3 ms·
Simply put, use the reference nacl implementation only when you really know what you're doing. As with all things crypto it's easy to shoot yourself in the foot
by metafex 12y ago
Simply put, use the reference nacl implementation only when you really know what you're doing. As with all things crypto it's easy to shoot yourself in the foot, and libsodium makes it a bit harder than reference nacl.
- pdw 12y agoThough the first sentence of the NaCL website says: "NaCl (pronounced "salt") is a new easy-to-use high-speed software library"...
- mikecb 12y agoI suppose easy is a relative term here.
- nightcracker 12y agoIf you really know what you are doing you aren't even using NaCl, you use the individual algorithms. For example: https://github.com/orlp/ed25519 https://github.com/orlp/ed25519 .
- bascule 12y agoIf you really know what you're doing, you'd use a fast assembly implementation that's guaranteed to run in constant time, like curve25519/ed25519-donna, both of which you get for free if you just use libsodium.