Getting Cryptol

Download a Binary

Linux (Ubuntu 22.04)

Linux (Ubuntu 20.04)



Cryptol binaries for Mac OS X, Linux, and Windows are available from the GitHub releases page. Binaries are distributed as a tarballs which you can extract to a location of your choice. The 3.1.0 release also includes optional downloads including supported versions of several solvers.

GPG signatures are available for each release, and we encourage you to check the signature against our public key before installing to ensure the integrity of the release you downloaded.

Cryptol is also packaged using Docker and can be fetched using one of the following commands (for the REPL and RPC server, respectively):

docker pull

docker pull

Getting Z3

Download Z3

Cryptol currently depends on the Z3 SMT solver to solve constraints during typechecking, and as the default solver for the :sat and :prove commands. You can download Z3 binaries for a variety of platforms from their releases page.

Cryptol generally requires the most recent version of Z3, but you can see the specific version tested in CI by looking here.

Getting other SMT solvers

Cryptol also integrates with the Yices, Boolector, CVC4, CVC5, and other SMT solvers. If you download and install them, you can select which one Cryptol uses as follows: :set prover=cvc4, :set prover=yices, etc. For a list of currently-supported solvers, see the solvers we use in CI and the SBV versions page.

Licensing Terms

Cryptol is licensed under a standard 3-clause BSD license.