News for hackers. Stuff that matters.

A comment on Standard Notes is a safe place for your notes, thoughts, and life's work. Parent comment

Re:Standard Notes is a safe place for your notes, thoughts, ... by FiloSottile on Saturday April 17, 2021 @05:21AM (#26842841)
Is the cryptography protocol documented anywhere?

The link on your website under the end-to-end heading leads to the Privacy Policy, that only mentions "XChaCha20-Poly1305-IETF & Argon2" which is far from enough details, especially for a closed source app with no audits.

From the names it sounds like you use libsodium, which is good, but it doesn't make rolling your own protocol safe.

[ Parent | on HN ]
Re:Standard Notes is a safe place for your notes, thoughts, ... by thecodrr on Saturday April 17, 2021 @06:09AM (#26843076)
We are a bit lacking on the documentation side currently. However, there is no new protocol. It says "XChaCha20-Poly1305-IETF & Argon2" because that's the core part. Everything else is standard.

I'll write up a doc on how encryption + syncing works though. And I have full plans to open source the security related parts of the app.

[ Parent | on HN ]