This is a new extension, using Bouncy Castle, rounding out gaps in our existing crypto support, intended to replace the argon2 extension and also provide a whole new range of useful crypto functionality, including Post-quantum!
This is my first draft, looking for constructive feedback on the API design before publishing as a snapshot
Lucee Extension for Cryptography
check out the tests for working examples
12 Likes
1.0.0.1-SNAPSHOT published
Lucee Extension for Cryptography
Requires Lucee 7.0.3.0 or newer
2 Likes
philsw
April 5, 2026, 2:27pm
3
oh would this help with implementing passkeys without having to do it all in pure java?
if you doing coldbox this prob helps FORGEBOX: cbsecurity-passkeys , if not may you get some inspiration
I’ve added the CBOR / COSE primitives need to implement passkeys in cfml
1.0.0.1-SNAPSHOT
# Changelog
## [1.0.0.1-SNAPSHOT] - 2026-04-13
- CBOR encode/decode functions (CborEncode, CborDecode, CborToJson, JsonToCbor)
- COSE key conversion functions (KeyToCose, CoseToKey) for WebAuthn/Passkey credential handling
- Extension logo
### Fixed
- CoseToKey now always returns a struct with 'public' key (and 'private' when present)
- Ed25519 PKCS#8 private key wrapping had incorrect ASN.1 SEQUENCE length
- PEM parsing of EC private keys without embedded public key info
- Keystore tests no longer leave artifacts in the repo
## [1.0.0.0-SNAPSHOT] - 2026-04-07
- Initial release with cryptographic functions for Lucee
- Key generation: GenerateKeyPair (RSA, EC, Ed25519, Kyber)
- Hashing: Argon2, BCrypt, SCrypt, Blake2b/Blake3
show original
The Extension functions are now all up on Lucee Docs
4 Likes