Kerberus

1.1.8indexed

Proof of work captcha library enhances security and accessibility by solving and validating challenges. Offers granular control with multiple smaller challenges and provides wrappers for seamless integration.

AndroidJSJVMNative·icure/Kerberus

Stars

Used by

dependents

—

Health

/ 100

Kerberus

What is it?

Kerberus is a Kotlin Multiplatform proof of work captcha library. It is designed around this paper mCaptcha: Replacing Captchas with Rate limiters to Improve Security and Accessibility

Kerberus is designed on top of Kryptom, a Kotlin Multiplatform cryptography library. Check it out here

Part of the implementation is based on the mCaptcha implementation

How to use it?

Kerberus is provided as a standalone library that can be used either on client side to solve challenge or on server side to validate challenge. It'd be your responsibility to implement the communication between client and server, as well as the server implementation and difficulty configuration.

Usage is quite simple and revolve around 2 main methods:

resolveChallenge(config: Challenge, serializedInput: String, cryptoService: CryptoService? = null, onProgress: (Double) -> Unit = {}): Solution
validateChallenge(config: Challenge, result: Solution, serializedInput: String, cryptoService: CryptoService? = null): Boolean

The Challenge object is the configuration of the challenge, it contains the difficulty factor, the salts and the id of the challenge.

The Solution object is the result of the challenge resolution, it contains the id of the challenge and the nonces for each salt.

Why should you prefer multiple smaller challenges over a single big one?

The main reason is that it allows for a more granular control over the difficulty of the challenge and the time it takes to solve it. Having a single big challenge would mean that some time people would be able to solve it in a near instant while some other time it would take them a long time to solve it. This is not ideal as it would mean that the challenge is either too easy or too hard.

By having multiple smaller challenges, you are reducing the variance of the time it takes to solve the challenge overall.

Wrapper and integration

Kerberus is available Maven Central

For convenience and to ease integration, some wrappers are also provided for common platforms:

Platform	Wrapper
Swift	https://github.com/icure/kerberus-swift
Expo

Related libraries

Surfaced from shared tags and platforms — no rankings paid for.

cardinal-sdk★ 5

icureEnables implementation of cryptographic primitives and SDK functionalities with wrappers for cross-language use, supporting unit tests across platforms and browser tests on Chrome and Firefox.Shared: cryptography

kryptom★ 3

icureEnables access to native cryptographic primitives and algorithms, such as secure random, AES/RSA encryption, and HMAC signing, along with byte array encoding/decoding capabilities.Shared: cryptography

KSafe★ 301

ioannisaEffortlessly encrypts and persists data using hardware-backed security, offering one-code-path simplicity, seamless integration, and protection for sensitive information like OAuth tokens.Shared: cryptography

signum★ 181

a-sit-plusOffers functionality for handling cryptography, COSE, JOSE, and PKI applications, including public keys, algorithm identifiers, X509 certificates, and certification requests. Supports attestation and hardware-backed crypto on mobile including biometric authentication. Features a comprehensive ASN.1 parser and encoder, and DSL for generating ASN.1 structures.Shared: cryptography

kmp-tor★ 48

05nelsonmSupports embedding Tor into applications, enabling network privacy and security. Features include background service management, Unix domain socket support, and callback handling for non-coroutine environments.Shared: cryptography

korlibs★ 39

korlibsHosts libraries for a game engine, excluding the engine itself. Modules are available on Maven Central, including a cryptographic library.Shared: cryptography