Pure Go GOST cryptographic functions library (mirror of

go get


Pure Go GOST cryptographic functions library.

GOST is GOvernment STandard of Russian Federation (and Soviet Union).

* GOST 28147-89 (RFC 5830) block cipher with ECB, CNT (CTR), CFB, MAC
  CBC (RFC 4357) modes of operation
* various 28147-89-related S-boxes included
* GOST R 34.11-94 hash function (RFC 5831)
* GOST R 34.11-2012 Стрибог (Streebog) hash function (RFC 6986)
* GOST R 34.10-2001 (RFC 5832) public key signature function
* GOST R 34.10-2012 (RFC 7091) public key signature function
* various 34.10 curve parameters included
* VKO GOST R 34.10-2001 key agreement function (RFC 4357)
* VKO GOST R 34.10-2012 key agreement function (RFC 7836)
* GOST R 34.12-2015 128-bit block cipher Кузнечик (Kuznechik) (RFC 7801)
* GOST R 34.13-2015 padding methods

Known problems:

* intermediate calculation values are not zeroed
* 34.10 is not time constant and slow

GoGOST is free software: see the file COPYING.LESSER for copying conditions.

GoGOST'es home page is:
Also available as I2P service:
You can read about GOST algorithms more:

Please send questions, bug reports and patches to
mailing list. Announcements also go to this mailing list.

Development Git source code repository currently is located here: