4 ms·

I develop a Rust security application. As much as I want to use a pure Rust crypto library, the #1 factor for me is that it is audited. Unfortunately, libsodium

I develop a Rust security application. As much as I want to use a pure Rust crypto library, the #1 factor for me is that it is audited. Unfortunately, libsodium (Sodium Oxide in Rust) and Rust-Crypto are the only ones that satisfies those requirements. libsodium being the only one that isn't easy to misuse. I wish I could help crowdfund a cryptographic analysis of all of the Rust crypto projects. It would certainly make cross compilation easier.

vlmutolo 6y ago
Yeah, that's why I tried to mention right up front that it isn't (yet) audited. I didn't want to give anyone the wrong impression. It's a bit of a chicken-and-egg problem, too, where it's hard to justify the expense of an audit if few people use the library, and it's hard to find people to use the library when it isn't audited. Here's the tracking issue for a first security audit: https://github.com/brycx/orion/issues/21 https://github.com/brycx/orion/issues/21. Near the bottom of that issue, an employee from NCC reached out and said that they may be interested in funding an audit for Orion, though it's been a couple months and that hasn't gone anywhere (that I know of).
- brycx 6y ago
  > Near the bottom of that issue, an employee from NCC reached out and said that they may be interested in funding an audit for Orion Small correction: It was actually an employee of Mobilecoin, the company that funded the audits for RustCrypto, which were performed by NCC.
dochtman 6y ago
Are you not aware of the recentish audit of rustls and, by extension, parts of ring? https://jbp.io/2020/06/14/rustls-audit.html https://jbp.io/2020/06/14/rustls-audit.html (I also don't think all of RustCrypto has been audited, only very limited parts AIUI.)
- roblabla 6y ago
  That's correct. aes-gcm (and by extension, aes and polyval) and chacha20poly1305 were audited. See https://www.reddit.com/r/rust/comments/fa8a96/audit_of_the_rustcrypto_aesgcm_and/ https://www.reddit.com/r/rust/comments/fa8a96/audit_of_the_r...
loup-vaillant 6y ago
Monocypher has been audited last summer (no bug were found), and it has third party Rust bindings. I guess that could be another alternative?

vlmutolo 6y ago

Yeah, that's why I tried to mention right up front that it isn't (yet) audited. I didn't want to give anyone the wrong impression. It's a bit of a chicken-and-egg problem, too, where it's hard to justify the expense of an audit if few people use the library, and it's hard to find people to use the library when it isn't audited. Here's the tracking issue for a first security audit: https://github.com/brycx/orion/issues/21 https://github.com/brycx/orion/issues/21. Near the bottom of that issue, an employee from NCC reached out and said that they may be interested in funding an audit for Orion, though it's been a couple months and that hasn't gone anywhere (that I know of).

brycx 6y ago
> Near the bottom of that issue, an employee from NCC reached out and said that they may be interested in funding an audit for Orion Small correction: It was actually an employee of Mobilecoin, the company that funded the audits for RustCrypto, which were performed by NCC.

dochtman 6y ago

Are you not aware of the recentish audit of rustls and, by extension, parts of ring? https://jbp.io/2020/06/14/rustls-audit.html https://jbp.io/2020/06/14/rustls-audit.html (I also don't think all of RustCrypto has been audited, only very limited parts AIUI.)

roblabla 6y ago
That's correct. aes-gcm (and by extension, aes and polyval) and chacha20poly1305 were audited. See https://www.reddit.com/r/rust/comments/fa8a96/audit_of_the_rustcrypto_aesgcm_and/ https://www.reddit.com/r/rust/comments/fa8a96/audit_of_the_r...

loup-vaillant 6y ago

Monocypher has been audited last summer (no bug were found), and it has third party Rust bindings. I guess that could be another alternative?