Ant Group’s Open‑Source Cryptographic Library “Tongsuo” Receives National Commercial Cryptography Certification

Recently, Ant Group’s self‑developed open‑source cryptographic library “Tongsuo” received the commercial cryptography product certification issued by the National Cryptography Administration, becoming the world’s first open‑source project to pass this certification.

Tongsuo, formerly known as BabaSSL, provides modern cryptographic algorithms and secure communication protocols. It supplies fundamental cryptographic capabilities for storage, networking, key management, and privacy‑computing scenarios, ensuring confidentiality, integrity, and authenticity of data throughout its lifecycle. The library is widely used in Ant Group’s internal and external services and supports advanced areas such as homomorphic encryption and post‑quantum algorithms.

Cryptography is the science of protecting information through encoding and encryption, while commercial cryptography is the most widely applied branch of cryptographic technology in China’s information industry, providing essential security for data storage and transmission.

The commercial cryptography product certification indicates that Tongsuo has passed rigorous testing, complies with the GM/T 0028 “Cryptographic Module Security Technical Requirements” Level 1, and meets technical correctness and compatibility standards, offering users a more rigorous compliance foundation.

As a rare domestic open‑source cryptographic project, Tongsuo fills a gap in the ecosystem, helping China build a native cryptographic open‑source environment and address supply‑chain constraints. Leveraging Alibaba’s massive user base, Tongsuo achieves production‑grade performance and stability; it passed the OpenAtom Open Source Foundation Technical Committee review in 2022 and is currently in the donation process to the foundation.