3 ms·
How does this compare to libsodium or Bouncy Castle?
by phoe-krk 6y ago
How does this compare to libsodium or Bouncy Castle?
- red_admiral 6y agoBouncy Castle has an "old style" API where there's lots of switches to twiddle and some combinations produce insecure ciphers. Tink, like libsodium (the two are competitors, though in a friendly way), has a smaller API which exposes basically Mac and AEAD, and no way to accidentally set ECB mode or something like that. The big difference between Tink and sodium is that the latter uses Bernstein's primitives (chaca, salsa, 25519) whereas Tink, from the slides, goes with AES-GCM.
- tptacek 6y agoTink does EAX on most platforms, and Chapoly and I think SIV (deterministic, misuse-resistant) on all of them.
- loeg 6y agoThis comment was great up until: > The big difference between Tink and sodium is that the latter uses Bernstein's primitives (chaca, salsa, 25519) whereas Tink, from the slides, goes with AES-GCM. Tink has Bernstein's primitives as well.