SaaSHub helps you find the best software and product alternatives Learn more →
Top 9 JavaScript Signature Projects
-
This is great, finding NaCl (libsodium) has been a godsend, specifically the JS lib.
1 - https://nacl.cr.yp.to/
2 - https://github.com/dchest/tweetnacl-js
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
eth-crypto
Cryptographic javascript-functions for ethereum and tutorials to use them with web3js and solidity
-
Project mention: A beginner's guide to constant-time cryptography (2017) | news.ycombinator.com | 2024-02-22
I noticed in July of 2022 that Go did exactly the vulnerable example and reported it to the security team.
https://github.com/golang/go/issues/53849
It was fixed as of Go 1.21 https://go.dev/doc/go1.21
---
The article cites JavaScript, which is not constant time. There's no sure way to do constant time operations in JavaScript and thus no secure way to do crypto directly in Javascript. Browsers like Firefox depend on low level calls which should be implemented in languages that are constant time capable.
JavaScript needs something like constant time WASM in order to do crypto securely, but seeing the only constant time WASM project on GitHub has only 16 stars and the last commit was 2 years ago, it doesn't appear to have much interest. https://github.com/WebAssembly/constant-time
However, for JavaScript, I recommend Paul's library Noble which is "hardened to be algorithmically constant time". It is by far the best library available for JavaScript. https://github.com/paulmillr/noble-secp256k1
-
Project mention: Noble – Fastest 4KB JavaScript implementation of ed25519 signatures | news.ycombinator.com | 2024-07-21
-
-
There is "Signed Pages" by the debeloper of EteSync. It is a browser extension, that checks webapps based on signatures in the html file. The addon then warns the user if the signature is not correct or - if I remember correctly - the source changed. This allows you to be sure what webapp code was delivered. But it seems like it did not really get used outside of his own projects. https://github.com/tasn/webext-signed-pages
-
-
-
signature-sdk-js
Wacom’s Signature SDK library for JavaScript provides software components to capture handwritten signatures from a Web Browser.
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
JavaScript Signature discussion
JavaScript Signature related posts
-
E2EE on the web: is the web that bad?
-
Is there any tool to verify client-side website code you get served is the same as the open source version?
-
I am considering adding Skiff as an encrypted email provider and would like community feedback
-
Truly safe?
-
A browser that verifies Javascript
-
Ask HN: Should I learn the tech behind crypto even if I don't want to own any?
-
Security experts declare all Proton apps secure after security audit
-
A note from our sponsor - SaaSHub
www.saashub.com | 13 Jan 2025
Index
What are some of the best open-source Signature projects in JavaScript? This list will help you:
| Project | Stars | |
|---|---|---|
| 1 | tweetnacl-js | 1,811 |
| 2 | eth-crypto | 886 |
| 3 | noble-secp256k1 | 777 |
| 4 | noble-ed25519 | 431 |
| 5 | oauth-1.0a | 325 |
| 6 | webext-signed-pages | 190 |
| 7 | egnature | 35 |
| 8 | webverify | 18 |
| 9 | signature-sdk-js | 16 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com