News for hackers. Stuff that matters.
Re:Libsodium 1.0.0 released by duaneb on Wednesday September 24, 2014 @04:23PM (#8363908)
I believe it's safe to use in the sense of being stable. I don't believe they've had a full security audit yet, though.
Re:Libsodium 1.0.0 released by tptacek on Wednesday September 24, 2014 @07:52PM (#8364810)
People have weird ideas about the protective powers of a "full security audit". This is Bernstein, Lange, and Schwabe's code. There aren't many auditors qualified to review it.
Re:Libsodium 1.0.0 released by duaneb on Thursday September 25, 2014 @06:42PM (#8370232)
It's more about having a third party look at it rather than the credentials of the authors being in question.
Re:Libsodium 1.0.0 released by tptacek on Thursday September 25, 2014 @07:43PM (#8370470)
I understand the idea, but again: there aren't many third parties that are qualified to evaluate crypto code at all.
Re:Libsodium 1.0.0 released by sitkack on Wednesday September 24, 2014 @09:55PM (#8365156)
Theorem provers?
Re:Libsodium 1.0.0 released by nickmeharry on Wednesday September 24, 2014 @10:34PM (#8365271)
If you want proven crypto, there's always this project: https://github.com/idris-hackers/idris-crypto
Re:Libsodium 1.0.0 released by sarciszewski on Wednesday September 24, 2014 @04:25PM (#8363922)
Let's not wait 5 years then crowdfund it like TrueCrypt ;)