Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

how is this better than keyczar?

keyczar is about to support python 3 (there's a patch) and i was planning to make simple-crypt delegate to keyczar (or just delete the project entirely, since its only reason for existence was nothing better existed on python 3, but people seem to be using it). should i delegate to this instead of keyczar? what is the difference?

http://www.keyczar.org/ https://pypi.python.org/pypi/simple-crypt



Keyczar is a library with similar goals to NaCl: relative ease-of-use for authenticated encryption.

NaCl is using more modern cryptographic algorithms (e.g. XSalsa20, Poly1305, and Curve25519). These provide faster encryption with smaller keys.

The elliptic curve cryptography, most notably, provides keys an order of magnitude (or two) smaller than what's available today with Keyczar/NaCl.

Also, the NSA recommends you switch from RSA to ECC:

http://www.nsa.gov/business/programs/elliptic_curve.shtml


Keyczar has support for Java, Python, and C++ and uses the usual suspect standardized algorithms: AES, RSA, DSA, HMAC-SHA1. Google has been pretty active in maintaining Keyczar lately. ECC support should be added at some point.

As bascule said, NaCl / Sodium are using DJB's suite of algorithms, which are going to be faster and have smaller key sizes.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: