4 ms·
Why do so few projects use SJCL? Whenever I see a project like this I always have my fingers crossed that they will be using sjcl but it never pans out.
by dfc 14y ago
Why do so few projects use SJCL? Whenever I see a project like this I always have my fingers crossed that they will be using sjcl but it never pans out.
- mpyne 14y agoI guess I would have to ask what they would be using SJCL on, but I believe that there have been several conceptual issues noted by guys like tptacek to keep from recommending any client-side JS crypto (incl. SJCL) in general.
- dfc 14y agoI was under the impression crypton used cryptojs: https://github.com/SpiderOak/crypton/tree/master/client/src/crypto https://github.com/SpiderOak/crypton/tree/master/client/src/... EDIT: And jsrsasign: https://github.com/SpiderOak/crypton/tree/master/client/src/rsa https://github.com/SpiderOak/crypton/tree/master/client/src/...
- rarrrrrr 14y agoFYI, our choices for upstream JS crypto libs aren't set in stone. We may ultimately go with SJCL -- we're not fully satisfied with the libs we're using. They need some cleanup in various areas if we do stick with them.
- ecto 14y agoWe evaluated several libraries (all JS crypto libraries we could find actually - there aren't many) and CryptoJS suited our needs the best. Specifically, it includes PBKDF2 and CFB mode for AES which SJCL doesn't have right now. We have encountered subtle problems with the CryptoJS API, and we plan on giving back and writing a JS crypto library using the lessons we've learned from this project.
- dfc 14y agoWhat is wrong with sjcl's PBKDF2? https://github.com/bitwiseshiftleft/sjcl/blob/master/core/pbkdf2.js https://github.com/bitwiseshiftleft/sjcl/blob/master/core/pb... It looks like there will be no CFB in sjcl: https://github.com/bitwiseshiftleft/sjcl/issues/7 https://github.com/bitwiseshiftleft/sjcl/issues/7