
Company News
Socket Partners with Replit to Block Malicious Packages in AI-Powered Development
Replit is integrating Socket Firewall into its AI-powered development experience to help protect builders from malicious open source packages.
go get lukechampine.com/ascon
This repo contains a pure-Go implementation of ASCON-128, a lightweight authenticated encryption algorithm. (ASCON is a family of algorithms, but currently this repo only implements ASCON-128.)
ascon.AEAD implements the cipher.AEAD interface, so usage should be familiar:
import "lukechampine.com/ascon"
func main() {
key := make([]byte, ascon.KeySize) // in practice, read this from crypto/rand
aead, _ := ascon.New(key)
nonce := make([]byte, ascon.NonceSize)
plaintext := []byte("Hello, world!")
ciphertext := aead.Seal(nil, nonce, plaintext, nil)
recovered, _ := aead.Open(nil, nonce, ciphertext, nil)
println(string(recovered)) // Hello, world!
}
The pure Go code is pretty underwhelming; expect 100-200 MB/s. Maybe I'll add an asm implementation someday.
FAQs
Unknown package
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Replit is integrating Socket Firewall into its AI-powered development experience to help protect builders from malicious open source packages.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.