News for hackers. Stuff that matters.

A comment on Guidance for Choosing an Elliptic Curve Signature Algorithm. Parent comment

Re:Guidance for Choosing an Elliptic Curve Signature Algorithm by matthewdgreen on Monday May 23, 2022 @10:33AM (#31479539)
That would be my intuitive recommendation, but canvassing experts I haven't found a clear recommendation across all languages. Some have recommended Tink, others have recommended (ugh) OpenSSL. Javascript is particularly fraught: is it better to use libsodium compiled via emscripten, or something native? It's depressing that we don't have agreement here.
[ Parent | on HN ]
Re:Guidance for Choosing an Elliptic Curve Signature Algorithm by some_furry on Monday May 23, 2022 @10:34AM (#31479560)
Maybe I'll write about that next ;)

For JavaScript: emscripten/wasm/etc. don't currently provide constant-time guarantees, so you're better off using the native crypto module.

[ Parent | on HN ]