[Resource Topic] 2011/646: The security impact of a new cryptographic library

Welcome to the resource topic for 2011/646

Title:
The security impact of a new cryptographic library

Authors: Daniel J. Bernstein, Tanja Lange, Peter Schwabe

Abstract:

This paper introduces a new cryptographic library, NaCl, and explains how the design and implementation of the library avoid various types of cryptographic disasters suffered by previous cryptographic libraries such as OpenSSL. Specifically, this paper analyzes the security impact of the following NaCl features: no data flow from secrets to load addresses; no data flow from secrets to branch conditions; no padding oracles; centralizing randomness; avoiding unnecessary randomness; extremely high speed; and cryptographic primitives chosen conservatively in light of the cryptanalytic literature.

ePrint: https://eprint.iacr.org/2011/646

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .