I'm not a sercurity or a crypto expert. I want to perfrom encryption on my client to server communication in a RESTful api system.
Currently I'm using javax crypto
and initializing the Ciper
for AES
with AES/GCM/PKCS5Padding
to encrypt the data and RSA
with RSA/ECB/OAEPWithSHA-256AndMGF1Padding
to encrypt the iV
and Symmetric key
with a public key.
This works well for me.
I did some more digging on other encryption libraries and found Libsodium
or NaCl.
I tried searching for any comparision between these and I'm not able to find any. Is it because I'm trying compare apples to oranges?
Should I continue with the javax crypto
or should I switch to sodium
? What benifits does sodium
give over the default javax crypto
?