Use an up-to-date `libsodium`
Opened this issue · 0 comments
darosior commented
We use libsodium
, a vouched crypto library, as our Noise backend.
The Rust wrapper we are using, sodiumoxide
will no longer update libsodium unless this is a security update.
Maybe we could migrate to another resolver for snow
, but ring
isn't an option and the default resolver brings many more dependencies (30 more!). Maybe we could also eventually upstream a resolver which uses the rust wrapper of libhydrogen
.
An alternative is to use an updated wrapper for libsodium, which the author maintains in a fork: https://github.com/jedisct1/libsodium-sys-stable.