TweetNaCl.js

http://dchest.github.io/tweetnacl-js/#/

by electic • 12 years ago

57 17 12 years ago

dchest.github.io

kibibu2• 12 years ago

I really wish there weren't two popular projects that were abbreviated to NaCl.

For others, this is a port of the "salt" NaCl crypto library, and has nothing to do with Native Client.

The dangers of JS crypto in the browser are well trodden (anybody who can snoop the connection can probably replace the JS, for example), but the rise of JS-based client apps (through node-webkit et al) make this a bit more meaningful.

hayksaakian• 12 years ago

thank you for clarifying.

Sometimes these name collisions don't matter because the projects are from two separate groups of software, but in this case, the overlap in 'client facing web apps' makes NaCl downright confusing without clarification.

CmonDev• 12 years ago

Yes, I was initially excited expecting to see something awesome for Google NaCl, but it turned out to be yet another script written in a legacy language... Well, he did add .js to the name though.

xiaoma• 12 years ago

What exactly are you referring to with "legacy language"? Could you elaborate?

nly• 12 years ago

Afaik NaCl from DBJ et al. isn't actively maintained, by them, as an ongoing project. It hasn't been updated since early 2011. libsodium is where it's at now. Going forward, I wouldn't expect TweetNaCl to be either so there's not much of a naming collision.

themadcreator• 12 years ago

How does this differ from the other javascript NaCl implementations?

https://www.npmjs.org/search?q=nacl

skion2• 12 years ago

For one the fact that (the author of NaCL) Daniel Bernstein is backing it.

arnehormann• 12 years ago

I really doubt that, where does it say so? AFAIK, he supported the TweetNaCl in C. That does not mean anything concerning this port.

dchest3• 12 years ago

DJB wrote the original tweetnacl.c, from which this JavaScript implementation is derived. He doesn't have anything to do with the port.

dchest3• 12 years ago

It's a port of TweetNaCl (http://tweetnacl.cr.yp.to), which goal is to be tiny and auditable. If you compare C and JS implementations side-by-side, they look very similar (which was the major goal of this port).

jedisct1• 12 years ago

Javascript is also a supported target for libsodium, through Emscripten. The Javascript file size (minified/gzipped, with most operations including password hashing using scrypt) is 136K.

TweetNaCl.js doesn't have the same features set, but it is tiny, has been written in Javascript, is easy to use, well-documented, and well-maintained.

This is what Minilock uses. It is a perfect fit for this kind of applications.

girvo• 12 years ago

I've actually been looking for a small crypto library for javascript, I'm in the process of building a desktop cross-platform app using node-webkit, and this seems quite interesting!

diafygi• 12 years ago

The goal of TweetNaCl is to make an auditable crypto library, and this is a JavaScript port of the original C library.

Its goal is not to offer every cipher or algorthim, but its small size allows it to be easily included in unhosted apps like miniLock.

deckar01• 12 years ago

We ended up using tweetnacl for Stellar after switching to Ed25519. We forked it to implement generating keys from a seed.

https://github.com/stellar/tweetnacl-js/commit/063e072

dchest3• 12 years ago

Nice! I've added nacl.sign.keyPair.fromSeed in v0.11.0, though I see that I didn't define seedLength. Will do!

TweetNaCl.js

Related Stories