Hacker News Reader

> Not to mention, Web Crypto API is the literal opposite of roll your own crypto. and is SOO much better than someone implementing cryptographic operations on JS

I'm glad someone is pointing this out as I felt like the author didn't even attempt to understand the Web Crypto API assuming an incorrect worst-case scenario.

View on HN

WebCrypto is "roll your own crypto" as it implements low level algorithms instead of high-level protocols. The issue with rolling your own crypto wasn't "you will implement sha3 incorrectly" it was "you will use an algorithm for authenticated streaming symmetric encryption but accidentally reuse an initialization vector or fail to verify a checksum" or whatever.

Reply on news.ycombinator.com