@keks if it's possible that a*b == c*d, is it possible that a == c & d != d? i.e. can a*b = a*d? who can construct c*d? do you have to have one of the private keys of a, b? or do you have to know a*b?

on chloride vs sodium-friends. I've been meaning to rewrite secret-handshake and pull-box-stream to use sodium-friends. The perf difference would probably not be measurable except maybe in pull-box-stream, because the difference is just some memory allocations. But, I very much like the idea of something like this being closer to the C api, so that one set of documentation applies. in libsodium, you pass a pointer to where you want the output, and in chloride it's allocated and returned. Also, in C libsodium you must pass a length for each input. node buffers have that as a property, so it's not necessary.