React hooks and context provider for client-side cryptographic operations with zero boilerplate.
Getting started
The Crypto Service ecosystem
Package reference
Operational
pnpm add @sebastienrousseau/crypto-react
# or
npm install @sebastienrousseau/crypto-react
# or
yarn add @sebastienrousseau/crypto-react
^22.0.0 or >=24.0.0 (active and maintenance LTS releases)pnpm >=9 (recommended) or npm >=10>=5.0 (when compiling with TypeScript)import {
CryptoProvider,
useKeypair,
useEncrypt,
useHash,
useSignature,
} from "@sebastienrousseau/crypto-react";
function App() {
return (
<CryptoProvider defaultKey="deadbeef...64-hex-chars">
<MyComponent />
</CryptoProvider>
);
}
function MyComponent() {
const { generate, publicKey } = useKeypair("ed25519");
const { encrypt, decrypt } = useEncrypt();
const { hash, digest } = useHash("sha3-256");
const { sign, verify } = useSignature();
return (
<div>
<button onClick={() => generate()}>Generate Ed25519 Key Pair</button>
{publicKey && <code>{publicKey}</code>}
</div>
);
}
Crypto Service provides a complete cryptography stack across 14 specialized packages:
| Package | Role | Description |
|---|---|---|
@sebastienrousseau/crypto-api |
API Schemas | Shared TypeScript types and utilities for the Crypto Service Suite, defining the canonical API surface. |
@sebastienrousseau/crypto-cli |
Terminal CLI | An interactive command-line interface for cryptographic operations, supporting both legacy OpenPGP and modern post-quantum algorithms. |
@sebastienrousseau/crypto-edge |
Edge Runtime | Edge-runtime cryptographic operations using the Web Crypto API, optimized for Cloudflare Workers, Vercel Edge, and Deno. |
@sebastienrousseau/crypto-kms |
Cloud KMS | Unified Key Management Service interface for AWS KMS, GCP Cloud KMS, Azure Key Vault, and HashiCorp Vault. |
@sebastienrousseau/crypto-lib |
Core Library | A modern cryptographic library for TypeScript, with post-quantum support, zero unsafe dependencies, and 100% test coverage. |
@sebastienrousseau/crypto-middleware |
Middleware | Framework-agnostic cryptographic middleware for Express, Fastify, and Koa applications. |
@sebastienrousseau/crypto-prisma |
ORM Adapter | Transparent field-level encryption extension for Prisma Client, powered by AES-256-GCM. |
@sebastienrousseau/crypto-react (this package) |
React Hooks | React hooks and context provider for client-side cryptographic operations with zero boilerplate. |
@sebastienrousseau/crypto-sdk |
Client SDK | A zero-dependency, typed HTTP client for the Crypto Service REST API, with full post-quantum support. |
@sebastienrousseau/crypto-server |
HTTP API | A hardened Fastify REST API for cryptographic operations, with rate limiting, OpenAPI schemas, and post-quantum endpoints. |
@sebastienrousseau/crypto-testing |
Test Support | Deterministic keys, fast mocks, and test fixtures for crypto-lib |
@sebastienrousseau/crypto-typeorm |
ORM Adapter | TypeORM column-level encryption with a single decorator, powered by crypto-lib. |
@sebastienrousseau/crypto-vue |
Vue Composables | Vue 3 composables for client-side cryptography |
@sebastienrousseau/crypto-wasm |
Acceleration | WebAssembly performance accelerator for crypto-lib |
crypto-react provides React hooks for client-side cryptographic
operations. It wraps @sebastienrousseau/crypto-lib in a reactive
API with hooks for key generation, symmetric encryption, hashing,
and digital signatures. A CryptoProvider component supplies shared
configuration (default key, server URL, API key) to all hooks via
React context.
Wrap your component tree with <CryptoProvider> to supply shared
configuration to all hooks.
<CryptoProvider
defaultKey="a1b2c3d4...64-hex-chars"
serverUrl="https://crypto.example.com"
apiKey="my-api-key"
>
<App />
</CryptoProvider>
| Prop | Type | Description |
|---|---|---|
defaultKey |
string |
Hex-encoded 256-bit key for useEncrypt |
serverUrl |
string |
Server URL for SDK-backed operations |
apiKey |
string |
API key for server authentication |
children |
ReactNode |
Child components |
Access the context from any child via useCryptoContext().
| Hook | Purpose | Returns |
|---|---|---|
useKeypair |
Key pair generation (all algorithms) | { publicKey, privateKey, algorithm, generate, isGenerating } |
useEncrypt |
Symmetric encryption (secretbox) | { encrypt, decrypt, ciphertext, plaintext, isProcessing } |
useHash |
Cryptographic hashing | { hash, digest, isHashing } |
useSignature |
Digital signatures (sign + verify) | { sign, verify, signature, isValid, isProcessing } |
import { useKeypair } from "@sebastienrousseau/crypto-react";
function KeygenPage() {
const { publicKey, generate, isGenerating } = useKeypair("ed25519");
return (
<div>
<button onClick={() => generate()} disabled={isGenerating}>
Generate Ed25519
</button>
{publicKey && <code>{publicKey.slice(0, 64)}...</code>}
</div>
);
}
import { useEncrypt } from "@sebastienrousseau/crypto-react";
function EncryptPage() {
const { encrypt, decrypt, ciphertext, plaintext, isProcessing } =
useEncrypt();
return (
<div>
<button onClick={() => encrypt("secret message")} disabled={isProcessing}>
Encrypt
</button>
{ciphertext && (
<button onClick={() => decrypt(ciphertext)} disabled={isProcessing}>
Decrypt
</button>
)}
{plaintext && <p>Decrypted: {plaintext}</p>}
</div>
);
}
import { useHash } from "@sebastienrousseau/crypto-react";
function HashPage() {
const { hash, digest, isHashing } = useHash("sha3-256");
return (
<div>
<button onClick={() => hash("Hello")} disabled={isHashing}>
SHA3-256
</button>
{digest && <code>{digest}</code>}
</div>
);
}
import { useKeypair, useSignature } from "@sebastienrousseau/crypto-react";
function SignPage() {
const { publicKey, privateKey, generate } = useKeypair("ed25519");
const { sign, verify, signature, isValid, isProcessing } = useSignature();
return (
<div>
<button onClick={() => generate()}>Generate Keys</button>
{privateKey && (
<button
onClick={() => sign(privateKey, "my message")}
disabled={isProcessing}
>
Sign
</button>
)}
{signature && publicKey && (
<button
onClick={() => verify(publicKey, "my message", signature)}
disabled={isProcessing}
>
Verify
</button>
)}
{isValid !== null && <p>Valid: {isValid ? "Yes" : "No"}</p>}
</div>
);
}
All examples are self-contained TypeScript files in the examples/
directory. Run any example with:
npx ts-node examples/<name>.ts
| Category | Example | Purpose |
|---|---|---|
| Provider | provider.ts | CryptoProvider context setup and access |
| Key Generation | keygen.ts | Generate Ed25519 and ML-DSA-65 key pairs |
| Encryption | encrypt.ts | Secretbox encrypt and decrypt round-trip |
| Hashing | hash.ts | SHA-256, SHA3-256, and BLAKE3 hashing |
| Signing | sign.ts | Ed25519 sign and verify with tamper detection |
pnpm --filter @sebastienrousseau/crypto-react run build
pnpm --filter @sebastienrousseau/crypto-react run test
pnpm --filter @sebastienrousseau/crypto-react run lint
pnpm --filter @sebastienrousseau/crypto-react run format
All 14 packages in the Crypto Service workspace maintain a 100% coverage floor across statements, branches, functions, and lines.
Report vulnerabilities privately via GitHub Security Advisories or according to SECURITY.md. Never report security issues publicly.
All cryptographic operations leverage audited primitives, enforce constant-time execution where applicable, and zero sensitive key material upon disposal.
Versions advance strictly one step at a time on the 0.0.x line (v0.0.1 → v0.0.2 → v0.0.3 ... → v0.0.999 → v0.1.0). Work for every release iteration begins on a dedicated feat/v<version> branch.
All 14 packages in the workspace move in lockstep. Public API signatures, cipher output formats, and serialization schemas are strictly versioned. Breaking changes to serialized formats or algorithm defaults are considered major breaking changes. Minimum toolchain upgrades (e.g. Node.js LTS floor) are governed by POLICIES.md.
Dual-licensed under Apache 2.0 or MIT, at your option.
Copyright (c) 2022-2026 Sebastien Rousseau and The Crypto Service Suite contributors.