Whisper: Wraps any Go io.ReadWriter in a secure tunnel using Ed25519/X25519

Re:Whisper: Wraps any Go io.ReadWriter in a secure tunnel us... by c7DJTLrn on Sunday February 19, 2023 @01:09PM (#34860148)

I once heard something along the lines of "if you're writing the words RSA, you're doing it wrong." I guess that goes for ED25519 also.

If you want to secure a stream with asymmetric cryptography and don't need all the bells and whistles of TLS, what's the correct way to do it? Noise? Is there nothing simpler?

[ Parent | on HN ]

Re:Whisper: Wraps any Go io.ReadWriter in a secure tunnel us... by d-z-m on Sunday February 19, 2023 @01:36PM (#34860418)

As far as language support goes, it doesn't get much easier than working with TLS, especially in Go.

As far as alternatives go, Noise Pipes[0] never took off, but feel like they'd be well suited to this task.

[0]: https://noiseprotocol.org/noise.html#noise-pipes

[ Parent | on HN ]

Re:Whisper: Wraps any Go io.ReadWriter in a secure tunnel us... by mwcampbell on Sunday February 19, 2023 @01:44PM (#34860490)

IIUC the correct answer, according to the 2009 blog post that popularized the saying you're referring to, is to just use TLS anyway. In most cases it's better to accept some extra complexity than to get crypto wrong.

Edit: Here's that classic: https://web.archive.org/web/20090606064715/http://www.matasa...

[ Parent | on HN ]