#libsodium — Public Fediverse posts

Question to my fellow #Django friends:

Is there a good zero trust framework for E2EE Django applications?

Ideally with a decryption UX that doesn't require a PhD…

#django #python #libsodium #security #e2ee #infosec #ccc

Лицензионный ключ на 202 символа: почему не Ed25519 и не RSA

Понадобилось научить десктопную программу принимать лицензионные ключи: строка из письма вставляется руками и проверяется без интернета. Во что это вылилось?

https://habr.com/ru/articles/1063734/

#ecdsa #ed25519 #net #c# #цифровая_подпись #лицензирование #криптография #BouncyCastle #libsodium #base32

Can you derive a NaCl key pair from an audio file?
Yes, of course.
Is that secure?
I wouldn't use it in a production environment, but it's fun.

https://codeberg.org/mark22k/resonancekey

#libsodium #libsndfile #NaCl #Security #Cryptography

g'damit. why is it that even #ubuntu 25.10 still only has #libsodium v1.0.18? 1.0.20 is even getting stale (actually i just checked v1.0.21 is out since two weeks) and all i need is only 1.0.19, breaks my CI/CD pipeline.

Communication from the #Haskell Cryptography Group: "A vulnerability in #libsodium 's validation of ed25519 elliptic curve points: You are likely not affected"

https://haskell-cryptography.org/blog/libsodium-vulnerability-ed25519-valid-points/

A Vulnerability in Libsodium

https://00f.net/2025/12/30/libsodium-vulnerability/

#HackerNews #Libsodium #Vulnerability #Security #Cybersecurity #OpenSource #TechNews

The last 2 weeks I worked on a little project.
I had lots of fun with it.
It's a cache that is tranparently encrypted by default and it has fine-grained access control based on policies. You interact with it via a HTTP API documented with OpenAPI.

In the background it uses the fantastic #libsodium library for password hashing and encryption!
libsodium is very easy to use and I can whole heartedly recommend it!

Maybe it'll be useful to some of you: https://github.com/hw0lff/senke

Have fun! :blahaj:

I'm trying my hand at libsodium at the moment, but it can be quite nerve-wracking.

#libsodium

so i documented this whole #brew #libsodium issue here: https://github.com/stef/pysodium/issues/116

and in my perspective this is something that should be fixed by brew and python ctypes, not every downstream module that uses ctypes to bind libraries. thanks for all the insightful inputs to my scream for sanity

#mac users, help! i'm going crazy, when you install #libsodium using #brew, it installs the library in /opt/homebrew/Cellar/libsodium/<version>/lib/libsodium.dylib but apparently not in /usr/lib or /usr/local/lib, so nothing finds it, and as a build script that has sodium as a dependency has to guess the versions and the path where brew installed the library. this makes no sense, what am i missing, and how is this supposed to work? what kind of madness is this?

SOLVED: see follow-up post.

I've published my first version of the debugging tool that causes large corporations to scream and run away:

https://crates.io/crates/breakmancer is a secure¹ reverse shell, allowing you to drop a breakpoint into any build script.

Your build can pause, reach out to your laptop and let you poke around, and then resume where it left off. Incredibly useful.

It's written in #Rust and uses some basic #libsodium cryptography to secure the connection. I'd like to get a security audit (any volunteers? it's a pretty small program!) and expand to include plugins for languages that support REPLs, such as Python, Javascript, and Clojure.

¹ Maybe. Pending that audit.

The #Haskell Cryptography Group calls for early adopters of its #libsodium, #botan and one-time-password libraries! https://discourse.haskell.org/t/call-for-early-adopters-of-sel-botan-and-one-time-password/9326

`gcc` has a fun `-Ofast` optimization option.

Did you know it breaks `C` and `IEEE-754` conformance not just for code you compile with `-Ofast` but for everything else in your address space?

I did not either and found it only after `libsodium` project enabled it by default.

A few words on breakage mechanics: https://trofi.github.io/posts/302-Ofast-and-ffast-math-non-local-effects.html

#libsodium #bug

wooohooo there is a new libsodium out! finally with HKDF support! been years without a proper release. kudos to @jedisct1 <3

https://github.com/jedisct1/libsodium/releases/tag/1.0.19-RELEASE

i love this part:
> libsodium can now be added as a dependency to Zig projects.

#libsodium #crypto #hkdf

Are there any #Scheme libraries for #LibSodium and/or #Age?

If not, that would probably be very desirable, right?

https://github.com/jedisct1/libsodium

https://age-encryption.org/

ping @Sandra

#Security #Cryptography

Spend the day programming with #libsodium and I have to say that it's a really great lib for crypto stuff. Secure defaults, very few interfaces and way less possibilities to shot ones into the foot compared to #OpenSSL.

Downside is actually the documentation. PDF or web pages which are sometimes even incomplete. Heck, what do I miss #OpenBSD 's Section 2/3 man pages. Especially the ones provided by schwarze@ are always crystal clear, up to the point and mention every caveat.

@[email protected] and I are having a friendly debate on lobster.rs about #JavaScript #cryptography libraries (I have a lot of respect for Soatok). So I'm curious.

If you were to implement a JavaScript cryptography library, which would you choose, and why?

#OpenPGP #NaCl #libsodium

https://github.com/jedisct1/libsodium.js/tree/abc0e40a95b8a2874533c626bd7d2a5aad5e65e5/wrapper/symbols

#cheatsheet #libsodium #cryptography

Trying to figure out the best architecture of using #libsodium in browser.
Sadly it seems like I can't quite write a library as a separate JS file and let people include both.
I think that for demonstration purposes I shall write inline <script> tag, but later on as I migrate to webpack / typescript, I shall use webpack or whatever there is.

https://github.com/jedisct1/libsodium.js/

The #HushChat Protocol takes the ideas of the #Signal Protocol and implements them on top of the improved #Zcash Protocol inside of #HUSH using the very latest advancements in encrypted messaging. We use #libsodium crypto_secretstream. No phone numbers required , so enjoy some #privacy and #security because you deserve it :)

#opensource #crypto #zksnarks #anonymous #blockchain #cryptocurrency