sodiumpp issues

[API] Use std::vector<uint8_t> instead of std:string

8

When looking through the design of sodiumpp, I'm curious of the choice of std:string. I would have thought that the more natural format for binary data (or UTF-8 encoded text),...

da2ce7

size_t calculations can overflow leading to memory errors, memleaks

If we pass a huge string m, with m.size() almost the maximum size (maximum value of size_t), then calculations will overflow e.g. in ``` size_t mlen = m.size() + crypto_box_ZEROBYTES;...

tigusoft-vm

Boxer for secret sharedkey

2

Boxer/unboxer can now work with a secret preshared key, instead of my privkey + his pubkey. Done as other constructor. Needed to move stuff to a base class so it's...

tigusoft

Usage of mlock() happens after the data is written to unlocked mem

1

In cases like below, we first write the secret data into variable k (in initialization list), and after that we lock this memory location. This means that for a short...

tigusoft-vm