Back off from CX20P to C20P by default (ChaCha20Poly1305 instead of XChaCha20Poly1305)
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- javascript
- Domain
- security
Research direction
Start by locating the default algorithm selection and the encryption/decryption tests and documentation in the repository. Confirm that new payloads default to ChaCha20Poly1305, check compatibility implications, and document the requirement to use a new content-encryption key for every new encrypted payload.
Written by the indexing model from the issue text.
Description
It doesn't look like XChaCha20Poly1305 will get standardized, so we should back off to ChaCha20Poly1305 and just check to make sure to document that new content encryption keys should be used with every new encrypted payload to ensure security in decentralized settings.
- Dominant language
- JavaScript
- Stars
- 14
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from digitalbazaar/minimal-cipher
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
digitalbazaar/minimal-cipher#58 · 2 comments ·
-
Use native ChaCha20-Poly1305 support via the Web Crypto API that is now landing in various platformsOpen
Difficulty 5/5 Over a week Newbie friendliness 20/100
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
-
Difficulty 4/5 3-5 days Newbie friendliness 42/100
-
Difficulty 5/5 Over a week Newbie friendliness 20/100
All issues in digitalbazaar/minimal-cipher
Similar issues
-
feature task
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
RealDevSquad/website-www#1178 ·
-
add latest sol modelOpen
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
netlify-labs/nax#56 · 2 comments · 1 reaction ·
-
accessibility bug revealjs
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
quarto-dev/quarto-cli#14961 ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 88/100
PnX-SI/GeoNature#4435 · 2 comments ·
Maintainers usually reply within 1 day
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
openlayers/openlayers#17648 ·
Maintainers usually reply within 1 day