You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Lune currently does not include any methods for generating cryptographically random numbers. For example, Node.JS provides the following APIs:
// Generates a random number of bytes of `size` and triggers `callback`crypto.randomBytes(size,callback);// Asynchronously fills `buffer` with random values and triggers `callback`crypto.randomFill(buffer[,offset[,size]],callback);
It is difficult to implement many cryptographic algorithms with the lack of such APIs.
Implementation
We would have to interface with rust-random and expose Lune APIs in a crypto built-in which achieves this. That would potentially also involve moving existing hashing methods present in the serde built-in, which would be a breaking change.
The text was updated successfully, but these errors were encountered:
I am firmly against this for the same reason I'm again including password hashing algorithms in Lune. It feels like a mistake to give people the tools they need to make worse security decisions.
Lune currently does not include any methods for generating cryptographically random numbers. For example, Node.JS provides the following APIs:
It is difficult to implement many cryptographic algorithms with the lack of such APIs.
Implementation
We would have to interface with
rust-random
and expose Lune APIs in acrypto
built-in which achieves this. That would potentially also involve moving existing hashing methods present in theserde
built-in, which would be a breaking change.The text was updated successfully, but these errors were encountered: