4 ms·
Crypto APIs being hard to correctly use was the principal motivation behind Daniel Bernstein's nacl [1]. As others have said, nacl and its reimplementation libs
by niftich 10y ago
Crypto APIs being hard to correctly use was the principal motivation behind Daniel Bernstein's nacl [1]. As others have said, nacl and its reimplementation libsodium try to adhere to this philosophy.
[1] https://cr.yp.to/talks/2012.08.08/slides.pdf https://cr.yp.to/talks/2012.08.08/slides.pdf
- wolf550e 10y agoAnd it's available for PHP: https://paragonie.com/book/pecl-libsodium https://paragonie.com/book/pecl-libsodium https://github.com/jedisct1/libsodium-php https://github.com/jedisct1/libsodium-php
- lisper 10y agoAnd Javascript: https://tweetnacl.js.org/ https://tweetnacl.js.org/ And Python: https://github.com/pyca/pynacl https://github.com/pyca/pynacl This is one of my projects using these libraries, a PGP replacement based entirely on the NaCl API: https://github.com/Spark-Innovations/SC4 https://github.com/Spark-Innovations/SC4
- Buge 10y agoI used that in a project and found that the Java and the Javascript implementations I was using did things slightly differently, so I had to modify the Java version to behave like the Javascript version. Simpler than Openssl or whatever, but still not ideal.