(Every part of this crate was written by a human being.)

Philbin is a Rust library implementing the AEGIS algorithm[^1] for symmetric-key encryption which was one of the winners of the CAESAR Competition. AEGIS is significantly faster and more secure than other popular AEAD algorithms (AES-GCM and ChaCha20-Poly1305) on CPUs with AES hardware acceleration. Note that effectively all desktop and mobile CPUs manufactured since ~2014 support AES hardware acceleration.

[^1]: Specifically, Philbin implements AEGIS according to RFC 10032.

Philbin is the safest (and fastest) AEGIS implementation that the maintainers know of.[^2] For safety, it contains a total of two lines of code in unsafe blocks encapsulated by safe abstractions and guarded by both compile-time and runtime correctness checks. For speed, it uses runtime CPU detection to dispatch to the best available SIMD implementation.

[^2]: Philbin contains (many) SIMD implementations for x86-64 and aarch64 architectures. Other architectures and CPUs without AES hardware support use a software-only fallback implementation. Philbin is fastest on the listed architectures.

The crate is thoroughly tested and fuzzed. It is continuously tested for constant-time operation (to prevent timing attacks) using a custom-built Test Vector Leakage Assessment (TVLA) harness.

More details are available in the crate's documentation.

Benchmarks

Contributing

The source code in philbin was written by hand by a professional software engineer with decades of experience. No AI-authored code, text or images are included.

The philbin project rejects all contributions containing AI content. There are no exceptions.