NaCl.Core, a cryptography library for .NET

Introduction

NaCl.Core is a managed-only cryptography library for .NET which provides modern cryptographic primitives.

Currently supported:

Installation

Install the NaCl.Core NuGet package from the .NET CLI using:

dotnet add package NaCl.Core

or from the NuGet package manager:

Install-Package NaCl.Core

Or alternatively, you can add the NaCl.Core package from within Visual Studio's NuGet package manager.

Daily NuGet builds of the project are also available in the Azure Artifacts feed:

https://pkgs.dev.azure.com/idaviddesmet/NaCl.Core/_packaging/NaCl.Core-CI/nuget/v3/index.json

Usage

Symmetric Key Encryption

// Create the primitive (implements IDisposable for secure key cleanup)
using var aead = new ChaCha20Poly1305(key);

// Use the primitive to encrypt a plaintext
aead.Encrypt(nonce, plaintext, ciphertext, tag, aad);

// ... or to decrypt a ciphertext
aead.Decrypt(nonce, ciphertext, tag, plaintext, aad);

Note: All cipher classes (ChaCha20, XChaCha20, Salsa20, XSalsa20, ChaCha20Poly1305, XChaCha20Poly1305) implement IDisposable. Call Dispose() or use using statements to securely zero the key from memory when done.

MAC (Message Authentication Code)

// Use the primitive to compute a tag
Poly1305.ComputeMac(key, data, tag);

// ... or to verify a tag
Poly1305.VerifyMac(key, data, tag);

Test Coverage

• Includes the mandatory RFC test vectors.
• Project Wycheproof by members of Google Security Team, for testing against known attacks (when applicable).

Performance

Refer to the benchmarks for performance numbers.

Run the benchmarks using:

dotnet run -c Release --framework net9.0

dotnet run -c Release --framework net9.0 --filter "*ChaCha20IntrinsicsBenchmark*"

Learn More

• ChaCha, a variant of Salsa20 by Daniel J. Bernstein.
• The Poly1305-AES message-authentication code by Daniel J. Bernstein.
• ChaCha20 and Poly1305 for IETF Protocols RFC.
• Salsa20, also known as Snuffle 2005, uses the Salsa20 core to encrypt data.
• XSalsa20, an extended-nonce Salsa20 variant used in NaCl.
• XChaCha20-Poly1305, an extended-nonce ChaCha20-Poly1305 IETF variant.