Questions tagged [nacl]

NaCl (an abbreviation of Networking and Cryptography library, pronounced "salt"), is a library for network communication, encryption, decryption and signatures.

Filter by
Sorted by
Tagged with
3
votes
1answer
111 views

Can I HMAC my plaintext for use as a NACL SecretBox nonce?

I'm writing an application that needs to deterministically encrypt some data (where two equal ciphertexts will produce two equal plaintexts; this is acceptable and in fact desirable for this ...
0
votes
0answers
88 views

Test the multiplicative inverse of a ed25519 secret key in pynacl

I choose a random ed25519 secret key sk_enc and calculate the multiplicative inverse sk_inv_enc of integer sk_env modulo L. Then i compute the scalar product of a standard group element and the ...
1
vote
2answers
99 views

Replay Safe Mutual Authentication (libsodium)

I am working on an end-to-end encrypted messaging application as an educational activity with some of my extra time. I have chosen to use libsodium for the underlying crypto. I have run into a hang-up ...
0
votes
1answer
133 views

derived key from email + password?

When deriving a private key from a password, will the resulting secret key be any weaker if the user email is included in the function input? Meaning, user email concatenated with the user password. ...
1
vote
0answers
88 views

Why don't the nacl public key primitives for signatures and authenticated encryption use the same keys?

The nacl.cr.yp.to source code has separate methods for doing public key encryption: https://nacl.cr.yp.to/box.html and for verifying signatures: https://nacl.cr.yp.to/sign.html I would expect that a ...
0
votes
2answers
119 views

Confidentiality and Authenticity of the Key in a Key-Value Store

What, if anything, can be used to provide confidentiality and authenticity guarantees for the storage keys used to store data in a key-value store? To be clear what I mean by the storage keys - I ...
0
votes
2answers
1k views

BLAKE2b 256 or 512?

I'd like to use a hash function for file integrity checking and am influenced by the choice of BLAKE2b as the default hash function in Sodium. My library gives me the option of choosing digests ...
6
votes
1answer
972 views

How to restrict dlopen() from or to certain paths?

If I want to disable execution of programs on a filesystem, I can use the noexec mount option. However, this doesn’t works with dynamic libraries loaded throughdlopen(). So what is the way to do it ...
1
vote
1answer
1k views

How does (Py)NaCl work exactly?

At the moment, I deal with PyNaCl (Docs) and have a question about it: My situation is that I want to create a server that interacts with clients. Both the server and the client will have a long-term ...