3 ms·

It may help if we point out that we now have at least two independent implementations of XChacha20: your Libsodium and my Monocypher. This should raise confide

• tptacek 9y ago
  Why would implementation in your own library raise confidence? Sodium is interesting because thousands of people use it.
  • loup-vaillant 9y ago
    > Why would implementation in your own library raise confidence? I thought this would be obvious. I didn't look at Sodium to implement XChacha20, but I did compare our two implementations (my test vectors come from Sodium). At the very least, this is evidence that Sodium did things right. > Sodium is interesting because thousands of people use it. By that metric, OpenSSL is even more interesting. Have those users also tested Sodium? I personally put more weight in Matthew Green's security audit. Likewise, Monocypher is interesting because of its small size (easy to audit, won't take months like Sodium), its paranoid test suite, and to a lesser degree the proof that Poly1305 works. https://monocypher.org/poly1305-proof https://monocypher.org/poly1305-proof