Re:Libsodium 1.0.0 released
by tptacek on Wednesday September 24, 2014 @07:52PM
(#8364810)
People have weird ideas about the protective powers of a "full security audit". This is Bernstein, Lange, and Schwabe's code. There aren't many auditors qualified to review it.
[ Parent
| on HN ]
It's more about having a third party look at it rather than the credentials of the authors being in question.
I understand the idea, but again: there aren't many third parties that are qualified to evaluate crypto code at all.
Theorem provers?
Re:Libsodium 1.0.0 released
by nickmeharry on Wednesday September 24, 2014 @10:34PM
(#8365271)
If you want proven crypto, there's always this project: https://github.com/idris-hackers/idris-crypto