libsodium
No written verdict yet. Here is what commenters said.
6recommend
1warn against
Nov 7, 2025first mention
Oct 13, 2026latest mention
Why people recommend it
“Yes, libsodium supports them”
Show 3 more
“Whatever happened to libsodium that was designed to provide vetted cryptographic primitives with a modern API?”
“Libsodium tried to protect users from themselves in that regard. I think that's a worthy goal”
Caveats and dissent
No one in these comments warned against it.
Threads where it came up
- A Vulnerability in Libsodium 5 mentions
- A Modern Web App in C 1 mention
- I've factored the RSA keys of a Certificate Authority from the 90s 1 mention
- The State of OpenSSL for pyca/cryptography 1 mention
- Junk Theorems in Lean 1 mention
- Programmers and software developers lost the plot on naming their tools 1 mention
Also written as Libsodium. Data: libsodium.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 11
“which are also well maintained”
“Yes, libsodium supports them”
“Whatever happened to libsodium that was designed to provide vetted cryptographic primitives with a modern API?”
“Libsodium tried to protect users from themselves in that regard. I think that's a worthy goal”
“I use software compiled with libnacl every day but none compiled with "libsodium"”
“libraries that implement the check differently to libsodium”
If you donate via GitHub Sponsors to https://github.com/jedisct1 from an individual / personal account GitHub won't take a cut (or pays for it from their own purse) for any credit card processing fees.
“If libsodium is useful to you”
“I've been writing [libsodium](https://doc.libsodium.org/) bindings in Lean4”
lol no. There are literally a hundred plus Unix tools and commands. I couldn’t tell you what 90% of them mean. I sure as hell couldn’t have told you what sed stood for. And if you asked me tomorrow I also wouldn’t be able to tell you. C programmers are great. I love C. I wish everything had a beautiful pure C API. But C programmers are strictly banned from naming things. Their naming privileges have been revoked, per
“Just look at the latter's FAQ page and you'll see they're taking your approach targeting developers”