mundane icon indicating copy to clipboard operation
mundane copied to clipboard

Mundane is a Rust cryptography library backed by BoringSSL that is difficult to misuse, ergonomic, and performant (in that order).

Results 12 mundane issues
Sort by recently updated
recently updated
newest added

I noticed this comment, the function **sign()** will both hashing and signing the message. how can i sign the message without hashing ? Looking forward to your reply ~

Hello, I recently had the pleasure of building your crate when I noticed that the dependencies may be out of date. It would appear that mundane currently requires cmake 3.3...

The docs.rs build for 0.4.4 failed ([logs](https://docs.rs/crate/mundane/0.4.4/builds/357678)). I believe this is caused by https://github.com/rust-lang/docs.rs/issues/1303.

Per @davidben's comment [here](https://fuchsia-review.googlesource.com/c/mundane/+/486717/2/src/public/rsa/mod.rs#69): > I think you should probably think about what things you want to support and build an API around that. > > - What flavors of...

experience-hard

Currently, building Mundane requires Go 1.11+. Utilities in Go are used for three tasks: 1. Generating the interned error message bundle and its index (`crypto/err_data.c` in the build tree, from...

UPDATE: ASan has been implemented in https://github.com/google/mundane/commit/0148297bf1c5bb8ccc8acbc7abcc15cb4b53d6ee. We should still run tests with MSan, although it's less important than ASan. === old text === We should enable ASan and MSan...

experience-medium

To err on the safe side, we initially made our key objects neither `Send` nor `Sync`. However, BoringSSL provides concurrency semantics for key objects that allow us to relax these...

experience-hard

Open questions: - Presumably individual block operations should be behind a feature flag since they're low level, but we still want to be able to expose high-level cipher modes (e.g.,...

experience-hard

Currently, our error type can be printed as a string, which provides a lot of information about the error. Cryptography errors are a notorious source of information leak, as programmers...

This may have been a conscious choice to avoid but I wanted to see if it makes sense to use some type that implements `AsRef` in place of `&[u8]`? This...

experience-easy