Hacker News new | ask | show | jobs
by j-m-o 4001 days ago
Neat project.

Any particular reason you chose to roll your crypto rather than build on top of existing implementations?

https://github.com/WhisperSystems/curve25519-java

http://rosettacode.org/wiki/RIPEMD-160#Java

1 comments

Curve25519 implementation was taken from the internet. The problem I see with all the Java implementations of it, they're not reviewed by professional cryptographers. This is one the reasons why Scorex isn't production-ready.

RIPEMD implementation was taken from the internet too.

That Curve25519 implementation is by Moxie Marlinspike, and that RipeMD160 algorithm is built into BouncyCastle.

There may still be attack vectors on them, but that's about as close to "reviewed by professional cryptographers" as you're likely to get at this point.