4 ms·
Of course maintaining some kind of "libsodium for rust" is more work, but on the other hand, a central project for rust crypto stuff is highly desirable: Even i
by vog 9y ago
Of course maintaining some kind of "libsodium for rust" is more work, but on the other hand, a central project for rust crypto stuff is highly desirable: Even if initially run by mere crypto enthusiasts, such a central place is needed for the real crypto experts to condensate. Then, obsolete crypto can centally be deprecated and put with a warning, and competing implementations can be resolved at a central place getting (hopefully) all knowing people together to discuss.
What's the alternative? That each individual developer has to pick and combine their favourite set of crypto libs, making crypto libs spread by popularity (which is more often than not a self-fulfilling prophecy) rather than actual quality.
- steveklabnik 9y agoI don't see how these two things are at odds; said "central project" could author individual crates? They could even live in the same project, thanks to workspaces.
- dbrgn 9y agoTweetnacl (http://tweetnacl.cr.yp.to/ http://tweetnacl.cr.yp.to/) would be a good candidate for porting to Rust, since it's very small. Others have done it successfully in other languages: https://github.com/dchest/tweetnacl-js https://github.com/dchest/tweetnacl-js Someone has given it an attempt: https://github.com/jmesmon/sodalite https://github.com/jmesmon/sodalite But the port doesn't seem to be too mature yet. (Edit: For those not aware, Libsodium is based on a portable rewrite of NaCl.)