drr00t/tweetnacl-cs

A 100% native C# implementation of TweetNaCl for .NET

#TweetNaCl-cs

Branch	Build	Code Cover
master	.Net Mono	Coveralls

About Project

A C# port of original TweetNaCl C language implementation version 20140427.

⚠️ The library is not stable yet and API will change and was not independently reviewed. If you can help reviewing it, please [contact me](mailto:adribeiro (at) gmail.com).

##Documentation

• Overview
• Installation (todo)
• Usage
  • Public-key authenticated encryption (Box)
  • Secret-key authenticated encryption (SecretBox)
  • Scalar Multiplication
  • Signatures
  • Hashing
  • Random bytes generation
  • Constant-time comparison
• Contributors
• Who is using

Public-key authenticated encryption (box)

Implements curve25519-xsalsa20-poly1305.

Byte[] CryptoBoxKeypair(Byte[] secretKey)

The CryptoBoxKeypair function randomly generates a secretKey and a corresponding public key. The secretKey array must have size equal to crypto_box_SECRETKEYBYTES

Byte[] CryptoBox(Byte[] message, Byte[] nonce, Byte[] publicKey, Byte[] secretKey)

The function encrypts and authenticates a message using the nonce, receiver´s publicKey and sender´s secretKey.

Byte[] CryptoBoxOpen(Byte[] cipheredMessage, Byte[] nonce, Byte[] publicKey, Byte[] secretKey)

The function verifies and decrypts a cipherMessage using the receiver's secretKey, the sender's publicKey, and a nonce.

Byte[] CryptoBoxBeforenm(Byte[] publicKey, Byte[] secretKey)

Applications that send several messages to the same receiver can gain speed by splitting CryptoBox into two steps, CryptoBoxBeforenm and CryptoBoxAfternm.

Byte[] CryptoBoxAfternm(Byte[] message, Byte[] nonce, Byte[] k)

Byte[] CryptoBoxOpenAfternm(Byte[] cipheredMessage, Byte[] nonce, Byte[] k)

Byte[] CryptoSignKeypair(Byte[] secretKey)

Byte[] CryptoSign(Byte[] message, Byte[] secretKey)

Byte[] CryptoSignOpen(Byte[] signedMessage, Byte[] publicKey)

Byte[] CryptoScalarmult(Byte[] n, Byte[] p)

Scalar multiplication is a curve25519 implementation.

Byte[] CryptoScalarmultBase(Byte[] n)

The CryptoScalarmultBase function computes the scalar product of a standard group element and an integer n

##Third-party libraries

##Who is using

##License This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0. If a copy of the MPL was not distributed with this file, You can obtain one at http://mozilla.org/MPL/2.0/.

tweetnacl-cs's Issues

implement new methods to receive string base64

implement new methods to receive string base64

automate tests execution

automate tests execution

Write more testes to check every error mapped in NaCl documentation.

http://nacl.cr.yp.to/index.html

• Public-key cryptography:
• Secret-key cryptography:
• Low-level functions:

add more tests to validate against another implementations

CryptoHash result differs from SHA512

The implementation of CryptoHash contains a bug for larger messages.

    public void TestHash512Check()
    {
        // Setup
        var message = new byte[]
        {
            0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
            0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
            0x20, 0x21, 0x22, 0x23, 0x24, 0x25, 0x26, 0x27, 0x28, 0x29, 0x2a, 0x2b, 0x2c, 0x2d, 0x2e, 0x2f,
            0x30, 0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0x3a, 0x3b, 0x3c, 0x3d, 0x3e, 0x3f,
            0x40, 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, 0x49, 0x4a, 0x4b, 0x4c, 0x4d, 0x4e, 0x4f,
            0x50, 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58, 0x59, 0x5a, 0x5b, 0x5c, 0x5d, 0x5e, 0x5f,
            0x60, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0x6a, 0x6b, 0x6c, 0x6d, 0x6e, 0x6f,
        };
        var output = new byte[64];

        // Test
        TweetNaCl.TweetNaCl.CryptoHash(output, message, message.Length);

        // Check
        byte[] check;
        using (var sha512 = SHA512.Create())
        {
            check = sha512.ComputeHash(message);
        }
        Assert.Equal(check, output);
    }

porting to .NET Core

build automation with travis

build automation with travis

use fake as build system

use fake as build system

redesign the API to be more suitable to integrations

• isolate asymmetric encryption
• isolate symmetric encryption
• may be separate encryption from decryption.

add support to code cover

try appveyor or travis integration with coverity or coveralls

Coleta execution metrics from API with Byte[] replace all Byte[] by ArraySegment and compare numbers

I need remove all raw byte[] to eliminate data copies, I can try ArraySegment and BufferCopy.