jedisct1/libsodium
View on GitHub ↗ ★ 14,037 C
A modern, portable, easy to use crypto library.
59 mentions on Hacker News by 51 people: 10 stories, 49 comments · first 2013-03-07 · latest 2023-09-15
20082026
-
…around for a while, so probably the reason it was posted is that version 1.0.19 was just released: https://github.com/jedisct1/libsodium/releases/tag/1.0.19-RE... Updated NuGet and Swift packages are going to be uploaded soon. AEGIS-128X…
comment by jedisct1 · 2023-09-15 · in Libsodium: A modern, portable, easy to use crypto library -
▲ 142
Libsodium: A modern, portable, easy to use crypto librarystory by randomint64 · 2023-09-15 · 54 comments
-
▲ 3
Libsodium 1.0.19 Releasedstory by todsacerdoti · 2023-09-13 · 0 comments
-
Thanks, both are good general tips, but in this specific case https://github.com/jedisct1/libsodium I would guess that the author of the library has full control both over optimal parallelization of a build and minimal autoconf, but he can…
comment by acqq · 2023-04-14 · in Zig build system -
Can anyone recommend between Librandombytes and libsodium ramdombytes? https://github.com/jedisct1/libsodium/tree/master/src/libsod...
comment by dogeprotocol · 2023-01-27 · in Librandombytes – a public domain library for generating randomness -
…pretty clearly: [1], lines 18-23. 0: https://www.jcraige.com/an-explainer-on-ed25519-clamping 1: https://github.com/jedisct1/libsodium/blob/master/src/libsod...
comment by opheliate · 2022-02-09 · in Dangerous toys: Anything to ed25519 (SSH Keys) -
…but as far as I can tell at first glance, this is a working implementation of X25519. 1: https://github.com/jedisct1/libsodium/blob/7993f5ec5199b6637...
comment by opheliate · 2021-06-12 · in Show HN: LANDrop – A cross-platform AirDrop-like file transfer tool -
…this... then I looked at his biggest project, libsodium, and this is the second most recent bug https://github.com/jedisct1/libsodium/issues/1038 ``` invalid usage on desktop chrome when running crypto_pwhash Error: invalid usage at h…
comment by shp0ngle · 2021-03-29 · in It Doesn't Work -
It looks like at least libsodium implements constant-time array comparison in C. https://github.com/jedisct1/libsodium/blob/ae4add868124a32d4... Edit: I'm not disagreeing that C compilers are free to optimize stuff like this out; this…
comment by creata · 2021-03-22 · in OpenSSL will release a high-severity issue fix on 25th -
…because the GitHub link in this blog post should've been to https://github.com/google/tink or https://github.com/jedisct1/libsodium or some library like them.
comment by HelenPark · 2021-01-07 · in Independent Audit: Insights into the Source Code of Boxcryptor -
▲ 20
Show HN: A file server for Android, end-to-end encryption, web accessstory by brugeman · 2020-11-25 · 7 comments
-
…So far we've been focusing on encryption at rest. Can you tell me more about your use case? [1] https://github.com/jedisct1/libsodium [2] https://github.com/google/tink
comment by cryptbe · 2020-08-30 · in So you want to roll your own crypto? -
…store keys. Deterministic nonces have also been something that libsodium appears to have rejected: https://github.com/jedisct1/libsodium/issues/392 If you're looking at it from a misuse-prevention perspective, Tink is probably a major step…
comment by beefhash · 2020-05-17 · in Tink – Cryptographic APIs that are secure, easy to use correctly -
…with poor, nonexistent, or misconfigured AES accel. ³ this relatively straightforward operation https://github.com/jedisct1/libsodium/blob/master/src/libsod...
comment by microcolonel · 2020-04-24 · in Why not “Why not WireGuard?” -
…It's still there. I did. There's less of it. I've filled the bug, here's what's this about: https://github.com/jedisct1/libsodium/issues/937 Here's the relevant quote from annex J of the (heavy, I have printed it) C99 specifications:…
comment by loup-vaillant · 2020-03-13 · in Why I’m Using C -
…resistance nowadays. That being said, ed25519ph is easier to protect against fault attacks, see https://github.com/jedisct1/libsodium/issues/170
comment by dependenttypes · 2020-03-13 · in EdDSA, Ed25519, Ed25519-IETF, Ed25519ph, Ed25519ctx, HashEdDSA, PureEdDSA, WTF? -
…with the tradeoff they find acceptable. A one-liner isn't enough for that conversation. [0] https://github.com/jedisct1/libsodium/issues/802 [1] https://download.libsodium.org/doc/memory_management#zeroing...
comment by shakna · 2020-01-28 · in CacheOut: Leaking Data on Intel CPUs via Cache Evictions -
…of this line? Why do you think it's there if the C code using volatile is enough on its own? https://github.com/jedisct1/libsodium/blob/a26467874a512de30... It's a workaround to prevent optimisations because that happens to be how some…
comment by chrisseaton · 2019-07-17 · in Who's afraid of a big bad optimizing compiler? -
…Look at all the contortions libsodium goes to do coerce all the compilers to do the right thing :) https://github.com/jedisct1/libsodium/blob/a26467874a512de30...
comment by zimbatm · 2019-07-17 · in Who's afraid of a big bad optimizing compiler? -
…e.g. libsodium refused to fix. Hopefully crypto maintainers will get to their senses eventually. https://github.com/jedisct1/libsodium/issues/802
comment by rurban · 2019-06-22 · in SSH gets protection against side-channel attacks -
…target, again via emscripten. The c source code is really excellent[1]. It's worth browsing! [0]- https://github.com/jedisct1/libsodium.js [1]- https://github.com/jedisct1/libsodium/tree/master/src/libsod...
comment by kwindla · 2019-04-10 · in Measuring the overhead of WebAssembly using libsodium -
▲ 2
Libsodium hardens its password hash functionsstory by jedisct1 · 2019-04-01 · 0 comments
-
Yup, if you want to see the state of the art in this, here it is from libsodium: https://github.com/jedisct1/libsodium/blob/master/src/libsod... They sum it up in their docs like this: - On Windows systems, the RtlGenRandom() function is…
comment by shittyadmin · 2019-01-23 · in 7-zip broken password random number generator -
…and Webassembly. Look at the release notes on the releases page to see what kind of things they do. https://github.com/jedisct1/libsodium/releases
comment by wolf550e · 2018-12-20 · in Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice -
▲ 2
A modern, portable, easy to use crypto librarystory by septarol · 2018-03-28 · 0 comments
-
There are plans to address this in libsodium. Here are some relevant issues: https://github.com/jedisct1/libsodium/issues/361 https://github.com/jedisct1/libsodium/issues/392
comment by bascule · 2017-10-17 · in Miscreant: a multi-language misuse resistant encryption library -
https://github.com/jedisct1/libsodium/blob/be5e5a53b35961e32... They either do SecureZeroMemory for windows, memset or bzero for linux and in worst cases they manually wipe the array which is what memguard does, so, how is sodium_memzero…
comment by dimitri1995 · 2017-04-22 · in Show HN: Securely Handle Encryption Keys in Go -
▲ 2
Libsodium 1.0.12 is out, featuring xchacha20 and many speed-upsstory by remx · 2017-03-14 · 0 comments
-
How does this compare to libsodium(.js)[1][2]? [1] https://github.com/jedisct1/libsodium [2] https://github.com/jedisct1/libsodium.js
comment by 0XAFFE · 2017-03-08 · in SJCL – Stanford JavaScript Crypto Library -
Site is up on my end. Anyways, here's the GH page for anyone interested: https://github.com/jedisct1/libsodium
comment by remx · 2017-03-05 · in The Sodium crypto library -
That's coming soon: https://github.com/jedisct1/libsodium/blob/master/src/libsod...
comment by CiPHPerCoder · 2017-01-10 · in The design of Chacha20 -
…languages (and still sucks in those). I suspect that's why few used that as a criticism of PHP. - https://github.com/jedisct1/libsodium Libsodium: modern cryptography that you can likely find bindings for in your favorite programming…
comment by CiPHPerCoder · 2016-12-29 · in Who’s on Your 2016 Web Development Thank You List? -
…Perhaps with evidence of that as a possibility, we could use a good crypto library instead, eg. https://github.com/jedisct1/libsodium
comment by mitchtbaum · 2016-10-20 · in OpenSSL after Heartbleed -
…that input to be passed into the rust libsodium wrapper through the protocol implementation. [1] https://github.com/jedisct1/libsodium
comment by tinco · 2016-07-08 · in Thrussh: Portable SSH client and server library in Rust -
What about https://github.com/jedisct1/libsodium then? Very high profile, no CVEs found to date. EDIT: Can't respond to lambda below. I was responding to THIS assertion, not proposing libsodium as a general purpose openssl replacement:…
comment by CiPHPerCoder · 2016-05-03 · in OpenSSL Security Advisory -
…crypto_aead_aes256gcm_encrypt() crypto_aead_aes256gcm_decrypt() https://github.com/jedisct1/libsodium
comment by CiPHPerCoder · 2016-04-11 · in Pwncloud – Bad crypto in the Owncloud encryption module -
…code) version of NaCl by the folks at dnscrypt. Maybe I missed something in my research? [1] https://github.com/jedisct1/libsodium
comment by green7ea · 2015-09-26 · in Keybase's New Key Model -
How does it compare to the libsodium implementation: https://github.com/jedisct1/libsodium/blob/master/src/libsod... Btw, libsodium prefers salsa20 instead of chacha20, I don't know why; but I trust they made a good decision.
comment by daurnimator · 2015-07-15 · in PCG, A Family of Better Random Number Generators -
…NaCl referred to in the gist this NaCl? http://nacl.cr.yp.to/ Or does it refer to libsodium here? https://github.com/jedisct1/libsodium I realize that the library is probably available via my package manager, but it'd be nice if the…
comment by Xorlev · 2015-05-23 · in Cryptographic Right Answers -
…there is a portable implementation (well, direct port of the SSSE3 code) of AES-CTR in NaCl: https://github.com/jedisct1/libsodium/tree/master/src/libsod... . Don't expect it to be fast or anything, but it exists.
comment by pbsd · 2015-04-02 · in Truecrypt report -
…/article.gmane.org/gmane.comp.security.phc/2658 libsodium added ROT13, fast, keyless, powerful cipher https://github.com/jedisct1/libsodium/commit/23f1c90c682484f...
comment by sarciszewski · 2015-04-01 · in List of April Fools' Day Announcements -
…any type of centralized authority, and all traffic is encrypted using the sodium crypto library ( https://github.com/jedisct1/libsodium ). Full disclosure: Tox has not yet been professionally audited.
comment by Jfreegman · 2015-02-12 · in Toxic – A distributed, secure, command-line based instant messenging client -
…encrypted data. I'm hoping that jedisct1 will add a parallel functionality to libsodium soon. :) https://github.com/jedisct1/libsodium/issues/231
comment by sarciszewski · 2015-02-04 · in RansomWeb: Crooks Start Encrypting Websites and Demanding Thousands of Dollars -
Might also want to checkout libsodium ( https://github.com/jedisct1/libsodium ).
comment by urras · 2014-12-29 · in Some gripes about nacl -
…fork of NaCl, with a compatible API, and an extended API to improve usability even further. Source: https://github.com/jedisct1/libsodium/blob/master/README.mar... I see DJB (original nacl creator http://nacl.cr.yp.to/ ) appears to…
comment by 23david · 2014-12-29 · in Some gripes about nacl -
…breaking interoperability with messages encrypted with the current version of crypto_secretbox. [1] https://github.com/jedisct1/libsodium/blob/17932c782e5900ac8...
comment by agwa · 2014-12-29 · in Some gripes about nacl - ▲ 4
-
…even further." I've been using it in a toy project of mine and so far I'm very impressed! 1. https://github.com/jedisct1/libsodium
comment by chrisballinger · 2014-10-19 · in Making sure crypto remains insecure [pdf] -
▲ 2
Libsodium 1.0.0story by felixrabe · 2014-09-28 · 0 comments
-
▲ 2
LibSodium NaCl-Crypto library turns 1.0story by wslh · 2014-09-26 · 0 comments