Welcome to the official InSiTo Library website. The InSiTo-Library is an open source cryptographic library written in C++, with focus on

• side channel resistance
• a convenient API
• support of Card Verifiable Certificates (CVCs)^[1] (see also the ePassport Interoperability Page)

In 2007, the german Federal Office for Information Security (BSI) contracted out this project to FlexSecure GmbH (www.flexsecure.de). It was completed in May 2008. The library was created on the basis of the Botan library, version 1.7.2. A number of features of the InSiTo Library was already merged back into the Botan Library.
Click here to download a tar.gz file containing the library source code of the original InSito Library. Also, an architectural documentation and a user manual are available here are available.

FlexSecure GmbH also offers support for InSiTo Library and Botan.

List of algorithms

The InSiTo Library supports the following algorithms:

Public Key

• RSA (PKCS1v15, RSA-OAEP, RSA-PSS)
• ECDSA
• Diffie-Hellmann
• ECKAEG^[2]

Block Ciphers (in modes ECB, CBC, CFB, OFB, CTR)

• TripleDES
• AES

Message Digests

• SHA-1
• SHA-224
• SHA-256
• SHA-384
• SHA-512
• RIPEMD-160

Message authentication codes (MACs)

• HMCA
• CBC-MAC
• CMAC

Pseudo random number generators (RRNGs)

• SHA1-PRNG
• Blum-Blum-Schub (BBS)
• ANSI X9.31 (Appendix A.2.4)

---

^[1]Technical Guideline, Advanced Security Mechanisms for Machine Readable Travel Documents, Extended Access Control (EAC), Version 1.0.1, BSI 2006
^[2]] BSI Technical Guideline: Elliptic Curve Cryptography (ECC) based on ISO 15946. TR-03111, 2006