threema-ch/threema-web

Replace cryptography with something better

paulmillr opened this issue · 0 comments

paulmillr commented

tweetnacl:

  1. Was audited
  2. Accepts forged signatures with $S >= L$, doesn't have SUF-CMA
  3. Is slow

noble-curves:

  1. Was also audited
  2. Does not accept forged signatures
  3. Is much faster
  4. Has readable codebase instead of low-level garbage