ed25519-unsafe-libs
List of unsafe ed25519 signature libs (by MystenLabs)
fastcrypto
Common cryptographic library used in software at Mysten Labs. (by MystenLabs)
| ed25519-unsafe-libs | fastcrypto | |
|---|---|---|
| 5 | 1 | |
| 212 | 229 | |
| -0.5% | 1.7% | |
| 3.8 | 9.0 | |
| 6 months ago | 1 day ago | |
| Rust | Rust | |
| MIT License | Apache License 2.0 |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ed25519-unsafe-libs
Posts with mentions or reviews of ed25519-unsafe-libs.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-07-04.
-
Is my transaction signature system secure for my blockchain? (audit)
I tried to explain to you last time you asked about "your own crypto" that the answer always will be "it's not good, don't do it". First thing that strikes me is that you take public key from the provided data, which suggests a trivial attack like in https://github.com/MystenLabs/ed25519-unsafe-libs
- Vulnerability in the elliptic curve lib used by Trezor (among others)! Has this been disclosed by Trezor team?
- List of unsafe ed25519 signature libs
-
Initial impact report about this week's EdDSA Double-PubKey Oracle attack in 40 affected crypto libs
original findings and audit report by MystenLabs' Cryptography Chief + continuously updated list of affected libs: https://github.com/MystenLabs/ed25519-unsafe-libs
-
40 unsafe ed25519 libs where private key can be leaked via signing api misuse
TL;DR A new audit report revealed that the signing api of many ed25519 libs (some of them very popular) unfortunately expects a public key as input. An attacker may extract the private key by requesting two different signatures for the same message and private key, but on purpose for a different public key. Applications should not expose this api publicly and should refactor it to protect devs against accidental api misuse. Read more: https://github.com/MystenLabs/ed25519-unsafe-libs and https://blog.safeheron.com/blog/safeheron-originals/analysis-on-ed25519-use-risks-your-wallet-private-key-can-be-stolen
fastcrypto
Posts with mentions or reviews of fastcrypto.
We have used some of these posts to build our list of alternatives
and similar projects.
What are some alternatives?
When comparing ed25519-unsafe-libs and fastcrypto you can also consider the following projects:
ctf - Ctf solutions from p4 team
ecies-ed25519 - ECIES on Twisted Edwards Curve25519 using AES-GCM and HKDF-SHA256
trezor-firmware - :lock: Trezor Firmware Monorepo
ed25519-dalek - Fast and efficient ed25519 signing and verification in Rust.
libsodium - A modern, portable, easy to use crypto library.
zei - Zei is a library that provide tools to create and verify public transaction with confidential data.
rust-minisign - A pure Rust implementation of the Minisign signature tool.
paseto - Platform-Agnostic Security Tokens
snarkVM - A Virtual Machine for Zero-Knowledge Executions
gemcoin - Official Python implementation of the Gemcoin protocol.
ed25519-unsafe-libs vs ctf
fastcrypto vs ecies-ed25519
ed25519-unsafe-libs vs trezor-firmware
fastcrypto vs ed25519-dalek
ed25519-unsafe-libs vs libsodium
fastcrypto vs zei
ed25519-unsafe-libs vs ed25519-dalek
fastcrypto vs rust-minisign
ed25519-unsafe-libs vs paseto
fastcrypto vs snarkVM
ed25519-unsafe-libs vs gemcoin