This is needed in order to update dnscrypt-proxy, I've been holding off
on this until the recent release of libsodium which added support for
big-endian systems. All tests pass on i386, amd64, macppc.

OK to import?

pkg/DESCR :-

>NaCl (pronounced "salt") is a new easy-to-use high-speed software library
>for network communication, encryption, decryption, signatures, etc.
>NaCl's goal is to provide all of the core operations needed to build
>higher-level cryptographic tools.
>
>Sodium is a fork of NaCl with a compatible API. Unlike NaCl, Sodium
>performs checks for hardware features at runtime instead of compile time,
>making it suitable for packaging.

Here's some additional information from https://github.com/jedisct1/libsodium/ 
:-

>The design of Sodium's primitives is completely free from NIST (and by
>association, NSA) influence, with the following minor exceptions:
>
>    The Poly1305 MAC, used for authenticating integrity of ciphertexts,
>    uses AES as a replaceable component,
>
>    The Ed25519 digital signature algorithm uses SHA-512 for both key
>    derivation and computing message digests,
>
>    APIs are provided to SHA-512 and SHA-512/256, but are replaceable by
>    the Blake2 hash function, which the Sodium library also provides.
>
>The design choices, particularly in regard to the Curve25519
>Diffie-Hellman function, emphasize security (whereas NIST curves
>emphasize "performance" at the cost of security), and "magic constants"
>in NaCl/Sodium are picked by theorems designed to maximize security.
>
>The same cannot be said of NIST curves, where the specific origins of
>certain constants are not described by the standards and may be subject
>to malicious influence by the NSA.
>
>And despite the emphasis on higher security, primitives are faster
>across-the-board than most implementations of the NIST standards.

Attachment: libsodium.tgz
Description: application/tar-gz

Reply via email to