LibStronghold
Cross-Platform Cryptography Library
A unified cryptographic API for Java and TypeScript with 50+ algorithms including ML-KEM, ML-DSA, SLH-DSA, X-Wing, and Classic McEliece. Supports FIPS 140-3 and CNSA 2.0 compliance profiles with automatic algorithm selection.
50+ Algorithms
Post-Quantum
Anystorage4j
Async Reactive Storage Abstraction
A unified, pluggable storage interface for Java 21+ with multi-tier caching, content processing pipelines, and multi-storage coordination. Supports Filesystem, S3, SMB, SFTP with transparent encryption and stale-while-revalidate caching.
Multi-Storage
Reactive Streams
Capsule
Compact Single-Value Encryption Format
A self-describing encryption format with composable chain syntax. Wraps data through layered cryptographic operations for column-level encryption, API payloads, and key encapsulation with built-in expiry and binding context.
Value Encryption
Chain Syntax
SEQ
Streaming Encrypted File Format
Secure Extensible Qube — a chunked binary format for streaming encryption with onion-layer cryptographic stacking, random access by byte position, Merkle tree verification, and multi-file archive support. No buffering, bounded memory.
Streaming I/O
Random Access
CKS
Modern Encrypted Key Store
A PKCS#12 replacement designed for post-quantum cryptography. Supports FIDO2, PIV smart cards, passwords, keyfiles, and recovery key unlock methods. Cascade encryption with up to 4 AEAD layers, CBOR encoding, and hybrid key support.
FIDO2 / PIV
Cascade Encryption