MesaLink: A memory-safe and OpenSSL-compatible TLS library

Re:MesaLink: A memory-safe and OpenSSL-compatible TLS library by kodablah on Wednesday April 04, 2018 @04:09AM (#16752941)

I think my comment wasn't clear. I am saying, given that I can choose any lang/platform for my new project, and crypto lib quality is the most important, which lang/platform + crypto lib should I choose? Ignoring other factors, what is the best implemented crypto lib out there right now (specifically for TLS or in general)?

For me at least, I chose Go on a recent network project specifically because of the blessed, quality crypto impl for things I needed.

[ Parent | on HN ]

Re:MesaLink: A memory-safe and OpenSSL-compatible TLS library by zaarn on Wednesday April 04, 2018 @04:20AM (#16752975)

C. It has the widest range of support for crypto libraries, basically any reference implementation of modern crypto algorithms happens in C. Almost all existing libraries are either written in C or support C FFI.

So the most widely supported platform for crypto libs would be C.

But C is probably not a good choice due to other factors outside crypto lib support.

I think the best implemented crypto lib out there atm is NaCl (djb). It has very few functions that take obvious parameters with which you can't blow your leg off (the only danger is repeating a nonce but generating a random nonce or sequential nonce is within the realm of "I expect most people to be able to read /dev/random".)

Second would be any crypto library that is implemented similar: few leg-blow-off-safe functions that do all the hard parts for you.

[ Parent | on HN ]