Sodium_compat
Security and privacy
cryptography library
SHOW HN2017
How HN took it
2 positive, 0 neutral or asking, 0 mixed, 2 critical, out of 4 comments about the project.
Privacy: 0 for, 2 againstIdea: 2 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Lesser-of-two-evils approach to bringing modern signatures to PHP
From 1 comment
You seem to have taken a "lesser of two evils" approach and that's probably a good idea. Side channels are not as bad as completely broken crypto, as long as the critical…
exDM69 on HN
Maker committed to not tagging v1.0.0 if it cannot be made secure
From 1 comment
You seem to have taken a "lesser of two evils" approach and that's probably a good idea. Side channels are not as bad as completely broken crypto, as long as the critical…
exDM69 on HN
Objections
Side-channel and constant-time risks from implementing crypto in an interpreted language
From 2 comments
Curve25519 in pure PHP? Yikes. Have you done any measurements to verify that the implementation is constant time?…
zx2c4 on HNYikes indeed. Implementing crypto primitives in an interpreted language is full of hazards for side channel attacks - being constant time is just the first step. Cache behavior,…
exDM69 on HN
Pure PHP crypto is a poor justification for a new crypto library
From 1 comment
Yikes indeed. Implementing crypto primitives in an interpreted language is full of hazards for side channel attacks - being constant time is just the first step. Cache behavior,…
exDM69 on HN
Requests
Measurements showing the implementation is constant time
From 1 comment
Curve25519 in pure PHP? Yikes. Have you done any measurements to verify that the implementation is constant time?…
zx2c4 on HN
Third-party audit
From 1 comment
> Implementing crypto primitives in an interpreted language is full of hazards for side channel attacks - being constant time is just the first step. Cache behavior, branch…
CiPHPerCoder on HN
Questions
How to measure timing leaks in PHP code
From 1 comment
I'm aware of the recent curve25519-donna on 32-bit MSVC research, but PHP uses a different instruction than llmul (smull), so I'm not sure if that particular research is a…
CiPHPerCoder on HN
Alternatives named
Native libsodium PHP extension
From 1 comment
Yikes indeed. Implementing crypto primitives in an interpreted language is full of hazards for side channel attacks - being constant time is just the first step. Cache behavior,…
exDM69 on HN