4 ms·
I realize the inherit issues with rewriting crpyto, but does the javascript-ness of it matter? Serious question, I feel like I've heard saying that it can be a
by rtpg 12y ago
I realize the inherit issues with rewriting crpyto, but does the javascript-ness of it matter? Serious question, I feel like I've heard saying that it can be a factor.
- gtank 12y agoPeople who object to javascript crypto usually mean that in the context of "browser javascript", which is fraught with peril [1]. The javascript language itself isn't necessarily the problem (although parts of it are dodgy by the standards of what you'd like to implement crypto with). [1] http://matasano.com/articles/javascript-cryptography/ http://matasano.com/articles/javascript-cryptography/
- RKoutnik 12y agogtank explains the browser crypto problem well - there are a few issues writing JS crypto on the server though. I've been going through the CryptoPals challenges with Node.js and have hit a few snags, virtually all of them involving types. I've switched to TypeScript and things have gone much smoother. The crypto module does add some padding unexpectedly, though I'm not knowledgeable enough to say if that's according to spec or not.