mundane
A Rust cryptography library backed by BoringSSL that prioritizes misuse resistance, ergonomics, and performance.
What is mundane?
Mundane is a Rust cryptography library that provides secure cryptographic operations through a carefully designed API backed by Google's BoringSSL. It solves the problem of cryptographic misuse by making common errors difficult while maintaining good performance and developer ergonomics.
Rust developers who need cryptographic functionality in their applications, particularly those prioritizing security and wanting to avoid common cryptographic pitfalls.
Developers choose Mundane because it prioritizes security through misuse-resistant API design while providing the performance benefits of BoringSSL and the ergonomics of a well-designed Rust library.
Overview
Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).
Use Cases
Best For
- Adding cryptographic operations to Rust applications safely
- Projects requiring BoringSSL-backed cryptography in Rust
- Teams wanting to minimize cryptographic implementation errors
- Applications needing production-grade cryptographic primitives
- Security-focused Rust projects that value misuse-resistant APIs
- Integrating cryptography with a Rust-first, ergonomic interface
Not Ideal For
- Projects targeting Windows or requiring cross-compilation due to incomplete Windows support and no cross-compilation
- Applications prioritizing minimal dependencies because of BoringSSL's heavy build requirements (CMake, Perl, Go, etc.)
- Teams preferring pure Rust solutions without C/C++ backends, as Mundane relies on BoringSSL
Pros & Cons
Pros
Designed to prevent common cryptographic errors through careful API design, aligning with its security-first philosophy.
Provides a developer-friendly API that follows Rust conventions, making it intuitive for Rust programmers.
Leverages BoringSSL's optimized implementations for efficient cryptographic operations.
Uses custom symbol prefixes to avoid conflicts when multiple versions are in the same dependency graph.
Cons
Requires multiple build tools like CMake, Perl, and Go, which complicates setup compared to pure Rust crates.
Only fully supports Linux and Mac, with Windows support under development and no cross-compilation, restricting deployment options.
Vendors BoringSSL, increasing binary size and build time, which may not suit resource-constrained applications.
Frequently Asked Questions
Related Projects
rustlsA modern TLS library in Rust
BLAKE3the official Rust and C implementations of the BLAKE3 cryptographic hash function
OckamOrchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
ringAn experiment.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.