-
-
Notifications
You must be signed in to change notification settings - Fork 62
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
5 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
|
@@ -36,7 +36,7 @@ packages. See [Resources](#resources) for articles and real-world software that | |
We support all major platforms and runtimes. | ||
For [Deno](https://deno.land), ensure to use [npm specifier](https://deno.land/[email protected]/node/npm_specifiers). | ||
For React Native, you may need a [polyfill for getRandomValues](https://github.com/LinusU/react-native-get-random-values). | ||
For React Native, you may need a [polyfill for crypto.getRandomValues](https://github.com/LinusU/react-native-get-random-values). | ||
If you don't like NPM, a standalone [noble-curves.js](https://github.com/paulmillr/noble-curves/releases) is also available. | ||
|
||
The library is tree-shaking-friendly and does not expose root entry point as | ||
|
@@ -770,6 +770,10 @@ We consider infrastructure attacks like rogue NPM modules very important; that's | |
The packages are big, which makes it hard to audit their source code thoroughly and fully. | ||
- They are only used if you clone the git repo and want to add some feature to it. End-users won't use them. | ||
As for key generation, we're deferring to built-in | ||
[crypto.getRandomValues](https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues) | ||
which is considered cryptographically secure (CSPRNG). | ||
## Speed | ||
Benchmark results on Apple M2 with node v20: | ||
|