Skip to main content
Pre-release

This release is a pre-release and may not be stable for production use.

regipy-rs

Rust-accelerated core parser for regipy, the OS-independent Python library for parsing offline Windows registry hives (REGF format).

Status: alpha. The Rust backend is validated 1:1 against the pure-Python parser over regipy's full test-hive corpus (every key, every value), but the API and packaging may still change.

What it is

regipy_rs is a PyO3 native extension implementing the performance-critical parts of registry parsing: hive loading, key navigation, recursive traversal and value decoding. It is not meant to be used directly — install it alongside regipy and use the drop-in wrapper:

pip install regipy[rust]
from regipy.registry_rs import RegistryHive  # instead of regipy.registry

reg = RegistryHive("/path/to/NTUSER.DAT")
key = reg.get_key(r"\Software\Microsoft\Windows\CurrentVersion\Run")
for value in key.iter_values(as_json=True):
    print(value.name, value.value)

for entry in reg.recurse_subkeys(as_json=True):
    ...

The wrapper exposes the exact same API and dataclasses as regipy.registry.RegistryHive, so existing code and all regipy plugins work unchanged.

Parity guarantees

Output semantics intentionally match the Python parser, including its quirks (string trimming behavior, decode order of try_decode_binary, generator error semantics on corrupted hives). Parity is enforced by regipy_tests/comparison_test.py, which traverses every test hive with both backends and compares every key path, timestamp, value name, type and content.

Building from source

pip install maturin
cd regipy-rs
maturin build --release
pip install target/wheels/regipy_rs-*.whl

Benchmarks

BENCHMARKS.md contains the full report: per-hive timings, cProfile breakdowns of both backends, SHA-256 parity digests over the complete traversal output, and a disclaimer documenting intentional divergences. The entire report is regenerated from source by:

python regipy-rs/benchmark.py --runs 3

See the Reproducing this report section of BENCHMARKS.md for prerequisites and caveats.

Metadata

Release files for regipy-rs 0.1.0a2

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for regipy-rs 0.1.0a2
File Size Uploaded Provenance
regipy_rs-0.1.0a2.tar.gz 37.8 kB With provenance Details

Built distributions (wheels)

Table of built distributions (wheels) for regipy-rs 0.1.0a2
File
regipy_rs-0.1.0a2-cp39-abi3-win_amd64.whl CPython 3.9 abi3 Windows x86-64 Details
regipy_rs-0.1.0a2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl CPython 3.9 abi3 Linux glibc 2.17+ x86-64 Details
regipy_rs-0.1.0a2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl CPython 3.9 abi3 Linux glibc 2.17+ ARM64 Details
regipy_rs-0.1.0a2-cp39-abi3-macosx_11_0_arm64.whl CPython 3.9 abi3 macOS 11.0+ ARM64 Details

Total release size: 1.1 MB

Release files / regipy_rs-0.1.0a2.tar.gz

Download URL regipy_rs-0.1.0a2.tar.gz
Size 37.8 kB
Tags Source
SHA-256 checksum
How to use checksums
c4415f81f9950b856e5a39c1f2d475e8e05c5437cc27c36f0d457d4d1499a45d
BLAKE2b-256 checksum
How to use checksums
712cd71a56f7a658461ebc1c48145aec2606dd51767af13405c014a83bd836c7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 26, 2026.

Transparency log

Release files / regipy_rs-0.1.0a2-cp39-abi3-win_amd64.whl

Download URL regipy_rs-0.1.0a2-cp39-abi3-win_amd64.whl
Size 191.1 kB
Tags CPython 3.9 Windows x86-64 abi3
SHA-256 checksum
How to use checksums
f4e49ebeecb0bb8b60cdde2a8fd235e8cb1bc6b894ae322e05501ae16795a169
BLAKE2b-256 checksum
How to use checksums
ef029ba9238c5f84f480a031c8f6d76fc16153f73f0d886247f59c2a27623df8
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 26, 2026.

Transparency log

Release files / regipy_rs-0.1.0a2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

Download URL regipy_rs-0.1.0a2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Size 300.2 kB
Tags CPython 3.9 Linux glibc 2.17+ x86-64 abi3
SHA-256 checksum
How to use checksums
b16e4b5614efb4e84e85074899b6c514aee1d2cf7db977a5ea7f9d8e06e786cf
BLAKE2b-256 checksum
How to use checksums
bdcfb40ae4199dd0527a887ff1676b156a0a26ac48228086ab1b7679dea0eb63
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 26, 2026.

Transparency log

Release files / regipy_rs-0.1.0a2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl

Download URL regipy_rs-0.1.0a2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl
Size 299.7 kB
Tags CPython 3.9 Linux glibc 2.17+ ARM64 abi3
SHA-256 checksum
How to use checksums
150bd4bd5f1cf50a980d93fd96382ca6a3921c16f1a66e2dca03b5aaab2e08bc
BLAKE2b-256 checksum
How to use checksums
7197143feb593fbfacf177a6c77baf5bbee325eae5eddc35fe41c0c58b48a7b5
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 26, 2026.

Transparency log

Release files / regipy_rs-0.1.0a2-cp39-abi3-macosx_11_0_arm64.whl

Download URL regipy_rs-0.1.0a2-cp39-abi3-macosx_11_0_arm64.whl
Size 274.4 kB
Tags CPython 3.9 abi3 macOS 11.0+ ARM64
SHA-256 checksum
How to use checksums
c995525c310e727334b7696d5e2d346f5a281933a45e581cf43cf1c0aa842e56
BLAKE2b-256 checksum
How to use checksums
d818ba711fbb2d7d7b94a6d985f445808b91ec57459df52668377a3a2f417a01
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 26, 2026.

Transparency log

Security for regipy-rs 0.1.0a2

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 5 files in this release have been uploaded with provenance metadata.

Select from 5 files

Attestation for regipy_rs-0.1.0a2.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 26, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page