Frank Denis

In libsodium, clamping *is* done during generation. `crypto_scalarmult_base()` is where it happens, right after the line you referenced.

But the secret key, as returned by the key generation function, is not clamped if this is what you mean. Mainly because we want to always do it before a...

NaCl/TweetNaCl also don't returned clamped scalars. Some implementations may do it, but clamping only before a multiplicatiton is probably the most common pattern.

```text I'm guessing you clamp it temporarily again when you perform scalarmult without the base. ``` Yes, this is obviously also done when using a non-fixed base.

Clamping not being done by the scalarmult function for an arbitrary base would delegate the responsibility to the application, which is usually what we want to avoid. Clamping being done...

Apparently not :)

Do you know whether it is using the WebAssembly code or the JavaScript one?

Sure, having smaller files can only be a good thing! And having separate builds would be great as well. As you said, most browsers support WebAssembly these days (notable exceptions...

In order to compile it, [emscripten](https://emscripten.org) needs to be installed. Then, the `make` command compiles and bundles everything. `libsodium` itself is compiled to wasm and Javascript by the `libsodium/dist-build/emscripten.sh` script....

Hi! Your `package.json` file has the version used by your project, and also lets you choose a specific version to use. If you are referring to the bundled libsodium version,...