News for hackers. Stuff that matters.
Re:Guidance for Choosing an Elliptic Curve Signature Algorithm by ilammy on Monday May 23, 2022 @10:33AM (#31479537)
If you're writing an application, you'd better off with a library even higher on the abstraction layer. The one the abstracts away the choice of specific cryptographic primitives. Without being a domain expert your choices might end up subpar, your use of primitives might end up subpar, your attention to detail might end up subpar, etc.

Also, it would be nice to talk to experts in security, since choosing a library and choosing a curve is a very small part of it. You'd have way more ways to fuck up, say, key management, or miss a glaring hole in some other place of your system.

Re:Guidance for Choosing an Elliptic Curve Signature Algorithm by some_furry on Monday May 23, 2022 @10:36AM (#31479575)
This is precisely what I recommend in my "how to learn cryptography as a programmer" post.

https://soatok.blog/2020/06/10/how-to-learn-cryptography-as-...

Start with the highest-level, hard-to-get-wrong abstraction. If you stop learning there, you're safe!

Then drill down as you be come more of an expert. Libsodium is step 2 from something fit-for-purpose.