Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Node.js port of WhisperSystem's libsignal

github.com

Post reply on HN
Print view View original

11–17 of 17 posts

Re: Show HN: Node.js port of WhisperSystem's libsignal

#11

Post by jszymborski »

TheAceOfHearts wrote: post #2

One of the nice things about JS versions of stuff is being able to run it everywhere. With that being said, I'd be skeptical of using this since it doesn't appear to have any tests at all. How do we know it's actually compatible with libsignal?

The original version is written in Java, which sorta invented "run-it-everywhere"

Re: Show HN: Node.js port of WhisperSystem's libsignal

#12

Post by tooker »

egeozcan wrote: post #3
TheAceOfHearts wrote: post #2

One of the nice things about JS versions of stuff is being able to run it everywhere. With that being said, I'd be skeptical of using this since it doesn't appear to have any tests at all. How do we know it's actually compatible with libsignal?

This has a native part written in c and only runs on node.js v8 and up, according to the package.json.

The C components are just a few emscripten compiled curve25519-donna and ed25519 functions for elliptic curve routines. It comes directly from the web library without any alteration. Honestly I was surprised at how well it works and the performance isn't too shabby. I did several investigations of replacing it with libsodium and others but the the emscripten builds have been pretty reliable for us..

Re: Show HN: Node.js port of WhisperSystem's libsignal

#13

Post by dabockster »

jszymborski wrote: post #11
TheAceOfHearts wrote: post #2

One of the nice things about JS versions of stuff is being able to run it everywhere. With that being said, I'd be skeptical of using this since it doesn't appear to have any tests at all. How do we know it's actually compatible with libsignal?

The original version is written in Java, which sorta invented "run-it-everywhere"

Meh, I personally prefer "complie-it-everywhere" since you gain all the speed benefits of running it native.

Re: Show HN: Node.js port of WhisperSystem's libsignal

#14

Post by micaksica »

How much is this based on the libsignal-protocol-JavaScript code? Where does it differ from it? Where are the tests to test protocol steps?

I actually love seeing things like this, but it’d be nice if there was some more documentation on the project. Crypto libraries generally aren’t the kind of thing you want to pick up when they’re new unless they are both heavily audited and developed by those with backgrounds in crypto work.

Re: Show HN: Node.js port of WhisperSystem's libsignal

#15

Post by tooker »

micaksica wrote: post #14

How much is this based on the libsignal-protocol-JavaScript code? Where does it differ from it? Where are the tests to test protocol steps? I actually love seeing things like this, but it’d be nice if there was some more documentation on the project. Crypto libraries generally aren’t the kind of thing you want to pick up when they’re new unless they are both heavily audited and developed by those with backgrounds in…

It's ported directly from the javascript lib so most of the interfaces are exactly the same (async differences in some cases and a couple storage interface differences, see: " rel="nofollow">https://github.com/ForstaLabs/libsignal-node/issues/1>). The commit history is intact as well. Haven't had enough time to port tests but she works.. We use it for various bots in our signal based message platform.

Re: Show HN: Node.js port of WhisperSystem's libsignal

#16

Post by justinjlynn »

dabockster wrote: post #13
jszymborski wrote: post #11

Earlier quoted context omitted.

The original version is written in Java, which sorta invented "run-it-everywhere"

Meh, I personally prefer "complie-it-everywhere" since you gain all the speed benefits of running it native.

Well, to be fair, with Java you are compiling bytecode everywhere before and while you run. So, you're not wrong.

Re: Show HN: Node.js port of WhisperSystem's libsignal

#17

Post by dabockster »

justinjlynn wrote: post #16
dabockster wrote: post #13

Earlier quoted context omitted.

Meh, I personally prefer "complie-it-everywhere" since you gain all the speed benefits of running it native.

Well, to be fair, with Java you are compiling bytecode everywhere before and while you run. So, you're not wrong.

Still in the JVM, though. I was thinking more bare metal.
Post reply on HN