3 ms·
Thanks for clarifying; I'll reread your comments. Do you have a standard that you would recommend for any of those things?
by politician 10y ago
Thanks for clarifying; I'll reread your comments.
Do you have a standard that you would recommend for any of those things?
- kevinburke 10y agofound in the article linked at the top of the page: - crypto_auth, or HMAC-SHA256 by itself, for authentication - crypto_secretbox for symmetric encryption - crypto_box or TLS for public key encryption
- politician 10y agoI was asking about standards for Web-based capabilities, delegated authentication, and public key tokens; not the individual message authentication or (a)symmetric encryption components. Echoing tptacek's comment above: the problems with using those individual pieces is in the joinery - combining them in ways that are broken.