WASI Cryptography APIs

This repository maintains cryptography API specifications for the WASI Subgroup of the WebAssembly Community Group.

Please refer to those groups' documentation for more information on their processes, goals, scope, and deliverables.

API status

The WASI Preview 1 (WASI-core) API, defined by the WITX files in witx/witx-0.10, is stable and production ready. It will not receive breaking changes.

The WIT API in wit/ targets WASI 0.3+. It is a moving target and is not yet stable.

Implementations

• Wasmedge ships with a wasi-crypto plugin
• A reference implementation of the host functions
• An adapter for Wasmtime
• Example bindings for AssemblyScript and Rust
• A BoringSSL-compatible API for Rust
• Fast JWT tokens for WebAssembly for Rust (with the wasi-crypto feature).

Specification

• High-level goals
• Security design document
• WASI Preview 1 specification
• Interface definitions:
  • common types and functions (witx, doc)
  • symmetric operations (witx, doc)
  • common types and functions for asymmetric operations (witx, doc)
  • signatures (witx, doc)
  • key exchange (witx, doc)
  • external secrets (witx, doc)
• Concise API overview
• WASI 0.3+ WIT API

Interested parties are welcome to join the working group meeting every 2 weeks on Tuesday 17:00 UTC.

• Google Meet link
• Google calendar