MImiketery·May 2, 2024
This is great, finding NaCl (libsodium) has been a godsend, specifically the JS lib.
1 - https://nacl.cr.yp.to/
2 - https://github.com/dchest/tweetnacl-js
In Online Cryptography Course (2017)dchest
tweetnacl-js
JavaScript2017–2024
dchest / tweetnacl-js
tweetnacl-js
Port of TweetNaCl cryptographic library to JavaScript
9Distinct people
9Mentions
0Explicit recommenders
1.9KGitHub stars
What to know before exploring
What it is
Port of TweetNaCl cryptographic library to JavaScript
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year9 dated mentions
Observed mentions: 2017-06-14 20:22:59 UTC to 2024-05-02 18:52:14 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
9 sourcesWorking with encryption more broadly will equip you to understand the fundamentals that underpin the web3/crypto world: hashes, asymmetric crypto, signatures, signature chains, etc. And this knowledge also has many uses, of course, outside the web3 realm.
If you're working with Node, tweetnacl.js (https://github.com/dchest/tweetnacl-js) gives you secure defaults and a nice API to start learning and building with. Otherwise, look for a nacl/libsodium library in your language of choice.
Once you're familiar with this stuff, blockchains/cryptocurrency/web3 lose a lot of their mystery. They're essentially all just different takes on using key management and signature chains to verify identities and
maintain immutable action logs.
In Ask HN: Should I learn the tech behind crypto even if I don't want to own any?JS porting:
https://github.com/dchest/tweetnacl-js
Java porting:
https://github.com/InstantWebP2P/tweetnacl-java
In TweetNaCl: A crypto library in 100 tweets> Libsodium (a fork of NaCl) is preferable to NaCl.
Can you elaborate on this? Quickly looking over your libsodium based sodium-plus it doesn't seem like it has been audited. (I know libsodium itself had an audit)
Where as for example tweetnacl-js [0] has been audited.
That's not meant to take a dump on your project, but I just don't understand why it is better, or preferable.
[0]: https://github.com/dchest/tweetnacl-js#audits
In Twinkle Notes: Cross-platform encrypted notes appI haven't! This is what our server team is looking at as an option for encrypting our RTC traffic.
https://tweetnacl.js.org/
https://github.com/dchest/tweetnacl-js/wiki/Examples
In OT and CRDT trade-offs for Real-Time collaborationWhy would I use your library over the tried and true https://github.com/dchest/tweetnacl-js
?
In Tanker: End-to-End Encryption SDK for JavaScriptSeems like the right library to post is https://github.com/dchest/tweetnacl-js which actually has been security audited
In Show HN: Saltshaker-Crypto, NPM to Sign, Verify, Encrypt and Decrypt with NaclTweetnacl (http://tweetnacl.cr.yp.to/) would be a good candidate for porting to Rust, since it's very small. Others have done it successfully in other languages: https://github.com/dchest/tweetnacl-js
Someone has given it an attempt: https://github.com/jmesmon/sodalite But the port doesn't seem to be too mature yet.
(Edit: For those not aware, Libsodium is based on a portable rewrite of NaCl.)
In Zbox – Zero-knowledge, privacy-focused embeddable file system written in RustThat's a fun toy.. and a great example of how easy it is to get crypto wrong. I'm just guessing here, but you are probably missing some key derivation like PBKDF2.
Edit: For this something like tweetnacl is probably more foolproof, checkout:
https://github.com/dchest/tweetnacl-js
Or libsodium which can also be compiled to pure js:
https://github.com/jedisct1/libsodium.js
In Show HN: Password-protect a static HTML page