I'm building an app in React Native (currently using Expo) that needs to be able to perform digital signatures using the Ed25519 digital signature algorithm.
As a newcomer to the React Native ecosystem, it's unclear which libraries to use or what approach is best for this. Specifically I am looking for:
- A well maintained library
- Unlikely to have significant security issues
- Works on iOS, Android and Web
- Can sign an arbitrary sequence of bytes, using a private key derived from a Ed25519 seed
- Not too many dubious transitive dependencies
It's not a requirement that the signing is particularly fast: correctness, security and maintainability are more important.
What would be the recommended library / approach in 2023?
I'd suggest taking a look at https://github.com/jedisct1/libsodium and https://github.com/cossacklabs/themis. I believe both meet your criteria.