NaCl - Revision history

Admin: 8 revisions imported

2022-11-09T14:49:53Z

8 revisions imported

← Older revision	Revision as of 16:49, 9 November 2022
(No difference)

Admin at 18:08, 10 July 2014

2014-07-10T18:08:46Z

← Older revision		Revision as of 20:08, 10 July 2014
Line 12:		Line 12:

	=== Building a dynamic shared library from the C code ===		=== Building a dynamic shared library from the C code ===
	See [[NaCl/Shared]] for information about building a shared, dynamically linkable library. A dynamic shared library and an automated way to build one on Debian/Ubuntu systems, are also available in the repository at http://apt.ucis.nl/.		See [[NaCl/Shared]] for information about building a shared, dynamically linkable library. A dynamic shared library and an automated way to build one on Debian/Ubuntu systems, are also available in the repository at http://apt.ucis.nl/. Libsodium (http://www.libsodium.org) provides a more maintainable and up-to-date, compatible, alternative.

	=== Building only reference implementations ===		=== Building only reference implementations ===
Line 35:		Line 35:

	The C# NaCl library is currently used by the [[VNE]] library to provide [[QuickTun]] VPN tunnel functionality.		The C# NaCl library is currently used by the [[VNE]] library to provide [[QuickTun]] VPN tunnel functionality.

	~~Other partial C# ports are available at https://github.com/hanswolff/curve25519 and https://gist.github.com/CodesInChaos/3107182.~~

	== JavaScript implementation ==		== JavaScript implementation ==
Line 46:		Line 44:
	A PHP extension to support some commonly used NaCl functions is available in source form at http://oss.ucis.nl/hg/php_nacl/ and as a debian/ubuntu package at http://apt.ucis.nl/ (php5-nacl).		A PHP extension to support some commonly used NaCl functions is available in source form at http://oss.ucis.nl/hg/php_nacl/ and as a debian/ubuntu package at http://apt.ucis.nl/ (php5-nacl).

	Other PHP modules providing similar functionality are available ~~at https://github.com/Gasol/pecl-nacl (NaCl based) and https://github.com/jedisct1/libsodium-php (libsodium based)~~, providing their own, incompatible, interfaces.		Other PHP modules providing similar functionality are available, providing their own, incompatible, interfaces. See below.

	== Other implementations and bindings ==		== Other implementations and bindings ==
			* PHP (NaCl based): https://github.com/Gasol/pecl-nacl
			* PHP (libsodium based): https://github.com/jedisct1/libsodium-php
			* C# curve25519: https://github.com/hanswolff/curve25519
			* C# curve25519: https://gist.github.com/CodesInChaos/3107182
	* Python: http://mojzis.com/software/python-nacl/		* Python: http://mojzis.com/software/python-nacl/
	* Another partial JavaScript implementation: https://github.com/chriskuehl/nacl.js/		* Another partial JavaScript implementation: https://github.com/chriskuehl/nacl.js/
	* ~~Another partial~~ Java implementation (works on Android~~, too~~!): https://github.com/neilalexander/jnacl		* Partial Java implementation (works on Android!): https://github.com/neilalexander/jnacl
			* Libsodium shared library in C for Windows and *NIX: http://www.libsodium.org
	* Original implementation in C: http://nacl.cace-project.eu/		* Original implementation in C: http://nacl.cace-project.eu/

Admin: /* C# / .Net implementation */

2014-07-10T16:41:27Z

C# / .Net implementation

← Older revision		Revision as of 18:41, 10 July 2014
Line 36:		Line 36:
	The C# NaCl library is currently used by the [[VNE]] library to provide [[QuickTun]] VPN tunnel functionality.		The C# NaCl library is currently used by the [[VNE]] library to provide [[QuickTun]] VPN tunnel functionality.

	~~Another~~ partial C# ~~port is~~ available ~~[http~~://~~www~~.~~george-barwood.pwp.blueyonder.co.uk~~/~~DnsServer~~/~~DnsCrypt.cs here] as part of [http~~://~~www.george-barwood.pwp.blueyonder~~.co.uk/~~DnsServer~~/ ~~GbDns]~~.		Other partial C# ports are available at https://github.com/hanswolff/curve25519 and https://gist.github.com/CodesInChaos/3107182.

	== JavaScript implementation ==		== JavaScript implementation ==

Admin: /* PHP binding */

2014-07-10T16:25:26Z

PHP binding

← Older revision		Revision as of 18:25, 10 July 2014
Line 44:		Line 44:

	== PHP binding ==		== PHP binding ==
	~~An incomplete~~ PHP extension to support is available in source form at http://oss.ucis.nl/hg/php_nacl/ and as a debian/ubuntu package at http://apt.ucis.nl/ (php5-nacl).		A PHP extension to support some commonly used NaCl functions is available in source form at http://oss.ucis.nl/hg/php_nacl/ and as a debian/ubuntu package at http://apt.ucis.nl/ (php5-nacl).

			Other PHP modules providing similar functionality are available at https://github.com/Gasol/pecl-nacl (NaCl based) and https://github.com/jedisct1/libsodium-php (libsodium based), providing their own, incompatible, interfaces.

	== Other implementations and bindings ==		== Other implementations and bindings ==

Admin: /* C# / .Net implementation */

2014-07-10T16:21:45Z

C# / .Net implementation

← Older revision		Revision as of 18:21, 10 July 2014
Line 30:		Line 30:
	== C# / .Net implementation ==		== C# / .Net implementation ==
	This is a partial port directly from the original C sourcecode to pure ("unsafe") C# code. All code has been put into classes, and array operations had to be changed to use pointers. Only few changes had to be made to the actual logic.		This is a partial port directly from the original C sourcecode to pure ("unsafe") C# code. All code has been put into classes, and array operations had to be changed to use pointers. Only few changes had to be made to the actual logic.
	The sourcecode~~, as well as a precompiled library are~~ available at ~~http~~://~~oss~~.ucis.~~nl/nacl/~~. Note that not all code has been ported yet. More specifically, everything needed to provide [http://nacl.cace-project.eu/box.html curve25519xsalsa20poly1305 crypto-box] functionality has been ported. Signature functionality has been ported, but not published yet.		The sourcecode is available at https://bitbucket.org/IvoSmits/ucis.core as part of the UCIS.Core project. Note that not all code has been ported yet.

	Most of the ported code should be as secure as the original C code~~. The key generation procedure may be less secure, due to the use of a pseudo-random number generator (by default, depending on the .Net framework implementation)~~. The C# code performs somewhat slower than the original C code, mostly because the original code is highly optimized for specific hardware.		Most of the ported code should be as secure as the original C code. The C# code performs somewhat slower than the original C code, mostly because the original code is highly optimized for specific hardware.

	The C# NaCl library is currently used by the [[VNE]] library to provide [[QuickTun]] VPN tunnel functionality.		The C# NaCl library is currently used by the [[VNE]] library to provide [[QuickTun]] VPN tunnel functionality.

Admin: /* Other implementations and bindings */

2012-04-15T21:59:15Z

Other implementations and bindings

← Older revision		Revision as of 23:59, 15 April 2012
Line 48:		Line 48:
	== Other implementations and bindings ==		== Other implementations and bindings ==
	* Python: http://mojzis.com/software/python-nacl/		* Python: http://mojzis.com/software/python-nacl/
			* Another partial JavaScript implementation: https://github.com/chriskuehl/nacl.js/
			* Another partial Java implementation (works on Android, too!): https://github.com/neilalexander/jnacl
			* Original implementation in C: http://nacl.cace-project.eu/

Admin at 15:59, 15 October 2011

2011-10-15T15:59:05Z

← Older revision		Revision as of 17:59, 15 October 2011
Line 29:		Line 29:

	== C# / .Net implementation ==		== C# / .Net implementation ==
	This is a partial port directly from the original C sourcecode to pure ("unsafe") C# code. All code has been put into classes, and array operations had to be changed to use pointers. Only few ~~changed~~ had to be made to the actual logic.		This is a partial port directly from the original C sourcecode to pure ("unsafe") C# code. All code has been put into classes, and array operations had to be changed to use pointers. Only few changes had to be made to the actual logic.
	The sourcecode, as well as a precompiled library are available at http://oss.ucis.nl/nacl/. Note that not all code has been ported yet. More specifically, everything needed to provide [http://nacl.cace-project.eu/box.html curve25519xsalsa20poly1305 crypto-box] functionality has been ported.		The sourcecode, as well as a precompiled library are available at http://oss.ucis.nl/nacl/. Note that not all code has been ported yet. More specifically, everything needed to provide [http://nacl.cace-project.eu/box.html curve25519xsalsa20poly1305 crypto-box] functionality has been ported. Signature functionality has been ported, but not published yet.

	Most of the ported code should be as secure as the original C code. The key generation procedure may be less secure, due to the use of a ~~possibly~~ pseudo-random number generator (depending on the .Net framework implementation). The C# code performs somewhat slower than the original C code.		Most of the ported code should be as secure as the original C code. The key generation procedure may be less secure, due to the use of a pseudo-random number generator (by default, depending on the .Net framework implementation). The C# code performs somewhat slower than the original C code, mostly because the original code is highly optimized for specific hardware.

	The C# NaCl library is currently used by the [[VNE]] library to provide [[QuickTun]] VPN tunnel functionality.		The C# NaCl library is currently used by the [[VNE]] library to provide [[QuickTun]] VPN tunnel functionality.
Line 45:		Line 45:
	== PHP binding ==		== PHP binding ==
	An incomplete PHP extension to support is available in source form at http://oss.ucis.nl/hg/php_nacl/ and as a debian/ubuntu package at http://apt.ucis.nl/ (php5-nacl).		An incomplete PHP extension to support is available in source form at http://oss.ucis.nl/hg/php_nacl/ and as a debian/ubuntu package at http://apt.ucis.nl/ (php5-nacl).

			== Other implementations and bindings ==
			* Python: http://mojzis.com/software/python-nacl/

Admin: /* PHP binding */

2011-08-07T21:22:05Z

PHP binding

← Older revision		Revision as of 23:22, 7 August 2011
Line 44:		Line 44:

	== PHP binding ==		== PHP binding ==
	An incomplete PHP extension to support is available in source form at http://oss.ucis.~~ano~~/hg/php_nacl/ and as a debian/ubuntu package at http://apt.ucis.nl/ (php5-nacl).		An incomplete PHP extension to support is available in source form at http://oss.ucis.nl/hg/php_nacl/ and as a debian/ubuntu package at http://apt.ucis.nl/ (php5-nacl).

Admin: /* Building a shared library from the C code */

2011-04-09T22:22:47Z

Building a shared library from the C code

New page

"NaCl (pronounced "salt") is a new easy-to-use high-speed software library for network communication, encryption, decryption, signatures, etc. NaCl's goal is to provide all of the core operations needed to build higher-level cryptographic tools. Of course, other libraries already exist for these core operations. NaCl advances the state of the art by improving security, by improving usability, and by improving speed."

* Project website: http://nacl.cace-project.eu/
* D. J. Bernstein: http://cr.yp.to/

== Python and C implementations ==
The NaCl library was originally implemented in Python. It was ported to C afterwards, later also providing C++ language bindings. The C sourcecode is available on http://nacl.cace-project.eu/, and is used in my [[QuickTun]] VPN software.

The C code is very straight-forward, and trivial to port to C# and JavaScript.

See [[NaCl/Windows]] for information on building NaCl on Windows.

=== Building a dynamic shared library from the C code ===
See [[NaCl/Shared]] for information about building a shared, dynamically linkable library. A dynamic shared library and an automated way to build one on Debian/Ubuntu systems, are also available in the repository at http://apt.ucis.nl/.

=== Building only reference implementations ===
Sometimes it is desirable to build a generic platform independent library. In this case, it is recommended to only use the reference implementations of the provided primitives. To do so, the patch below can be used on the do script (''patch do patchfile''):
*** do.org 2011-02-27 17:47:19.997126841 +0100
--- do 2011-02-27 18:05:53.837122146 +0100
***************
*** 168,169 ****
--- 168,173 ----
implementationdir=`dirname $doth`
+ implementation=`basename "$implementationdir"`
+ if [ "$implementation" != "ref" -a "$implementation" != "ref2" ]; then
+ continue;
+ fi
opi=`echo "$implementationdir" | tr ./- ___`

== C# / .Net implementation ==
This is a partial port directly from the original C sourcecode to pure ("unsafe") C# code. All code has been put into classes, and array operations had to be changed to use pointers. Only few changed had to be made to the actual logic.
The sourcecode, as well as a precompiled library are available at http://oss.ucis.nl/nacl/. Note that not all code has been ported yet. More specifically, everything needed to provide [http://nacl.cace-project.eu/box.html curve25519xsalsa20poly1305 crypto-box] functionality has been ported.

Most of the ported code should be as secure as the original C code. The key generation procedure may be less secure, due to the use of a possibly pseudo-random number generator (depending on the .Net framework implementation). The C# code performs somewhat slower than the original C code.

The C# NaCl library is currently used by the [[VNE]] library to provide [[QuickTun]] VPN tunnel functionality.

Another partial C# port is available [http://www.george-barwood.pwp.blueyonder.co.uk/DnsServer/DnsCrypt.cs here] as part of [http://www.george-barwood.pwp.blueyonder.co.uk/DnsServer/ GbDns].

== JavaScript implementation ==
This is another partial port based on the above C# sourcecode to pure browser-compliant JavaScript. It tries to resemble the original sourcecode as close as possible. The sourcecode, as well as an usage example, is available at http://oss.ucis.nl/nacl/js/. Note that only the curve25519xsalsa20poly1305 key generation has been implemented so far - but further porting should be trivial.

The key generation procedure may be less secure than the original code, due to the use of a possibly pseudo-random number generator. Also, browsers tend to be prone to all kinds of (cross-site) scripting attacks. The code is a lot slower than the original C code, as it's dynamically interpreted. Obviously, it performs best in Google Chrome, then comes Firefox, and is just terribly slow in MSIE. But hey, it works!

== PHP binding ==
An incomplete PHP extension to support is available in source form at http://oss.ucis.ano/hg/php_nacl/ and as a debian/ubuntu package at http://apt.ucis.nl/ (php5-nacl).