macOS
brew install nettleprovider-native install command
brew / rank 88
Low-level cryptographic library. Version 4.0 via Homebrew; verified 2026-05-11.
install
brew install nettleprovider-native install command
overview
Low-level cryptographic library
history
Nettle is a low-level C cryptographic library by Niels Moller. Its design goal is deliberately narrow: provide reusable primitive implementations and simple interfaces while leaving algorithm selection, memory allocation, I/O, and higher-level protocol policy to callers.
The Nettle manual says the library is meant to fit many contexts, including object-oriented language toolkits, applications such as LSH or GnuPG, and even kernel space. It explains the core design by saying Nettle does the low-level crypto work and avoids algorithm selection, memory allocation, and I/O so higher-level toolkits can build their own interfaces on top.
Niels Moller's June 30, 2009 GNU announcement says Nettle 2.0 had been released on June 8, 2009 and that Nettle had become a GNU package. The same announcement highlights the 2.0 ABI break that split the library into libnettle for symmetric algorithms and libhogweed for public-key algorithms that depend on GMP.
The upstream GitLab tags show the later 3.x and 4.x release cadence: 3.10 on June 16, 2024, 3.10.2 on June 26, 2025, and 4.0 on February 4, 2026. Homebrew's nettle formula tracked stable 4.0 from the GNU mirror and depends on GMP.
Nettle's ecosystem role is much larger than its command-line tools suggest. The GnuTLS manual says its cryptographic library layer supports libnettle, and notes that older GnuTLS versions used libgcrypt before switching to nettle mainly for performance and secondarily because it was simpler to use.
Package-manager adoption is broad: the av.db input records Nettle across Homebrew, Alpine, Debian/Ubuntu via libhogweed, Fedora, MacPorts, Nix, Arch, and openSUSE. Homebrew analytics generated on 2026-07-01 reported 780,093 nettle installs over 365 days, but only 8,600 installs-on-request, which is classic library behavior: most installs arrive as dependencies.
Application developers include headers such as nettle/sha2.h and link with -lnettle for symmetric/hash code, or use libhogweed for public-key functionality that depends on GMP. The manual's SHA256 example demonstrates the intended low-level style: explicit context structs, caller-managed buffers, explicit lengths, and no hidden allocation.
End users usually meet Nettle through dependent software rather than by typing its bundled commands. The Homebrew formula exposes tools such as nettle-hash, nettle-pbkdf2, pkcs1-conv, sexp-conv, and nettle-lfib-stream, but its practical importance is as a crypto backend for TLS/security stacks and other packages.
Nettle is a package nerd's dependency graph landmark. It is small enough to audit as a C library, old enough to have stable ABI expectations, and important enough that a major version line matters to large formula rebuilds. The libnettle/libhogweed split is also a clean example of packaging ABI boundaries following real dependency boundaries.
security posture
No matching local secret-handling manifest was found for nettle. Nucleus package metadata is still published here so future coverage has a stable package URL.
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
nettle-hash | executable | indexed executable | Discovered from the local executable index. |
nettle-lfib-stream | executable | indexed executable | Discovered from the local executable index. |
nettle-pbkdf2 | executable | indexed executable | Discovered from the local executable index. |
pkcs1-conv | executable | indexed executable | Discovered from the local executable index. |
sexp-conv | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:nettle |
|---|---|
| Version | 4.0 |
| Package manager | Homebrew |
| Homepage | https://www.lysator.liu.se/~nisse/nettle/ |
| Last updated | 2026-05-11T18:07:37Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.