cargo / base16ct

base16ct

cargo

Pure Rust implementation of Base16 a.k.a hexadecimal (RFC 4648) which avoids any usages of data-dependent branches/LUTs and thereby provides portable "best effort" constant-time operation and embedded-friendly no_std support

1 audit github.com/RustCrypto/formats

Audits

PE Patrick Elsen 2026-05-27

base16ct@0.2.0 · 2 findings

base16ct 0.2.0 is the RustCrypto constant-time hex codec (RFC 4648 Base16): branchless sign-mask decode_nibble/encode_nibble over i16, no data-dependent branches. Four from_utf8_unchecked blocks on encoder output (ASCII-only by construction). Two low-severity quality findings: no SAFETY comments on the unsafe blocks, and thin test coverage for a constant-time crypto-adjacent parser.

has-binarieshas-build-exechas-fuzz-testshas-install-exechas-integration-testshas-property-testshas-unit-testsimpl-algorithmimpl-concurrencyimpl-cryptoimpl-datastructureimpl-interpreterimpl-jitimpl-parserimpl-protocolis-benignparser-impl-correctparser-impl-safeparser-impl-testedunsafe-documentedunsafe-minimalunsafe-safeunsafe-testeduses-concurrencyuses-cryptouses-environmentuses-execuses-filesystemuses-interpreteruses-jituses-networkuses-unsafe