libsodium-sys is deprecated #127

New issue

Open

opened 2021-10-22 09:30:40 +00:00 by quentin · 0 comments

quentin commented

2021-10-22 09:30:40 +00:00

Owner

We use lx/netapp that uses a secret handshake library named kuska handshake that in turns use libsodium-sys, a deprecated binding of libsodium in Rust.

A today trend on Rust is to reimplement cryptography directly in Rust (instead of using bindings). ssb-handshake could be a replacement for us as it also implements the same Secret Handshake protocol. It is based on ssb-crypto that uses native crypto (eg. ed25519-dalek).

But ssb-handshake lacks many async primitives provided by kuska handshake which prevents us from migrating to it in the near future.

This issue is duplicated on lx/netapp

We use lx/netapp that uses a secret handshake library named [kuska handshake](https://github.com/Kuska-ssb/handshake) that in turns use [libsodium-sys](https://github.com/sodiumoxide/sodiumoxide), a deprecated binding of libsodium in Rust. A today trend on Rust is to reimplement cryptography directly in Rust (instead of using bindings). [ssb-handshake](https://github.com/sunrise-choir/ssb-handshake) could be a replacement for us as it also implements the same Secret Handshake protocol. It is based on [ssb-crypto](https://github.com/sunrise-choir/ssb-crypto) that uses native crypto (eg. [ed25519-dalek](https://github.com/dalek-cryptography/ed25519-dalek)). But `ssb-handshake` lacks many `async` primitives provided by `kuska handshake` which prevents us from migrating to it in the near future. This issue is duplicated on lx/netapp