Hacker News new | ask | show | jobs
by aurorabbit 2937 days ago
I began work on a project for exactly this 2 months ago.

https://aurorabbit.github.io/emojicrypt.com/

It encrypts messages with a passphrase using scrypt, AES-GCM, and sha256 for an HMAC.

Each v1 protocol message includes a salt/iv, scrypt N&r, HMAC, and whether or not to lower-case the password. All messages encrypted with the proof-of-concept will be decrypt-able by all future clients, as there's room for 13 more protocol versions.

The code is in complete disarray, and I wouldn't want anyone to sift through it in it's current state[1], but the proof-of-concept is finished, and life came up, so it's been sitting since.

I have a list of features[2] I want to add in the issues tracker :)

[1] if you do want to sift through it don't miss https://github.com/aurorabbit/libemojicrypt. I separated the repos without following through on that reorganization.

[2] https://github.com/aurorabbit/emojicrypt.com/issues

1 comments

What's the point of HMAC when you already authenticate with GCM?
More buzzwords.