Using SECp256k1/ECDSA instead of Ed25519 about sodium_compat HOT 3 CLOSED

Is there some way with sodium/libsodium to make all crypto_sign_* methods use SECp256k1?

No, there isn't, and there never will be.

Libsodium is an opinionated API. You get one good algorithm for every use case. Fewer knobs and levers + more secure constructions = less crypto vulns in software that consumes the API.

For public key cryptography, you get ECDH and EdDSA over Curve25519. No Weierstrass or Koblitz curves.

If you want to use secp256k1 or foot-bullety ECDSA, maybe check out https://github.com/phpecc/phpecc instead? I can't vouch for the security of their library, of course.

from sodium_compat.

@faustbrian Would you buy a commercial version (so, it comes with support and official packages) that keeps the exact same API, but uses only NIST-approved primitives under the hood?

from sodium_compat.

@paragonie-scott Thanks, will take a look.

@jedisct1 It is for an open-source project so not buying anything.

from sodium_compat.