HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
Componolit
libsparkcrypto
Ada2019–2025
Componolit / libsparkcrypto · Archived

libsparkcrypto

A cryptographic library in SPARK 2014

Security & PrivacyLibraries & SDKs
Explore on GitHubRead Hacker News discussions
2Distinct people
11Mentions
0Explicit recommenders
29GitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

A cryptographic library in SPARK 2014

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:03:16 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year11 dated mentions

Observed mentions: 2019-07-25 05:32:42 UTC to 2025-03-05 06:51:56 UTC.

0123452019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 5 mentions; 0 submissions, 5 comments20192020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments2022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments20222023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2025

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC505
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC000
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC404
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC000
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC101
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC000
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC101

What Hacker News says

11 sources
touisteur·Mar 8, 2023
Yes, there are actually implementations of most standard stuff in Ada and SPARK (so with some level of proof) Interesting posts (and links): * https://blog.adacore.com/avoiding-vulnerabilities-in-crypto-... * https://blog.adacore.com/sparknacl-two-years-of-optimizing-c... * https://github.com/Componolit/libsparkcrypto Proof of constant-time execution is an interesting field, but as I understand very much less mature than the SPARK toolset. If anyone has a toolchain working over llvm to check and/or make code constant-time, I'm interested. I mean, if the standards people want to keep writing C, they can probably use Frama-C for the standard implementation...
In A Vulnerability in Implementations of SHA-3, Shake, EdDSA
johnisgood·Jul 25, 2021
> - You shouldn't try to implement something like SSL, or parse ASN.1, yourself. What would you recommend for compiling and decoding/encoding ASN.1 using Java? I tried OSS NOKALVA's ASN.1 for Java but constraint checking is non-existent or very limited. I am forced to implement it myself as it does not exist from what I gathered. If you know one that does constraint checking, that would be amazing. A quick search gave me this: https://github.com/yafred/asn1-tool/issues/13, so perhaps it does not seem so infeasible. > I think if someone in the early 2000s had thought "I don't like the look of OpenSSL and I don't think C is a good choice of language. I'm going to write my own implementation of the parts I need in (say) Ada" https://github.com/Componolit/libsparkcrypto might be of interest to some. It is written in Ada/SPARK.
In An Empirical Study of Vulnerabilities in Cryptographic Libraries
johnisgood·Jul 7, 2021
Whoops, I completely forgot about libsparkcrypto (https://github.com/Componolit/libsparkcrypto) which is a "formally verified implementation of several widely used cryptographic algorithms using the SPARK 2014 programming language and toolset. For the complete library proofs of the absence of run-time errors like type range violations, division by zero and numerical overflows are available. Some of its subprograms include proofs of partial correctness.". Features: * AES-128, AES-192, AES-256 * AES-CBC (all supported AES modes) * SHA-1 * HMAC-SHA1 * SHA-256, SHA-384, SHA-512 * HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512 * PRF-HMAC-SHA-256, PRF-HMAC-SHA-384, PRF-HMAC-SHA-512 * RIPEMD-160 * HMAC-RIPEMD-160 * ECDSA, ECGDSA It is pretty awesome. :)
In Linux Rust Support
johnisgood·Nov 3, 2019
More links: https://www.adacore.com/uploads/books/pdf/AdaCore-Tech-Cyber... https://www.adacore.com/gems -> https://blog.adacore.com/ https://web.archive.org/web/20190709111613/http://www.drdobb... https://github.com/Componolit/libsparkcrypto https://people.cs.kuleuven.be/~dirk.craeynest/ada-belgium/ev... https://www.adacore.com/uploads/books/pdf/ePDF-Implementatio... http://www.loper-os.org/?p=1913 https://github.com/ohenley/awesome-ada
In The AdaOS Operating System (2000)
johnisgood·Sep 10, 2019
I would recommend https://www.adacore.com/uploads/books/pdf/ePDF-Implementatio... for more information regarding contracts. There are of course a LOT more, just fire up your preferred search engine and enjoy your findings. :) > SPARK builds on the strengths of Ada to provide even more guarantees statically rather than dynamically. As summarized in the following table, Ada provides strict syntax and strong typing at compile time plus dynamic checking of run-time errors and program contracts. SPARK allows such checking to be performed statically. In addition, it enforces the use of a safer language subset and detects data flow errors statically. Contract programming: - Ada: dynamic - SPARK: dynamic / static Run-time errors: - Ada: dynamic - SPARK: dynamic / static Data flow errors: - Ada: - - SPARK: static Strong typing: - Ada: static - SPA
Read the rest
RK: static Safer language subset: - Ada: - - SPARK: static Strict clear syntax: - Ada: static - SPARK: static --- Additionally, safe pointers in SPARK: https://blog.adacore.com/using-pointers-in-spark and https://arxiv.org/abs/1710.07047. --- Cryptographic library in SPARK 2014: https://github.com/Componolit/libsparkcrypto. > libsparkcrypto is a formally verified implementation of several widely used cryptographic algorithms using the SPARK 2014 programming language and toolset. For the complete library proofs of the absence of run-time errors like type range violations, division by zero and numerical overflows are available. Some of its subprograms include proofs of partial correctness. --- Ada/SPARK is excellent for real-time and safety-critical software: https://www.rcs.ei.tum.de/fileadmin/tueircs/www/becker/spark... to give you some ideas. It may be a bit outdated in some regards, though, for example: "Next version of SPARK 2014 under development (pointers!).". It is already done! :)
In Why Ada Is the Language You Want to Be Programming Your Systems With
johnisgood·Jul 25, 2019
> Signal uses standard cellular mobile numbers as identifiers This is a big no. Even Wire uses metadata but only requires an e-mail account. I would like to see Ricochet (https://ricochet.im/) picked up by someone. Tor hidden services have been improved with added features which Ricochet does not utilize. I skimmed through the codebase and I came across some issues, heck, even the design is a bit obsolete as we have better algorithms with better parameters. Regardless, the idea is great and this is definitely doable, even by modifying Ricochet's codebase. There is Cwtch (https://cwtch.im/) that extends Ricochet to support multi-party messaging. I did not dig deep into it, but it may use the same algorithms. Additionally, it uses a language with a GC. I think a Ricochet-like IM software written in Ada/SPARK using libsparkcrypto (https://gi
Read the rest
thub.com/Componolit/libsparkcrypto) would be ideal.
In PGP habits could be better

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.