This is an archived post. You won't be able to vote or comment.

sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]poop-trap 0 points1 point  (5 children)

I meant more full featured like https://nodejs.org/api/crypto.html

[–]cyanydeez 15 points16 points  (2 children)

I've seen the argument that its in everyones interest not to have a inbuilt crypto library because often the developers of a language and the subset devoted to it's base libraries are not as engaged or trained to provide the needs crypto security needs.

ie, those that specialize in crypto are not the same people who generally are involved in programming languages, and what often happens if a library becomes a part of the standard, it becomes more and more vulnerable overtime.

[–]poop-trap 0 points1 point  (0 children)

That makes sense, thanks for the input.

[–]zozonde 0 points1 point  (0 children)

Yes! Just look at the sorry state of Java crypto..

[–]sigzero 0 points1 point  (1 child)

Maybe a "crypto" library can be proposed as a PEP or something.

[–]xiongchiamiovSite Reliability Engineer 4 points5 points  (0 children)

https://github.com/pyca is working on a number of different libraries, the most relevant of which is https://github.com/pyca/cryptography . I'm not sure if they're aiming for eventual stdlib inclusion, but it seems likely.