[zeromq-dev] Defaulting to tweetnacl?

Pieter Hintjens ph at imatix.com
Tue Mar 1 14:22:08 CET 2016


Frank,

Thanks for your opinion. You hit it spot on, I think. It is really a
relief to have security by default without any external packages.

Roland, would this work? Package for Debian using libsodium?

-Pieter

On Tue, Mar 1, 2016 at 12:03 PM, frank <soundart at gmx.net> wrote:
> Hi,
>
> I added tweetnacl to libzmq in 2014 and would like to add my opinion too.
>
> tweetnacl as it is integrated now is very nice for people starting with
> compiling from source
> e.g. developers using higher level languages like python and requiring
> latest code changes.
> - it will just work and produce not too many problems.
>
> Removing tweetnacl from the libzmq source distribution and using e.g. a
> tweetnacl debian package for debian libzmq will hurt in  two ways:
>
> - There will be again libzmq builds without encryption at all
> - libzmq on debian will not use libsodium and probably have a slower libzmq
>
> So i would say:
>
> - Make tweetnacl default for source builds and leave it inside the
> libzmq tar ball.
> - Add a recommendation to the documentation advising people producing
> binary packages to link to libsodium
>
> kind regards
>   Frank
>
>
>
>
>
>
>
>
>
>
>
>
>
> _______________________________________________
> zeromq-dev mailing list
> zeromq-dev at lists.zeromq.org
> http://lists.zeromq.org/mailman/listinfo/zeromq-dev



More information about the zeromq-dev mailing list