What are your thoughts on SubtleCrypto vs WASM
im working on an app that uses cryptography functions heavily.
i created a crytography module for my app as seen here. i think it is working as documented and is working with my test app. it is mostly using SubtleCrypto as provided from the browser.
6.2.2 on this document from owasp here.
it mentions about algorithm use. in a p2p system this isnt possible to guarantee. so i wonder if it is better or worse to replace this with a WASM module using something trsuted like libsodium (im open to ideas)?
i suspect if SubtleCrypto can be manipulated, so can the WASM module, but with WASM, i can be "more sure" that is is the same implementation between browsers, which might add value?
Posted May 2, 2024, 7:03 PM UTC
13