NSec for XChaCha20Poly1305 and Ed25519?

[wegel]

Hi,

Since you're mentionning that you're searching for a managed library implementing XChaCha20Poly1305, have you thought about using NSec (https://nsec.rocks/)? It's not managed per se, as it's a wrapper around libsodium (although a pretty thin one, and which follows the same philosophies as libsodium for memory allocations, etc), so maybe you're not willing to consider it. But using libsodium, to me, makes sense, as its implementation of the algorithms can be trusted, and that's crucial for a cryptography library.

It also has an implementations of Ed25519 and BLAKE2b. The XChaCha20Poly1305 implementation is in the Experimental namespace, but that's just because the specs for the algorithm itself are not so clearly defined.

By using NSec and System.Text.Json (instead of simple-json), you wouldn't have any external dependencies which, again, to me is an interesting feature for anything that's supposed to be secure.

I'm not affiliated with NSec in any way, I was just searching for a Paseto lib today, found yours, and saw what would be possible.

Thanks for considering it!