Dropping TweetNaCl about chloride HOT 7 OPEN

Browser core is very dependant on sodium-browserify to have web assembly working. JS is insanely slow compared to web assembly. So I don't really care about tweetnacl. I would actually like to get rid of tweetnacl as that makes the bundle smaller. So big +1 from me :-) Great work @christianbundy.

And thanks for the ping @staltz I didn't have notifications turned on for this repo until now.

from chloride.

🎉

All of our required functionality has been released in Sodium-Javascript!

from chloride.

I didn't realize that we actually have at least three providers:

• Browser:
  • Big: libsodium-wrappers (emscripten)
  • Small: TweetNaCl
• Node.js: Sodium-Native

I took the various chloride-* modules and pulled their histories together to create one (much smaller) repository that uses Sodium-Universal, but unfortunately there are a few functions missing. More info here: sodium-friends/sodium-javascript#19

Here's my branch: https://github.com/christianbundy/chloride/tree/sodium-universal

Compatibility:

• crypto_sign_PUBLICKEYBYTES
• crypto_sign_SECRETKEYBYTES
• crypto_sign_seed_keypair
• crypto_sign_keypair
• crypto_sign_BYTES
• crypto_sign
• crypto_sign_open
• crypto_sign_detached
• crypto_sign_verify_detached
• crypto_box_PUBLICKEYBYTES
• crypto_box_SECRETKEYBYTES
• crypto_box_seed_keypair
• crypto_box_keypair
• crypto_box_MACBYTES
• crypto_box_easy
• crypto_box_open_easy
• crypto_secretbox_easy
• crypto_secretbox_open_easy
• crypto_auth_BYTES
• crypto_auth
• crypto_auth_verify
• crypto_hash_BYTES
• crypto_hash
• crypto_hash_sha256_BYTES
• crypto_hash_sha256
• crypto_scalarmult_BYTES
• crypto_box_PUBLICKEYBYTES
• crypto_sign_ed25519_pk_to_curve25519
• crypto_box_SECRETKEYBYTES
• randombytes_buf

from chloride.

@arj03 What are you relying on in the SSB browser demo?

from chloride.

Sweet. I'm curious to benchmark libsodium-wrappers (emscripten) vs sodium-javascript (handwritten) once all of the methods are ported. If we can just depend on sodium-universal that'd remove lots of complexity from this module and consolidate our libsodium dependencies to the sodium-friends org.

from chloride.

I ran sodiumperf against libsodium-wrappers and sodium-javascript and it looks like this might actually give us a nice performance boost:

• libsodium-wrappers.txt
• sodium-javascript.txt

(This assumes that my PRs into sodium-javascript are merged, and currently leaves out crypto_sign_ed25519_pk_to_curve25519 because I've only written tests, not the implementation.)

from chloride.

Have read this, but haven't got super familiar with details. Please tag me if you need my attention on this.

FWIW I'm mainly using graphql to connect from browser to back end, so don't use eg ssb-client which needs this much.
Happy to trust your expertise

from chloride.