Is chacha20 safe to use?

chacha20 has no known vulnerabilities on the latest version (0.10.0). DepScope rates its health at 79/100 (moderate risk).

What is the latest version of chacha20?

The latest version of chacha20 is 0.10.0, released 2026-02-07.

Does chacha20 have known vulnerabilities?

No known vulnerabilities on the latest version of chacha20.

Is chacha20 deprecated?

No, chacha20 is actively maintained. Latest release: 0.10.0 (2026-02-07).

What are alternatives to chacha20?

Popular alternatives to chacha20 in Cargo include: hashbrown, getrandom, windows-sys, syn.

What license does chacha20 use?

chacha20 is licensed under MIT OR Apache-2.0.

chacha20

cargov0.10.0

The ChaCha20 stream cipher (RFC 8439) implemented in pure Rust using traits from the RustCrypto `cipher` crate, with optional architecture-specific hardware acceleration (AVX2, SSE2). Additionally provides the ChaCha8, ChaCha12, XChaCha20, XChaCha12 and XChaCha8 stream ciphers, and also optional rand_core-compatible RNGs based on those ciphers.

License MIT OR Apache-2.0permissive43 versions0 deps25,915,519 weekly dl

RustCrypto/stream-ciphers

/ 100

Health

safe to use

[email protected] is safe to use (health: 79/100)

Health breakdown0 – 100

20/25

maintenance

20/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Maintainer trust

Active maintainers (3m)

8

Contributors (12m)

9

Primary author dominance

39%

GitHub stars

318

Quality signals

OSS Criticality

0.74critical

Download trend

stable(0%)

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/cargo/chacha20