4 ms·
libboring exists, it's called nacl.
by chpatrick 3y ago
libboring exists, it's called nacl.
- denton-scratch 3y agoAs far as I'm aware, NaCl isn't like "The End Of History" for cryptographic excitement; isn't it more like a safety razor, that makes it more difficult than usual for users to do stupid things? The primitives it offers don't include stupid primitives, and you can't stich the primitives together in stupid ways. But the primitives it offers are the same primitives offered by other kits; those are not immune to 'excitement' issues.
- Sesse__ 3y agoIt offers higher-level primitives than e.g. OpenSSL. Instead of the primitives “ChaCha20”, “Poly1305” and “Ed25519 signature”, you get “authenticated encryption” (implemented using ChaCha20, Poly1305 and Ed25519). You do not have to know or understand how to combine the three securely, nor how to combine everything down into a single parseable stream for the other end.
- tptacek 3y ago"Safety razor" sounds like the right analogy to me.
- nly 3y agoLibsodium you mean. Has safe cutting edge crypto, and nothing else.