mirror of
https://github.com/odin-lang/Odin.git
synced 2026-07-26 01:01:48 +00:00
34 lines
1.3 KiB
Markdown
34 lines
1.3 KiB
Markdown
# crypto
|
|
|
|
A cryptography library for the Odin language.
|
|
|
|
## Supported
|
|
|
|
This package offers various algorithms implemented in Odin, along with
|
|
useful helpers such as access to the system entropy source, and a
|
|
constant-time byte comparison.
|
|
|
|
## Implementation considerations
|
|
|
|
- The crypto packages are not thread-safe.
|
|
- Best-effort is make to mitigate timing side-channels on reasonable
|
|
architectures. Architectures that are known to be unreasonable include
|
|
but are not limited to i386, i486, VIA Nano 2000, ARM7T/ARM9T/Cortex-M3,
|
|
and WASM.
|
|
- Implementations assume a 64-bit architecture (64-bit integer arithmetic
|
|
is fast, and includes contant-time add-with-carry, sub-with-borrow, and
|
|
full-result multiply).
|
|
- Hardware sidechannels are explicitly out of scope for this package.
|
|
Notable examples include but are not limited to:
|
|
- Power/RF side-channels etc.
|
|
- Fault injection attacks etc.
|
|
- Hardware vulnerabilities ("apply mitigations or buy a new CPU").
|
|
- The packages attempt to santize sensitive data, however this is, and
|
|
will remain a "best-effort" implementation decision. As Thomas Pornin
|
|
puts it "In general, such memory cleansing is a fool's quest."
|
|
- All of these packages have not received independent third party review.
|
|
|
|
## License
|
|
|
|
This library is made available under the zlib license.
|