Technology
Purpose-built libraries for high-performance certificate management and system-native cryptography.
Synta Library Suite
High-performance ASN.1 parsing, X.509 certificate management, and post-quantum cryptography.
ASN.1 Codec
DER, BER, and CER encoding rules with type-safe derive macros and zero-copy parsing. Parses X.509 certificates in under 0.5 µs.
X.509 Certificates
RFC 5280 certificate parsing, building, and manipulation. Fluent builder APIs for certificates, CRLs, CSRs, OCSP responses, and attribute certificates.
Certificate Chain Verification
RFC 5280 path validation with name constraint enforcement, OCSP revocation checking, and CA/Browser Forum Baseline Requirements compliance.
Post-Quantum Cryptography
ML-DSA-44/65/87 (FIPS 204) standalone signatures and 18 composite ML-DSA algorithm variants for hybrid post-quantum certificate issuance.
Merkle Tree Certificates
Full MTC implementation — tree root computation, inclusion proof generation and verification, issuance log building, and cosigner support.
Python Bindings
Complete certificate, CRL, OCSP, CMS, and chain verification API accessible from Python. Stable ABI for Python 3.8 and later.
native-ossl
Safe, idiomatic access to system-installed OpenSSL — no vendored code, no reimplementation.
System OpenSSL Integration
Discovers and links against the system-installed OpenSSL (3.0.7+, 4.x) via pkg-config. Leverages your distribution's security updates and FIPS-validated modules.
Full Cryptographic Coverage
Digests, ciphers, AEAD, MACs, asymmetric keys, key derivation, and KEM operations through OpenSSL's EVP API with safe memory management.
TLS Stack
Complete TLS client and server support with session management, hostname verification, client certificate authentication, and FIPS mode detection.
Version-Aware Compilation
Automatic detection of OpenSSL version and available algorithms at build time. No manual feature flags — capabilities are discovered from the system.
Post-Quantum Algorithms
ML-DSA, ML-KEM, and SLH-DSA support through OpenSSL's native providers. Algorithm availability is detected automatically from the installed version.
How They Fit Together
A layered architecture where each component has a clear responsibility.
Synta
Provides the data model — ASN.1 parsing, X.509 certificate construction, chain verification, and post-quantum signature formats.
native-ossl
Supplies cryptographic operations — signing, verification, key generation, TLS, and KEM — through the system-installed OpenSSL.
Akāmu ACME Framework
Orchestrates both into a complete Certificate Authority — protocol handling, challenge validation, certificate issuance, and cluster replication.