[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-6484":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":16,"subscribersCount":16,"size":16,"stars1d":17,"stars7d":18,"stars30d":19,"stars90d":16,"forks30d":16,"starsTrendScore":20,"compositeScore":21,"rankGlobal":10,"rankLanguage":10,"license":22,"archived":23,"fork":23,"defaultBranch":24,"hasWiki":25,"hasPages":25,"topics":26,"createdAt":10,"pushedAt":10,"updatedAt":40,"readmeContent":41,"aiSummary":42,"trendingCount":16,"starSnapshotCount":16,"syncStatus":17,"lastSyncTime":43,"discoverSource":44},6484,"GmSSL","guanzhi\u002FGmSSL","guanzhi","支持国密SM2\u002FSM3\u002FSM4\u002FSM9\u002FSSL的密码工具箱","http:\u002F\u002Fgmssl.org",null,"C",6065,1820,213,388,0,2,9,33,11,77.58,"Apache License 2.0",false,"master",true,[27,28,29,30,31,32,33,34,35,36,37,38,39],"crypto","encryption","go","java","javascript","pairing","sm2","sm3","sm4","sm9","ssl","tls","zuc","2026-06-12 04:00:28","# GmSSL\n\n[![CMake-Ubuntu\u002FmacOS](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Fworkflows\u002FCMake\u002Fbadge.svg)](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Factions\u002Fworkflows\u002Fcmake.yml)\n[![CMake-Windows](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Fworkflows\u002FCMake-windows\u002Fbadge.svg)](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Factions\u002Fworkflows\u002Fcmake-windows.yml)\n[![CMake-Android](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Factions\u002Fworkflows\u002Fandroid-ci.yml\u002Fbadge.svg)](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Factions\u002Fworkflows\u002Fandroid-ci.yml)\n[![CMake-iOS](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Factions\u002Fworkflows\u002Fios.yml\u002Fbadge.svg)](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Factions\u002Fworkflows\u002Fios.yml)\n\nGmSSL是由北京大学自主开发的国产商用密码开源库，实现了对国密算法、标准和安全通信协议的全面功能覆盖，支持包括移动端在内的主流操作系统和处理器，支持密码钥匙、密码卡等典型国产密码硬件，提供功能丰富的命令行工具及多种编译语言编程接口。\n\n\n## 主要特性\n\n* 超轻量：GmSSL 3 大幅度降低了内存需求和二进制代码体积，不依赖动态内存，可以用于无操作系统的低功耗嵌入式环境(MCU、SOC等)，开发者也可以更容易地将国密算法和SSL协议嵌入到现有的项目中。\n* 更合规：GmSSL 3 可以配置为仅包含国密算法和国密协议(TLCP协议)，依赖GmSSL 的密码应用更容易满足密码产品型号检测的要求，避免由于混杂非国密算法、不安全算法等导致的安全问题和合规问题。\n* 更安全：TLS 1.3在安全性和通信延迟上相对之前的TLS协议有巨大的提升，GmSSL 3 支持TLS 1.3协议和RFC 8998的国密套件。GmSSL 3 默认支持密钥的加密保护，提升了密码算法的抗侧信道攻击能力。\n* 跨平台：GmSSL 3 更容易跨平台，构建系统不再依赖Perl，默认的CMake构建系统可以容易地和Visual Studio、Android NDK等默认编译工具配合使用，开发者也可以手工编写Makefile在特殊环境中编译、剪裁。\n\n## 下载\n\n* GmSSL的主分支版本为 [GmSSL-3.1.1](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Freleases\u002Ftag\u002Fv3.1.1)，主要增加跨平台特性，特别是对Windows\u002FVisual Studio的支持，Windows、Android、iOS平台的开发者需要使用该版本。\n\n## 编译与安装\n\nGmSSL 3 采用了cmake构建系统。下载源代码后将其解压缩，进入源码目录，执行：\n\n```bash\nmkdir build\ncd build\ncmake ..\nmake\nmake test\nsudo make install\n```\n\n在`make install`完成后，GmSSL会在默认安装目录中安装`gmssl`命令行工具，在头文件目录中创建`gmssl`目录，并且在库目录中安装`libgmssl.a`、`libgmssl.so`等库文件。\n\n### Visual Studio环境编译\n\n在Visual Studio命令提示符下执行：\n\n```bash\nmkdir build\ncd build\ncmake .. -G \"NMake Makefiles\" -DWIN32=ON\nnmake\n```\n\n## 主要功能\n\n### 密码算法\n\n* 分组密码：SM4 (CBC\u002FCTR\u002FGCM\u002FECB\u002FCFB\u002FOFB\u002FCCM\u002FXTS), AES (CBC\u002FCTR\u002FGCM)\n* 序列密码：ZUC\u002FZUC-256, ChaCha20\n* 哈希函数: SM3, SHA-1, SHA-224\u002F256\u002F384\u002F512\n* 公钥密码：SM2加密\u002F签名, SM9加密\u002F签名\n* 后量子密码：LMS\u002FHSS签名\n* MAC算法：HMAC, GHASH, CBC-MAC\n* 密钥导出函数：PBKDF2、HKDF\n* 随机数生成器：Intel RDRAND, HASH_DRBG (NIST.SP.800-90A)\n\n### 证书和数字信封\n\n* 数字证书：X.509证书, CRL证书注销列表, CSR (PKCS #10) 证书签名请求\n* 私钥加密：基于SM4\u002FSM3口令加密的PEM格式私钥 (PKCS #8)\n* 数字信封：SM2密码消息 (GM\u002FT 0010-2012)\n\n### SSL协议\n\n* TLCP 1.1，支持密码套`TLS_ECC_SM4_CBC_SM3 {0xE0,0x13}` (GB\u002FT 38636-2020、GM\u002FT 0024-2014)\n* TLS 1.2，支持密码套件`TLS_ECDHE_SM4_CBC_SM3 {0xE0,0x11}` (GB\u002FT 38636-2020、GM\u002FT 0024-2014)\n* TLS 1.3，支持密码套件`TLS_SM4_GCM_SM3 {0x00,0xC6}`  (RFC 8998)\n\n### 多语言接口\n\nGmSSL通过子项目提供多种多种编程语言绑定\n\n * [GmSSL-Java](https:\u002F\u002Fgithub.com\u002FGmSSL\u002FGmSSL-Java) 以JNI方式实现的Java语言绑定\n * [GmSSL-PHP](https:\u002F\u002Fgithub.com\u002FGmSSL\u002FGmSSL-PHP) 以PHP扩展方式实现的PHP语言绑定\n * [GmSSL-Go](https:\u002F\u002Fgithub.com\u002FGmSSL\u002FGmSSL-Go) 以CGO方式实现的Go语言绑定\n * [GmSSL-Python](https:\u002F\u002Fgithub.com\u002FGmSSL\u002FGmSSL-Python) 以ctypes方式实现的Python语言绑定\n * [GmSSL-JS](https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL-JS) 纯JavaScript实现的国密算法库\n\n### 支持国密硬件\n\nGmSSL内置支持国密SDF密码硬件（通常为PCI-E接口的密码卡或者服务器密码机）和SKF密码硬件（通常为小型USB密码钥匙）。经过测试的密码产品型号包括：\n\n* to be added.\n\n开发者也可以用GmSSL的子项目SoftSDF(https:\u002F\u002Fgithub.com\u002FGmSSL\u002FSoftSDF) ，用功能等效（但是不具备密码硬件密钥保护等价的安全性）的软件SDF模块来进行开发和测试，正式部署的时候再替换为硬件SDF。\n\n### OpenSSL兼容性\n\nGmSSL 3.0版本重写了所有的代码并改变了原有API，因此当前GmSSL版本和OpenSSL不兼容，无法直接用GmSSL替换OpenSSL进行编译。GmSSL提供了子项目 OpenSSL-Compatibility-Layer (https:\u002F\u002Fgithub.com\u002FGmSSL\u002FOpenSSL-Compatibility-Layer) 提供了OpenSSL的兼容层，Nginx等应用可以通过OpenSSL-Compatibility-Layer调用GmSSL功能。经过测试目前兼容层可以兼容Nginx 1.16 ~ 1.25 之间的版本。\n\n## Benchmark\n\n性能测试结果是在单核单线程且未修改处理器默认配置下5次测试中取最好效果。由于未关闭睿频或进行大小核设置，这个成绩通常会略高于多核多线程中每核心的平均成绩。\n\n```\ncmake .. -DENABLE_TEST_SPEED=ON\nmake\n.\u002Fbin\u002Fsm4_cltest; .\u002Fbin\u002Fsm4test; .\u002Fbin\u002Fsm3test; .\u002Fbin\u002Fsm2_signtest; .\u002Fbin\u002Fsm2_enctest; .\u002Fbin\u002Fsm9test; .\u002Fbin\u002Fzuctest\n```\n\nMacBook Air M2 2022. Apple M2. 16 GB. Tahoe 26.1.\n```\nspeed_sm4_cl_ctr32_encrypt_blocks: 15340.364334-MiB per seconds\n```\n\nMacBook Pro 13-inch 2018: 2.7 GHz Quad-Core Intel Core i7, Intel  Iris Plus Graphics 655. 8 GB 2133 HMz LPDDR3. macOS Sonoma 14.3.\n\n```\nspeed_sm4_encrypt: 164.826108 MiB per second\nspeed_sm4_encrypt_blocks: 163.120495 MiB per second\nspeed_sm4_cbc_encrypt_blocks: 156.870435 MiB per second\nspeed_sm4_cbc_decrypt_blocks: 174.701097 MiB per second\nspeed_sm4_ctr_encrypt_blocks: 178.457901 MiB per second\nspeed_sm4_ctr32_encrypt_blocks: 185.007458 MiB per second\nspeed_zuc_generate_keystream: 337.403260-MiB per second\nspeed_zuc_encrypt: 356.315696-MiB per second\ntest_sm3_speed: 273.551034 MiB per second\nsm2_sign_ctx speed (ENABLE_SM2_AMD64): 4096 signs time 0.036916 seconds, 110954.599632 signs per second\nsm2_sign_ctx speed : 4096 signs time 0.236611 seconds, 17311.114023 signs per second\ntest_sm2_encrypt_ctx_speed (ENABLE_SM2_AMD64): 17879.592122 encryptions per second\ntest_sm2_encrypt_ctx_speed: 1869.314131 encryptions per second\ntest_sm9_z256_pairing_speed: 173 pairings per second\n```\n\nMacBook Air M2 2022. Apple M2. 16 GB. Sonoma 14.5.\n\n```\nspeed_sm4_encrypt: 143.180578 MiB per second\nspeed_sm4_encrypt_blocks: 190.928509 MiB per second\nspeed_sm4_cbc_encrypt_blocks: 148.519447 MiB per second\nspeed_sm4_cbc_decrypt_blocks: 187.305378 MiB per second\nspeed_sm4_ctr_encrypt_blocks: 191.195450 MiB per second\nspeed_sm4_ctr32_encrypt_blocks: 191.522725 MiB per second\nspeed_zuc_generate_keystream: 344.604781-MiB per second\nspeed_zuc_encrypt: 344.723575-MiB per second\ntest_sm3_speed: 327.298762 MiB per second\nsm2_sign_ctx speed : 4096 signs time 0.290709 seconds, 14089.691066 signs per second\ntest_sm2_encrypt_ctx_speed: 1518.575861 encryptions per second\ntest_sm9_z256_pairing_speed: 141 pairings per seconds\n```\n\n## ChangeLog\n\n自从3.1.1版本以来\n\n* 增加了CRYSTALS-Kyber后量子密钥封装算法及命令行选项\n* 增加了基于SM3的SPHINCS+后量子哈希签名算法(无状态)及命令行选项\n* 增加了基于SM3的XMSS后量子哈希签名算法(有状态)及命令行选项\n* 增加了基于SM3的LMS\u002FHSS后量子哈希签名算法(有状态)及命令行选项\n* 提升了全部国密算法的性能，并在`tests`测试程序中增加了国密算法的性能测试\n* 增加了SM4 ECB\u002FCFB\u002FOFB\u002FCCM\u002FXTS加密模式，带SM3-HMAC的SM4 CBC\u002FCTR模式，并且在`gmssl`命令行工具中增加了所有SM4加密模式的选项\n* 在`gmssl`命令行中增加了GHASH计算的选项\n* 增加了`sdftest`正确性和兼容性测试命令，以独立子项目的形式提供了SDF的软件实现SoftSDF\n* 移除了RC4, MD5等已被攻破的密码算法\n\n## 开发者们\n\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fguanzhi\u002FGmSSL\u002Fgraphs\u002Fcontributors\">\n  \u003Cimg src=\"https:\u002F\u002Fcontrib.rocks\u002Fimage?repo=guanzhi\u002FGmSSL\" \u002F>\n\u003C\u002Fa>\n\n## Stargazers over time\n\n[![Stargazers over time](https:\u002F\u002Fstarchart.cc\u002Fguanzhi\u002FGmSSL.svg)](https:\u002F\u002Fstarchart.cc\u002Fguanzhi\u002FGmSSL)\n\n","GmSSL是一个支持国密SM2\u002FSM3\u002FSM4\u002FSM9及SSL\u002FTLS协议的密码工具箱。它提供了包括分组密码、序列密码、哈希函数、公钥密码等在内的多种加密算法，以及数字证书和SSL协议的支持。GmSSL特别适合需要遵循中国国家标准的安全通信场景，如政府机构、金融机构的数据加密传输。其轻量级设计使其能够应用于资源受限的嵌入式环境，并且通过支持多语言接口（C, Java, Go, Python, JavaScript, PHP）和跨平台编译选项，极大地方便了开发者集成到不同类型的项目中。此外，GmSSL还支持与国产密码硬件设备对接，进一步增强了其实用性和安全性。","2026-06-11 03:07:13","top_language"]