search

atuinsh / atuin

✨ Magical shell history
https://atuin.sh
MIT License
20.4k stars 554 forks source link

Sodiumoxide has been deprecated, could age be used instead? #702

Closed mangas closed 1 year ago

mangas commented 1 year ago

Deprecated: https://github.com/sodiumoxide/sodiumoxide

Age: https://github.com/FiloSottile/age

Spec: https://github.com/C2SP/C2SP/blob/main/age.md

Rust implementation: https://github.com/str4d/rage

ellie commented 1 year ago

If age supports SecretBox, then yes. Otherwise no :/

Realistically we will switch to using RustCrypto. Not a huge priority right now as while Sodiumoxide has been deprecated, it does still receive security updates

mangas commented 1 year ago

It supports symmetric encryption and it's a more modern standard as well. If there is some work to introduce events and deletion, there could be a field on the DB to choose the type of encryption as a migration path.

conradludgate commented 1 year ago

Yeah the current plan is to switch to https://github.com/RustCrypto/nacl-compat to remain backwards compatible