Our Rust crypto was reviewed. The real find was the auditor.

We recently shipped a new pure Rust cryptography layer that now powers the Locker web app and Ensu. It is the start of a gradual move away from libsodium toward a single shared implementation that compiles natively to mobile and trivially to the web via WASM.

We love libsodium. But in Rust, the popular wrappers still bottleneck on libsodium-sys, a C dependency that makes cross-compilation painful. Pure Rust crates from the RustCrypto project gave us the same primitives with byte-for-byte wire compatibility, and one cargo build for every target. One crate, thin binding layers for each platform: web, mobile, CLI.

The new layer (our ente-core crate) is not large, but since it handles all the encryption we felt we needed independent eyes on it before rolling it out.

The review

Short version: we…