Outstanding! Not only are the slightly mysterious authors of this project
not inventing their own crypto, they rely on djb's[0] much acclaimed
NaCL/TweetNaCl. The codebase is accordingly small:<p><pre><code> $ wc -l source/*/*c | tail -n1
11308 total
$ wc -l source/crypto/*c | tail -n1
1293 total
</code></pre>
The first line suggests a measure of total code ballast, whereas the
second incantation might hint at the amount of core crypto code. The latter
might be a good starting point for any auditing endeavours.<p>Incidentally, I am impressed by the spirit of organisation that the source
tree permeates. Both crypto/ and tinyssh/ source trees sport corresponding
-test directories and a debian/ tree has already been added.<p>Initially, I felt irritation by the consistent lack of documentation (no
README, no AUTHORS, almost no comments, it seems). Browsing the source,
however, I grow convinced that this from a conviction that out-dated or
redundant documentation is the greater evil.<p>[0] Daniel J Bernstein - author of qmail, daemontools and long-time promoter
of full disclosure. <a href="https://en.wikipedia.org/wiki/Daniel_J._Bernstein" rel="nofollow">https://en.wikipedia.org/wiki/Daniel_J._Bernstein</a>