Packages
Provides Pydantic-based data models that mirror Sigstore's protobuf specifications for type-safe JSON serialization and deserialization.
However, verify the license before use in proprietary contexts, and be aware that the package is still in Alpha—expect potential API changes.
Generates cryptographically signed HTTP headers for Polymarket builder authentication, supporting both local key-based signing and remote signing via HTTP.
However, the aging maintenance status (298 days since last release, minimal repository activity) means you should verify that the package still works with current…
A Certbot plugin that automates DNS-01 challenge completion for Let's Encrypt certificate issuance when your domain is managed in DirectAdmin but your service runs elsewhere.
However, verify the license terms first (they are currently unclear in the metadata) and confirm Python version compatibility with your environment, since the package…
Implements SPAKE2, a password-authenticated key exchange (PAKE) algorithm that allows two parties sharing a weak password to derive a strong shared secret for encrypted communication.
Patches Python's ssl.match_hostname to support Unicode (IDNA) domain names, enabling SSL certificate validation for internationalized domain names in HTTPS connections.
Magic Wormhole transfers files, directories, and text between computers using short, human-readable codes and end-to-end encryption, with both a command-line tool and a Python library.
Install it if you need to move files between machines without pre-arrangement or if you want to add encrypted transfer to a Python application.
Patches certifi at runtime to include certificates from the Windows certificate store, allowing Python packages like requests to verify TLS/SSL connections using your system's trusted CAs.
Provides the ssl.match_hostname() function for validating that a server's SSL certificate hostname matches the hostname being connected to, backported from Python 3.7 for use on earlier Python versions.
Install only if maintaining legacy Python 2.x code that cannot be upgraded—otherwise use the built-in ssl.match_hostname().
TgCrypto provides fast C-based implementations of AES-256 encryption in IGE, CTR, and CBC modes, designed specifically for Telegram's MTProto protocol and related cryptographic needs.
Provides type annotations for the jwcrypto library, enabling static type checkers like mypy and pyright to verify code that uses jwcrypto for cryptographic operations.
Implements the Noise Protocol Framework for Python 3, enabling authenticated and encrypted communication between two parties through a standardized handshake and message encryption protocol.
A password hashing library providing implementations of over 30 password hashing algorithms and a framework for hashing and verifying passwords across different schemes.
However, verify whether this fork is actively maintained and confirm that the specific hashing schemes you need are production-ready rather than legacy.
Decodes and verifies Amazon Cognito JWT tokens in both synchronous and asynchronous modes, validating signatures against AWS public key sets.
However, it is abandoned (last release June 2021, repository archived), so you should verify that it remains compatible with your Python version and current Cognito…
Verifies JWT tokens issued by Okta, checking signatures, claims, and expiration to validate access and ID tokens in Python applications.
Install it if you are already committed to Okta as your identity provider; do not install if you use a different OAuth provider.
Provides cryptographic material management and key derivation for AWS-integrated encryption workflows, handling key generation, caching, and integration with AWS KMS.
Encodes and decodes bech32-formatted strings, a checksummed base32 encoding scheme used for Bitcoin segwit addresses and Lightning invoices.
Generates, manages, and verifies Ed25519-based cryptographic key pairs for NATS ecosystem authentication and authorization, with human-readable key encoding.
Provides Python bindings to Rust crates for working with the Chia blockchain, including consensus and protocol functionality.
Encrypts and decrypts data in Django models using the cryptography library, providing a drop-in replacement for Django's own cryptographic primitives with symmetric encryption for database fields.
However, its Pre-Alpha status and dormant maintenance (no commits since June 2024) mean you should verify it works with your exact Django and Python versions before…
Generates and verifies JWT tokens for Atlassian Service to Service Authentication, with built-in support for requests and aiohttp HTTP clients.
Install it if you need to authenticate with Atlassian services or implement the S2S spec.
Provides Python bindings to the sr25519 Rust cryptographic library for Schnorr signature operations, enabling key derivation, signing, and verification in Python applications.
Generates collision-resistant, cryptographically secure unique identifiers (CUIDs) optimized for distributed systems and horizontal scaling without coordination.
Implements Secure Remote Password (SRP) protocol for password-authenticated key agreement, providing both programmatic API and command-line tools for client-server authentication without transmitting passwords.
However, note that the latest release was in 2020 and Python 2 support is included; verify that the supported Python versions and any cryptographic assumptions align…
Provides Python bindings to the Twofish block cipher for encrypting and decrypting 16-byte blocks with keys up to 32 bytes.
Async library that automatically fetches and caches JSON Web Keys (JWKs) from OpenID Connect providers to verify JWT tokens, acting as a replacement for PyJWT's PyJWKClient.
Validates X.509 certificates and certificate chains, supporting path building, revocation checks via CRL and OCSP, whitelisting, and point-in-time validation.
Python bindings for Chia's proof-of-space implementation, providing plotting, proving, and verification of proofs of space via a C++ backend.
Provides Python bindings to a high-performance C++ implementation of Verifiable Delay Functions (VDFs) for the Chia blockchain, enabling fast repeated squarings and proof generation.
Implements the BIP 158 compact block filter construction algorithm, providing a C++ backend wrapped for Python to generate and work with block filters for blockchain applications.
Provides secure SMTP subclasses with TLS/SSL certificate validation for Python 2, extending the standard smtplib to verify CA certificates.
Provides low-level Python tools to work with Bitcoin data structures, transactions, scripts, and the Bitcoin protocol, including RPC interface support for Bitcoin Core.
However, the last release was 2023-06-03 and updates are infrequent—verify compatibility with your Python version and requirements before relying on it for production…
Polars-hash adds cryptographic and non-cryptographic hashing functions to Polars DataFrames, including SHA256, FarmHash, CityHash, GxHash, geohashing, H3 spatial indexing, and time-window hashing.
However, verify the license terms before use in proprietary contexts, and confirm that the AES-instruction requirement for GxHash does not conflict with your…
Rust-based implementation of the CLVM virtual machine for Chia Network, providing Python bindings to execute and validate Chia's smart contract language.
Generates and verifies JWTs for Vonage API authentication in Python, with support for custom claims and signature validation.
Accesses Windows system certificate stores (CA and CRL) via ctypes and crypt32.dll to extract certificates for SSL/TLS operations.
Install only if you are maintaining legacy Python 2.7 code that predates this built-in behavior and cannot upgrade.
A keyring backend that stores passwords in an encrypted file using Argon2 key derivation and authenticated AES encryption, integrating with the keyring package for portable credential storage.
Pysodium is a Python wrapper around libsodium that provides access to authenticated encryption, key exchange, signing, hashing, and password hashing functions.
Generates and verifies JSON Web Tokens (JWTs) using a variety of signature algorithms, delegating cryptographic operations to jwcrypto.
Provides SHA-3, SHAKE, and Keccak hash functions for Python 3.9–3.13 via a PEP 247 compatible interface, with optional monkey-patching of the hashlib module.
Provides Django model fields that encrypt data at rest using Fernet symmetric encryption, storing encrypted values in the database while maintaining a standard Django field API.
However, verify the license status before use—the metadata shows no SPDX or raw license text.