CryptoHives.Foundation.Threading.Analyzers 0.4.11-preview

🛡️ CryptoHives Open Source Initiative 🐝

An open, community-driven cryptography and performance library collection for the .NET ecosystem.

🐝 CryptoHives .NET Foundation Packages

The CryptoHives Open Source Initiative is a collection of modern, high-assurance libraries for .NET, developed and maintained by The Keepers of the CryptoHives. Each package is designed for security, interoperability, and clarity — making it easy to build secure systems for high performance transformation pipelines and for cryptography workloads without sacrificing developer experience.

📚 Documentation

• 📖 Full Documentation - Comprehensive guides, API reference, and examples
• 🚀 Getting Started Guide
• 📦 Package Documentation
• 📚 API Reference

🐝 Available CryptoHives

Package	Description	NuGet	Documentation
CryptoHives.Foundation.Memory	Pooled buffers and streams		Docs
CryptoHives.Foundation.Threading	Pooled async synchronization		Docs
CryptoHives.Foundation.Security.Cryptography	Hash & MAC algorithms		Docs

More packages will be published under the CryptoHives.* namespace — see the Nuget CryptoHives for details.

🍯 CryptoHives Health

🧬 Features and Design Principles

🧱 Orthogonal Design

• All development is done on free and open-source tools, e.g. .NET SDK, Visual Studio Community Edition, Visual Studio Code, GitHub, Azure DevOps, etc.
• Each package is designed to be orthogonal and composable with other CryptoHives packages to avoid deep cross dependencies
• Dependencies on other packages are kept to a minimum and shall only include widely adopted, well-maintained libraries, e.g. the Microsoft.Extensions
• OS and hardware dependencies are avoided wherever possible to ensure deterministic behavior across all platforms and runtimes, specifically for security implementations
• There is no intention to replace or shadow existing .NET class libraries; instead, CryptoHives packages are designed to complement and extend existing functionality

⚡ High-Performance Primitives

• CryptoHives provides a growing set of utilities designed to optimize high performance transformation pipelines and cryptography workloads.

🛠️ Memory Efficiency

Pooled buffer management for transformation pipelines and high-frequency I/O:

• ArrayPool-based allocators for common crypto and serialization scenarios
• ArrayPoolMemoryStream — drop-in MemoryStream replacement backed by ArrayPool<byte>
• ReadOnlySequenceMemoryStream — read from ReadOnlySequence<byte> without copying
• ArrayPoolBufferWriter<T> — IBufferWriter<T> over pooled arrays
• Ownership primitives for zero-copy handoff of pooled buffers

🚀 Concurrency Tools (Threading)

Async-compatible synchronization primitives built on ObjectPool and ValueTask<T>. Designed to eliminate Task / TaskCompletionSource<T> allocations on the hot path.

• AsyncLock — mutual exclusion
• AsyncSemaphore — counting semaphore
• AsyncAutoResetEvent / AsyncManualResetEvent
• AsyncReaderWriterLock
• AsyncBarrier / AsyncCountdownEvent

All primitives support CancellationToken and ConfigureAwait(false) without the need for extra allocations. Nuget package contains a C# analyzer to avoid common ValueTask usage mistakes.

🔐 Managed Code Cryptography

Fully managed implementations of cryptographic hash algorithms and MACs, written from NIST/RFC/ISO specifications and verified against official test vectors. No OS crypto dependency — deterministic results on every platform, in some cases even outperforming OS implementations.

Algorithms:

All XOF algorithms implement IExtendableOutput for streaming variable-length output via Absorb / Squeeze / Reset. BLAKE2b, BLAKE2s, and BLAKE3 use managed SIMD intrinsics (SSE2, SSSE3, AVX2) with scalar fallback.

🧪 Package Benchmarks

• Async primitive benchmarks — contested and uncontested scenarios, comparing pooled ValueTask vs. existing Task-based alternatives.
• Hash algorithm benchmarks — measured with BenchmarkDotNet across 128B–128KB payloads, comparing managed vs. BouncyCastle vs. OS implementations.

🔒 Fuzzed APIs (planned)

• All libraries and public-facing APIs are planned to be fuzzed

🧩 Installation

Install via NuGet CLI:

dotnet add package CryptoHives.Foundation.Threading

Or using the Visual Studio Package Manager:

Install-Package CryptoHives.Foundation.Threading

🧠 Usage Examples

using CryptoHives.Foundation.Security.Cryptography.Hash;

// Allocation-free hash
using var blake3 = Blake3.Create();
Span<byte> hash = stackalloc byte[32];
blake3.TryComputeHash(data, hash, out _);

// XOF streaming (variable-length output)
using var shake = Shake256.Create(64);
shake.Absorb(data1);
shake.Absorb(data2);
Span<byte> output = stackalloc byte[128];
shake.Squeeze(output);

using CryptoHives.Foundation.Threading.Async.Pooled;

// Allocation-free async lock, even with cancellation token
private readonly AsyncLock _lock = new();

public async Task DoWorkAsync(CancellationToken ct)
{
    using await _lock.LockAsync(ct).ConfigureAwait(false);
    // critical section
}

🧪 Development Policy

All code within the CryptoHives .NET Foundation is developed with attention to correctness and security:

• Implementations are written from official public specifications and standards (NIST, RFC, ISO)
• All algorithms are verified against official test vectors from specification documents
• Review process includes algorithm validation against reference implementations
• Development may use AI-assisted tooling; no guarantee of clean-room provenance is claimed

🔐 Security Policy

Security is our top priority.

If you discover a vulnerability, please do not open a public issue.
Instead, please follow the guidelines on the CryptoHives Open Source Initiative Security Page.

🔏 Nuget Package Assembly Code Signing

Assemblies in our Nuget packages are currently not code signed. Once there is sufficient demand and funding available, the Keepers plan to implement code signing for all released packages.

📝 No-Nonsense Matters

This project is released under the MIT License because open collaboration matters.
However, the Keepers are well aware that MIT-licensed code often gets copied, repackaged, or commercialized without giving credit.

If you use this code, please do so responsibly:

• Give visible credit to the CryptoHives Open Source Initiative or The Keepers of the CryptoHives and refer to the original source.
• Contribute improvements back and report issues.

Open source thrives on respect, not just permissive licenses.

⚖️ License

Each component of the CryptoHives Open Source Initiative is licensed under a SPDX-compatible MIT license.
By default, packages use the following license tags:

// SPDX-FileCopyrightText: <year> The Keepers of the CryptoHives
// SPDX-License-Identifier: MIT

Some inherited components may use alternative MIT license headers, according to their origin and specific requirements those headers are retained.

🐝 About The Keepers of the CryptoHives

The CryptoHives Open Source Initiative project is maintained by The Keepers of the CryptoHives —
a collective of developers dedicated to advancing open, verifiable, and high-performance cryptography in .NET.

🧩 Contributing

Contributions, issue reports, and pull requests are welcome!

Please see the Contributing Guide before submitting code.

© 2026 The Keepers of the CryptoHives