Packages
pyrage provides Python bindings to the Rust implementation of age, enabling encryption and decryption using x25519 identities, SSH keys, or passphrases.
A Python library for creating and verifying OpenTimestamps cryptographic proofs, which anchor data to the Bitcoin blockchain for tamper-evident timestamping.
However, verify that the consensus-critical modules remain compatible with your target Bitcoin protocol version, and test thoroughly on your Python version before…
Provides access to Microsoft's Root Certificate Authorities bundle for Python, allowing applications to reference the Microsoft Trusted Root Program's CA certificates.
Redirects certifi's certificate lookup to use the Linux system trust store instead of bundled certificates, enabling TLS verification against OS-managed certificates.
Encodes and decodes Bech32 and Bech32m strings, the checksummed base32 formats used in Bitcoin and blockchain applications.
Implements SLIP-0039 Shamir's Secret Sharing to split a secret into shares that require a minimum threshold to reconstruct, with optional CLI tools for share creation and recovery.
py3rijndael provides a pure-Python implementation of the Rijndael algorithm (the cipher underlying AES) for Python 3, with no external runtime dependencies.
Implements the Borsh binary serialization format for Python, enabling secure and consistent serialization of data structures for hashing and cryptographic applications.
Encodes and decodes multihash digests, supporting 125+ hash functions including SHA-2, SHA-3, BLAKE2, BLAKE3, and MurmurHash3, with streaming computation and JSON serialization.
However, its Pre-Alpha status and aging maintenance (240 days since last release, last commit 2026-01-05) mean it is not actively developed.
Pure Python implementation of the SLH-DSA stateless hash-based digital signature algorithm specified in FIPS 205, with no external dependencies.
However, verify whether the implementation has undergone formal security audit and whether performance meets your requirements before using in production systems with…
A pure-Python implementation of ML-DSA (FIPS 204) and CRYSTALS-Dilithium post-quantum digital signature algorithms for educational study and experimentation.
However, do not install for production cryptographic use—the package explicitly warns against this and is not designed to resist side-channel attacks.
Pure-Python implementation of SM2, SM3, and SM4 Chinese national standard cryptographic algorithms, providing encryption, decryption, signing, and verification functions.
However, do not use it for new projects requiring active security support or Python version compatibility guarantees—consider it suitable for legacy systems, Chinese…
Implements SLIP-0010 hierarchical deterministic key derivation for Bitcoin and other cryptocurrencies, supporting secp256k1, NIST P-256, ed25519, and curve25519 elliptic curves.
Provides authentication and authorization services for the Taktile ML platform, handling JWT tokens, cryptographic operations, and credential management across Taktile ecosystem components.
Install only if you are already committed to the Taktile platform; it is not a general-purpose authentication library.
Encodes and decodes data using Base58 and Base58Check algorithms, with support for multiple alphabets, backed by a Rust implementation for speed.
LightPHE provides a Python library implementing partially and somewhat homomorphic encryption schemes including RSA, ElGamal, Paillier, and elliptic curve variants, allowing encrypted data to be computed on without decryption.
However, verify that the specific algorithm you need is production-ready and suitable for your security requirements before deploying to sensitive workloads.
Signs HTTP requests using AWS Signature V4, generating authorization headers, pre-signed URLs, and S3 POST policies for AWS and compatible services.
Install it if you need to sign AWS requests outside the official SDK or in environments where the full boto3 library is overkill.
LightECC provides elliptic curve arithmetic operations (addition, subtraction, multiplication, division) across multiple curve forms—Weierstrass, Edwards, and Koblitz—with a simple operator-based interface that abstracts the underlying mathematics.
However, verify that the library meets your security and performance requirements before use in production—no evidence of formal cryptographic audit is present in the…
Parses TLS records from binary data, extracting protocol-level details for TLS/SSL inspection and analysis.
However, verify the license terms in the repository first, and check whether it supports the TLS versions your use case requires.
PGPy13 is a Python library for OpenPGP encryption, decryption, and digital signature operations conforming to RFC 4880, with support for RSA, DSA, and ECDSA signatures and RSA/ECDH encryption.
However, be aware this is a temporary fork with minimal ongoing support—the maintainer will not accept pull requests or bug reports.
LightDSA provides digital signature generation and verification using ECDSA, EdDSA, RSA, and DSA algorithms with support for multiple elliptic curve forms and pre-defined curves.
However, verify that the library's cryptographic implementations meet your security requirements before using it in production, given its recent release and lack of…
Castellan provides a unified interface for interacting with key management services in OpenStack environments, abstracting away the complexity of different key manager backends.
Encrypts and decrypts DynamoDB items client-side before transmission, using boto3 as a transparent wrapper with support for attribute-level encryption and cryptographic key management.
Install it if you need client-side encryption for DynamoDB items.
Implements Widevine Content Decryption Module (CDM) functionality in Python, enabling license acquisition and key retrieval for DRM-protected content.
However, the GPL-3.0 copyleft license is a hard blocker for proprietary projects, and you must obtain a Google-provisioned device provision separately—the package…
Command-line tool to create and verify cryptographic timestamp proofs anchored to the Bitcoin blockchain, with support for timestamping and verifying PGP-signed Git commits.
However, the aging maintenance status (591 days since last release) means you should verify that known issues listed in the documentation do not affect your use case,…
A LISP-like virtual machine for writing and executing smart contracts that control fund encumbrance and release on blockchain networks.
However, it is in Alpha status, so expect API changes and verify production readiness for your use case before committing to it in critical systems.
Provides encrypted model fields and cryptographic utilities for Django, wrapping the cryptography library to enable transparent encryption of sensitive database fields.
However, the original project's abandonment and the fork's dormant status (563 days since release, 17 stars) suggest limited community adoption and ongoing…
Compiles a LISP-like smart-contract language (CLVM) into executable bytecode, with support for functions, macros, and inline operators for cryptocurrency transaction encumbrance.
It is in Alpha status, so expect occasional API changes; however, the 660-day release cycle and active repository suggest stability for production use.
Provides a unified interface to cryptographic algorithms, abstracting over underlying crypto libraries like pycryptodomex to simplify algorithm selection and use.
However, the aging maintenance status and unclear license mean you should confirm license compatibility and accept that upstream support is minimal before adopting it…
Provides Python bindings to the SPIFFE Workload API for fetching, renewing, and validating X.509 and JWT SVIDs (SPIFFE identities) from a SPIRE instance or compatible workload API server.
Install it if your architecture relies on SPIFFE for service authentication; skip it if you are not using SPIFFE.
Builds and parses AS2 protocol messages with compression, signing, encryption, and MDN (Message Disposition Notification) handling for secure B2B file exchange.
Generates one-time passwords (TOTP codes) from a shared secret key, available as a command-line tool and Python API.
Install it if you need to generate one-time passwords in Python or from the command line.
Provides SHA-3, SHAKE, and Keccak hash functions for Python 2.7 through 3.5, with a PEP 247 compatible interface that monkey-patches hashlib.
Provides hashing and signing operations for StarkNet messages via a Python wrapper around the crypto-cpp C++ library.
However, verify the license terms before use, and be aware that the small community footprint (3 stars) means limited third-party documentation or troubleshooting…
Encrypts and decrypts data using Elliptic Curve Integrated Encryption Scheme (ECIES) with support for secp256k1, x25519, and ed25519 curves.
Install it if you need ECIES encryption with secp256k1 or curve25519 in Python—particularly for cryptocurrency or blockchain applications.
A low-level Bitcoin library providing tools to create and parse transactions (including segwit and taproot), manage keys and addresses, and work with scripts and block data.
However, the description explicitly states it is not meant for production yet, so avoid it for applications handling real funds or requiring API stability guarantees.
Python 3 wrapper for the liboqs C library, providing post-quantum cryptographic algorithms including key encapsulation and digital signatures.
However, do not use for production security-critical systems yet—the documentation explicitly states this is for prototyping, and the security of the underlying…
Provides Python message classes for EIP-712 typed structured data hashing and signing in Ethereum, enabling you to define domain-specific message types and sign them with eth-account.
Implements EIP-4361 Sign-In with Ethereum for parsing, verifying, and serializing authentication messages signed with Ethereum private keys.
Install it if you need Ethereum-based authentication in a Python application.
Validates and inspects Windows Authenticode digital signatures embedded in or attached to executable files, MSI installers, and catalog files to verify software authenticity and integrity.