{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography/2"}],"enrichment":{"capability":"Pure-Python implementation of SM2, SM3, and SM4 Chinese national standard cryptographic algorithms, providing encryption, decryption, signing, and verification functions.","skillfed_tags":["chinese-cryptography","sm2-sm3-sm4","dormant-maintenance"],"use_cases":["Encrypt and decrypt data using SM2 elliptic curve cryptography for systems requiring Chinese national standard compliance.","Sign and verify messages with SM2 or SM3 hash integration for authentication in Chinese regulatory or enterprise environments.","Perform symmetric block encryption with SM4 in ECB or CBC modes for data protection in applications mandated to use national standards.","Interoperate with systems already using gmssl or compatible SM2/SM3/SM4 implementations, including ASN.1 mode for Java compatibility."],"what_it_does":"gmssl is a pure-Python cryptographic library implementing China's national standard algorithms: SM2 (elliptic curve public-key cryptography), SM3 (cryptographic hash), and SM4 (block cipher). It provides functions for encryption, decryption, digital signing, and verification without external compiled dependencies. The package is designed for applications needing to interoperate with Chinese cryptographic standards or systems, particularly where SM2 key exchange, SM4 block encryption in ECB or CBC modes, and SM3-based signatures are required.\n\nThe library has no runtime dependencies and installs as a pure wheel. However, maintenance is dormant\u2014the last release was June 2022\u2014so security patches, bug fixes, and compatibility updates with newer Python versions are not actively maintained. It remains available and functional for existing deployments, but adopters should be aware that issues discovered after the last release are unlikely to receive fixes from the upstream project.","worth_installing":"Yes, if you need SM2/SM3/SM4 cryptography and accept dormant maintenance. The package has no dependencies, installs easily, and carries no known vulnerabilities. However, do not use it for new projects requiring active security support or Python version compatibility guarantees\u2014consider it suitable for legacy systems, Chinese regulatory compliance scenarios, or interoperability with existing gmssl deployments where the risk of unpatched issues is acceptable."},"id":"gmssl","links":{"html":"https://skillfed.io/packages/gmssl","md":"https://skillfed.io/packages/gmssl.md","pypi":"https://pypi.org/project/gmssl/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2022-06-21","license_spdx":null,"license_treatment":"permissive","name":"gmssl","python_support":"unspecified","summary":"Pure-Python SM2/SM3/SM4 implementation"},"popularity":{"monthly_downloads":153541,"position":10877,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"3.2.2"}
