kjur/jsrsasign

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

3373 stars · 652 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

jsrsasign is a pure JavaScript cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing and validation, ASN.1, PKCS key formats, X.509 certificates, CRL, OCSP, CMS SignedData, TimeStamp, CAdES, and JSON Web Signature/Token/Key. It has reached end of support as of 14 Aug 2026 and its npm packages are deprecated.

Use cases

• sign and verify data with RSA or ECDSA in JavaScript
• parse X.509 certificates in the browser
• generate and validate JWTs and JWS without a backend
• encode and parse ASN.1 structures
• load PEM-formatted PKCS#1/5/8 private and public keys
• generate CSR and X.509 certificate structures in JavaScript

When to choose

• you need pure-JavaScript crypto for legacy environments without Web Crypto API
• you must parse or generate X.509, CMS, or ASN.1 structures in JavaScript
• you are maintaining an existing project already built on jsrsasign

When to avoid

• you are starting a new project - the library is end-of-support with unfixed reported vulnerabilities
• you need maintained, security-audited cryptography
• your environment supports the standard Web Crypto API

Facets

library · maturity abandoned

cryptography security serialization parser security developer-tools web-development browser cross-platform javascript rsa ecdsa x509 asn1 jwt jws pkcs cms ocsp end-of-support nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="kjur/jsrsasign")