Re:Libsodium 1.0.0 released
by duaneb on Wednesday September 24, 2014 @04:23PM
(#8363908)
I believe it's safe to use in the sense of being stable. I don't believe they've had a full security audit yet, though.
[ Parent
| on HN ]
People have weird ideas about the protective powers of a "full security audit". This is Bernstein, Lange, and Schwabe's code. There aren't many auditors qualified to review it.
It's more about having a third party look at it rather than the credentials of the authors being in question.
I understand the idea, but again: there aren't many third parties that are qualified to evaluate crypto code at all.
Theorem provers?
Re:Libsodium 1.0.0 released
by nickmeharry on Wednesday September 24, 2014 @10:34PM
(#8365271)
If you want proven crypto, there's always this project: https://github.com/idris-hackers/idris-crypto
Re:Libsodium 1.0.0 released
by sarciszewski on Wednesday September 24, 2014 @04:25PM
(#8363922)
Let's not wait 5 years then crowdfund it like TrueCrypt ;)