Square Open-Sources Golang Crypto Package Based on JWE/JWS

by bigmac on 12/19/2014, 8:23 PM with 14 comments
  • by AYBABTME on 12/19/2014, 9:21 PM

    The cipher subpackage is importing a third party package `github.com/apexskier/cryptoPadding` and uses only this part of it:

    https://github.com/apexskier/cryptoPadding/blob/master/pkcs7...

    I think it would be a good idea to avoid that otherwise small dependency with some copy-pasta/vendoring.

  • by tptacek on 12/20/2014, 1:24 AM

    If anyone was could publish a Golang crypto library I'd be inclined to trust, it'd be Square, but I think you should probably avoid JOSE.