A security review of the D library Crypto

aberba karabutaworld at gmail.com
Sat Jul 4 20:32:14 UTC 2020


On Saturday, 4 July 2020 at 15:49:25 UTC, Cym13 wrote:
> On Saturday, 4 July 2020 at 14:37:41 UTC, H. S. Teoh wrote:
>> I'm not the author, but I'm curious about the D implementation 
>> of Botan (https://code.dlang.org/packages/botan) -- how is its 
>> security level?  I glanced at it before and it seemed OK, but 
>> it'd be really nice to have a 3rd party opinion, esp. from 
>> someone who's skilled with cryptanalysis.
> [...]
> So, to conclude, based on that preliminary look alone I would 
> feel confident about recommending Botan since I don't expect 
> any major issue. But I'll still need to find the time to 
> properly review it someday, be it only for my own peace of mind.
>
> [1]: https://github.com/etcimon/botan/wiki


The README also mentions one should submit algorithmic issues to 
the C++ tracker. Seems there's quite a number of reported bugs 
which may or may not affect the D side.

https://github.com/randombit/botan/issues


More information about the Digitalmars-d-announce mailing list