{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"Provides misuse-resistant authenticated encryption using AES-SIV, AES-PMAC-SIV, and STREAM constructions for encrypting messages, keys, and file streams.","skillfed_tags":["abandoned","cryptography","authenticated-encryption"],"use_cases":["Encrypt sensitive configuration files or encryption keys where nonce reuse must not compromise security.","Implement streaming encryption for large files or network streams with built-in protection against message reordering.","Build cross-language cryptographic systems using the interoperable Miscreant implementations across Go, Rust, JavaScript, Ruby, or C#.","Wrap encryption keys in a deterministic, authenticated manner as an alternative to traditional key-wrapping schemes."],"what_it_does":"Miscreant is a Python library implementing misuse-resistant authenticated encryption schemes designed to remain secure even when cryptographic nonces are accidentally reused\u2014a common failure mode in symmetric encryption. It provides three main constructions: AES-SIV (combining AES-CTR with AES-CMAC), AES-PMAC-SIV (a parallelizable variant using AES-PMAC for better performance), and STREAM (for online/streaming encryption that also defends against reordering and truncation attacks). The library is part of a larger cross-language Miscreant project and is intended for developers who need authenticated encryption for individual messages, encryption keys, message streams, or large files.\n\nThe package has no runtime dependencies, making installation straightforward, but it is abandoned\u2014the repository is archived, the last commit was 2019-09-03, and the latest release dates to 2017-12-25. The codebase is marked Pre-Alpha, indicating it was never considered production-ready by its authors. No security vulnerabilities are currently recorded, but the lack of active maintenance means any future issues will not be addressed by the original developers.","worth_installing":"No. The package is abandoned (last release 2017-12-25, repository archived, no commits since 2019-09-03) and marked Pre-Alpha. While the cryptographic constructions are theoretically sound and no known vulnerabilities exist, the lack of active maintenance means security issues and compatibility problems will not be addressed. Use only if maintaining legacy code already depending on it."},"id":"miscreant","links":{"html":"https://skillfed.io/packages/miscreant","md":"https://skillfed.io/packages/miscreant.md","pypi":"https://pypi.org/project/miscreant/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2017-12-25","license_spdx":null,"license_treatment":"permissive","name":"miscreant","python_support":"unspecified","summary":"Misuse-resistant authenticated symmetric encryption"},"popularity":{"monthly_downloads":1278707,"position":4120,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"0.3.0"}