Modern cryptography out of the box

Cryptography is a field where it is easy to make mistakes, and where the mistakes rarely show before it is too late. That is why it is one of the areas where "it comes included" means the most.

The important choices are already made

Norscode delivers modern, well-regarded building blocks in the standard library: Argon2id for password hashing, ChaCha20-Poly1305 for authenticated encryption, BLAKE2b for hashing, and a complete TLS 1.3 for secure traffic. You are spared searching through third-party libraries and judging which is safe to rely on — the good choices have been made.

Why it is a security matter

Every time a project has to pull in an external crypto library, it is a new dependency to keep updated and a new thing that can be compromised. When the important part is in a reviewed standard library, there is less to watch — and less likely that someone ends up with an outdated or wrongly used algorithm because it was the easiest to find.

Password hashing as an example

Storing passwords correctly is a classic trap. Argon2id, which comes included, is made precisely for this: deliberately slow, and resistant to hardware built to guess passwords. That it is the default, and not something you have to look for, makes it more likely that it is actually used.

Good security is often about the safe choice also being the easiest one. A standard library with cryptography built in is one way to make it so.

The good choices are already made

Cryptography is a field where it is easy to choose wrong — an outdated algorithm, a wrongly used function, a key handled carelessly. By putting the well-regarded building blocks in the standard library, Norscode makes that choice for you. Argon2id is there for passwords because it is deliberately slow and resistant to hardware built to guess. ChaCha20-Poly1305 encrypts and authenticates in one. BLAKE2b hashes quickly and safely. You do not need to be a cryptographer to use the right tools.

Less to watch over

Every time a project pulls in an external crypto library, it is a new dependency to keep updated and a new thing that can be compromised. When the important part is in a reviewed standard library, there is less to watch over — and less likely that someone ends up with an outdated or wrongly used algorithm because it was the easiest to find.

Safe is easy

Good security is often about the safe choice also being the easiest one. If you are going to store a password, hash_passord is right there; if you are going to sign data, signer and verifiser are right there. That you do not have to look for them makes it more likely they are actually used — and that is half the point of having them built in.

Back to the overview