Show HN: Rscrypto, pure-Rust crypto with industry leading public benches

A blazing-fast security toolkit drops, and the comments instantly turn into an interrogation

TLDR: rscrypto says it offers one fast, portable security toolkit instead of making developers stitch together lots of separate parts. Commenters immediately pushed past the speed claims and grilled the creator on safety, credibility, and whether the polished write-up felt a little too AI-made to trust at first glance.

A new project called rscrypto arrived waving a very big flag: one Rust-based security library to do nearly everything, from passwords to signatures, while staying small, portable, and apparently very, very fast. The creator says the whole point is avoiding the usual mess of different tools for different devices, plus less dependence on outside system libraries. In plain English: one box of security parts instead of a junk drawer full of mismatched pieces.

But the real fireworks were in the comments, where the crowd did what the internet does best: turn a product launch into a live cross-examination. One skeptical commenter zoomed in on the phrase “constant-time” like a detective spotting a typo in a ransom note, basically asking, “Cool claim — so which parts are not safe in that special timing-related way?” Another wanted the full backstory: where did the speed gains come from, why build a new library at all, and why not help existing projects instead? Ouch.

Then came the most deliciously brutal jab: the readme has “strong LLM smells.” Translation for normal people: it reads like it may have been polished by AI, and that instantly put the community into side-eye mode. The subtext was clear: if the sales pitch feels machine-made, people will start asking whether the code is too. So yes, the benchmark bragging got attention — but the real show was the classic open-source drama of speed vs trust, bold claims vs receipts, and builders vs skeptics.

Key Points

  • rscrypto is presented as a single pure-Rust cryptography crate covering primitives such as RSA, Ed25519, X25519, AEADs, hashes, KDFs, password hashing, and CRCs.
  • The crate supports feature-based configuration, including single-primitive leaf features, grouped subsets, or a full stack, with the portable Rust backend always included.
  • Published benchmarks in the article claim a 1.61x fastest-external geomean on Linux CI and a 1.25x fastest-external geomean on Apple Silicon MBP M1 runs.
  • RSA support is emphasized with DER import/export, RSA-PSS, PKCS#1 v1.5 signatures and encryption, OAEP, key generation, and profile mapping for X.509, JWT, COSE, and TLS.
  • The article states that rscrypto includes hardware dispatch, no_std and WASM support, and security-oriented controls such as constant-time equality, zeroized secrets, fuzzing, Miri, and cross-CPU CI.

Hottest takes

That sounds suspiciously incomplete to me. — sevenoftwelve
The readme has strong LLM smells. — dave_universetf
The supply chain risk... was too high. — LoadingALIAS
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.