jdgcs / tweetnacl-go

TweetNaCl crypto library port to the Go language

tweetnacl-go: version 1.00.0

TweetNaCl - GO port

tweetnacl-go is a port of Dan Bernstein's TweetNaCl "crypto library in a 100 tweets" code to the Go language. It is implemented as a wrapper around the original code to preserve the design and timing characteristics of the original implementation.

Version Info

tweetnacl: 20140427

tweetnacl-go: 1.00.0

Disclaimer

The Go wrapper has been kept as 'thin' as possible to avoid compromising the careful design and coding of the original TweetNaCl implementation. However, cryptography being what it is, the wrapper may have (entirely inadvertently) introduced non-obvious vulnerabilities (for instance How to zero a buffer). So ....

USE ENTIRELY AT YOUR OWN RISK !

Notes

1. There is an existing port of TweetNaCl to Go (go-tweetnacl) which reimplements the C code in Go.
2. The cgo FFI doesn't handle zero length byte arrays particularly elegantly (see discussion at Passing zero length Go byte array to a C function). The conversion to a (*C.uchar) pointer has been abstracted into a convenience function makePtr, which includes a commented out version that returns nil for a zero length array if you prefer not to use the esoteric 'unsafe' version.

TODO

1. Fork go-tweetnacl and merge code

References

1. TweetNaCl
2. [TweetNaCl: A crypto library in 100 tweets] tweetnacl-pdf
3. [Cryptography in NaCl] nacl-pdf
4. TweetNaCl: How cr.yp.to’s developers got carried away by the carry bit
5. NaCl: Cryptography for the Internet
6. On NaCl: Undefined Behaviour
7. Safe, Efficient, and Portable Rotate in C/C++
8. How to zero a buffer
9. Zeroing buffers is insufficient
10. How to zero a buffer: Erratum
11. go-tweetnacl
12. On the Impending Crypto Monoculture
13. Passing zero length Go byte array to a C function