secretbox

Rust-only implementation of NaCl/Libsodium's secure networking protocol used in multiple network protocols

secretbox vs sodiumoxide — which to use?

This crate only implements the secretbox algorithm. If you need to use other features from the libsodium library, you currently need to use sodiumoxide.

secretbox does not contain assembly-level optimization for its cryptographic primitives right now. However its algorithms are fast enough for real-time voice encryption (see below for benchmarks).

secretbox is does not use C-bindings which might be hard to build on some systems. Libsodium, the C-library used by sodiumoxide, sometimes changes some of its source tarballs, causing build failures.

secretbox is not hardened against timing attacks. However it likely does not affect security as the secret that could potentially be leaked is different for every single sealed box.

Built with

• uint
• x25519_dalek

Contributing

Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.

Versioning

We use SemVer for versioning.

Authors

• Charlotte D darkkirb@gmail.com - initial work

License

This project is licensed under the 2-Clause BSD License - see the LICENSE file for details.

Benchmark results

Chacha20

Poly-1305 (1KB)

Salsa20

Seal 1KB (default Salsa20 Poly-1305)