Hacker News new | ask | show | jobs
by tgalal 487 days ago
> At this point, we could try to review all of curve25519-dalek for implementation flaws, but that would take a long time and make for an excruciatingly dull read

> At some point in the future, I should review curve25519-dalek in detail to ascertain its quality.

Not sure if you noticed, signal uses their own fork of curve25519-dalek with "lizard" extension, IIRC primarily for groups: https://github.com/signalapp/curve25519-dalek/tree/main/curv...

I guess the diff makes an easier starting point than the entire library.

Thank you for the always very informative and insightful posts!