Our humanly developed low-level APIs rely on finely tuned arithmetic algorithms designed to best suit the given microarchitecture and its hardware computational features at the assembly level. Our libraries are faster by orders of magnitude than C code compiled with general-purpose compilers. Challenge us and compare!

Available crypto libraries

Our portfolio of cryptographic libraries includes:

• ECC (Elliptic Curve Cryptography): ECDSA signature (FIPS PUB 186-3), ECDH key agreement (NIST SP 800-56), ECIES encryption scheme (ISO/IEC 18033), various elliptic curves supported (e.g., NIST, Brainpool, ANSSI, BSI, Curve25519)

• RSA: signature/decryption in standard and CRT modes, verification/encryption in standard mode, RSA paddings (ISO/IEC 9796-3, PKCS#1 v1.5, v2.0/2.1)

• RSA OBKG (On-Board Key Generation): random prime number generation, incremental (ISO/IEC 18032) or modular search sequences (Joye-Paillier), strong primes (ANSI X9.31), Rabin-Williams primes (ISO/IEC 9796-3), generation of RSA key pairs in standard or CRT formats

• AES (Advanced Encryption Standard): 128/192/256-bit encryption and decryption (FIPS PUB 197, ISO/IEC 18033-3), various mode of operations (ECB, CBC, OFB, CTR, GCM)

• DES (Data Encryption Standard): DES/3DES encryption and decryption (FIPS PUB 46, NIST SP 800-67, ISO/IEC 18033), various mode of operations (ECB, CBC, OFB, CTR, GCM)

• Hash Functions: SHA-1, SHA-224/256/384/512, SHA-3 (FIPS PUB 180), Ascon, Poseidon

• MAC (Message Authentication Code): AES-based and DES-based MAC, CBC-MAC (FIPS PUB 113), CMAC, GMAC (NIST SP 800-38), hash-based MAC, NMAC, HMAC (ISO/IEC 9797-2, FIPS PUB 198, MD5/RFC 6151)

• DRNG (Deterministic Random Number Generation): ANSI X9.31, X9.17 based on an approved block cipher, ISO/IEC 18031 random bit generators, NIST SP 800-90A (Rev. 1) random bit generation, AIS20/31 compliant DRNG

• Post-quantum cryptography: lattice-based schemes (CRYSTALS-Kyber, CRYSTALS-Dilithium, FALCON), code-based schemes (Classic McEliece, Bike, HQC), multivariate schemes (UoV), hash-based schemes (SPHINCS+, XMSS, LMS)

• Advanced Cryptographic Primitives: pairings (aka bilinear maps), IBE (Identity-Based Encryption), anonymous signatures/credentials, ABE (Attribute-Based Encryption), FHE (Functional Homomorphic Encryption), SNARKs (Succinct Non-interactive Arguments of Knowledge)

Security countermeasures

Our implementations feature the best crypto coding practice such as being constant-time and free of data-dependent memory access to avoid pitfalls such as microarchitectural attacks (cache attacks, flush+reload, Spectre, …) and timing attacks. Embedded cryptographic implementations are further subject to physical attacks such as power and electromagnetic attacks (SPA, (HO-)DPA, CPA, MIA, template attacks, horizontal attacks, deep-learning based attacks, etc.), fault-injection attacks (FA, DFA, IFA, safe-error attacks, etc.). Our research team evaluates the latest advances in side-channel analysis and fault-based attacks, attending and contributing to major security related scientific conferences and workshops (CHES, COSADE, FDTC, CARDIS, etc.). Our team members are among the main actors of this field authoring several provably-secure countermeasures and widely deployed formal verification tools that automatically check the security of cryptographic implementations. With this expertise, we ensure that our libraries embed the most efficient countermeasures keeping them at a beyond-state-of-the-art security level.

Our offer

Our business offer aims at providing flexibility and trust to our customers. That is why we strongly commit on efficiency and security, while considering intellectual property issues and proposing flexible contracting options. In particular, our offer covers:

• Certification readiness. Our cryptographic libraries are guaranteed to successfully pass in-lab security evaluations (FIPS 140-2, CC EAL 4+, CAST, EMVco, etc.).

• Fine-tuning of the intellectual property. We customize the selection of algorithmic techniques and security countermeasures in order to avoid unnecessary patents.

• Flexible contracting options. We propose flexible contracting options from the on-demand development of cryptographic software to the licensing of our home-made libraries.

Contact us and get a precise quotation.

Why choose CryptoExperts

CryptoExperts was co-founded by internationally recognized experts in the field of embedded cryptography. Our R&D staff of PhDs totalizes 60+ patents and 300+ scientific publications, and maintains a beyond-state-of-the-art knowledge to secure smart card products. Four senior members of our staff are former program chairs of CHES, the prime scientific event on secure cryptographic implementations. We coordinated the innovative VeriSiCC project and we now host the AMAskZONE ERC project which both aim to automatically generate and verify practical side-channel countermeasures. Let world-class experts develop or evaluate your embedded cryptographic libraries.

Related publications