[dchest]

I wonder why they don't use golang.org/x/crypto/nacl instead of bindings to C library (libsodium-go). All primitives in it are implemented in assembly (for amd64 arch), so speed shouldn't be a concern.

[rarrrrrr]

Great question!

We really wanted to use the pure go implementation, but it doesn't cover as much functionality. Detached signatures for example.

[dchest]

Ah, yes, there are no signatures in x/crypto/nacl. There's https://github.com/agl/ed25519, however it will be slower, as there's no assembly.

Edit: oops, looks like signatures were added 2 months ago (https://github.com/golang/crypto/blob/master/ed25519/). (I guess it's the same agl's code). There is a detached version (Sign/Verify).