cryptologik

About the Project

CryptoLogik is a comprehensive applied cryptography toolkit designed for both practical use and education. Cryptography — the science of securing information through mathematical algorithms — underpins virtually every aspect of digital security: encrypted communications (TLS/SSL), secure authentication, digital signatures, data protection at rest, and blockchain technologies. The toolkit provides three main capabilities: Secure Cryptographic Primitives offers high-level, secure-by-default implementations of common cryptographic operations — symmetric encryption (AES-256-GCM), asymmetric encryption (RSA, Ed25519), hashing (SHA-256, SHA-3, Argon2 for passwords), digital signatures, and key derivation functions. These implementations follow current best practices, use secure defaults, and include protections against common implementation pitfalls like timing attacks and nonce reuse. TLS Configuration Auditor analyzes the TLS/SSL configuration of web servers, identifying weak cipher suites, outdated protocol versions (TLS 1.0, 1.1), certificate issues (expiration, weak keys, incomplete chains), and compliance with industry standards (PCI-DSS, HIPAA). It produces actionable reports with specific configuration changes needed to achieve an 'A+' security rating. Cryptographic Education Module provides interactive, documented examples that explain the principles behind each algorithm — not just how to use them, but why they work, what security properties they provide, and how common mistakes can undermine them. This includes visual demonstrations of concepts like key exchange (Diffie-Hellman), digital signatures, and hash collisions. The entire toolkit is built with the philosophy that cryptographic tools should be impossible to misuse — secure defaults, no deprecated algorithms, and clear error messages when unsafe operations are attempted.

Why This Matters

Cryptography is simultaneously the most important and most commonly misimplemented security technology. High-profile failures include using ECB mode for encryption (the 'penguin problem'), storing passwords with MD5 instead of a proper key derivation function, reusing nonces in AES-GCM, and implementing custom cryptographic protocols without proper peer review. Each of these mistakes has led to real-world data breaches affecting millions of users. The challenge is that cryptography requires deep mathematical knowledge to implement correctly, but most developers who need to use cryptography are not cryptographers. Standard libraries expose low-level primitives that are easy to misuse — choosing the wrong mode of operation, generating weak random numbers, or building protocols that are vulnerable to replay attacks. This toolkit addresses the gap by providing high-level abstractions that make correct usage the default and incorrect usage difficult. For practitioners who want to deepen their understanding, the educational modules explain the 'why' behind each cryptographic choice, building intuition that helps them make better security decisions throughout their careers.

Step-by-Step Guide

1. Install the toolkit with 'pip install cryptologik'. The package has minimal dependencies (only the well-audited 'cryptography' library and libsodium bindings) and supports Python 3.8+. For Rust integration, use the cryptologik-rs crate.
2. Use the high-level modules for common cryptographic operations. For example: 'from cryptologik import encrypt, decrypt, hash_password, verify_password, sign, verify'. Each function uses secure defaults (AES-256-GCM for encryption, Argon2id for password hashing, Ed25519 for signatures) and handles key management, nonce generation, and error cases automatically.
3. Run the TLS auditor against your servers with 'cryptologik audit-tls example.com'. The auditor tests all supported protocol versions and cipher suites, checks certificate validity and chain completeness, and produces a detailed report with a letter grade (A+ to F) and specific recommendations for improving your TLS configuration.
4. Explore the interactive educational documentation with 'cryptologik learn'. This launches a local web interface with guided lessons on symmetric encryption, asymmetric cryptography, hash functions, digital signatures, key exchange protocols, and common pitfalls. Each lesson includes runnable code examples and visualizations of how algorithms work internally.

Technologies Used