age vs Kryptor

[hakavlad]

Filippo about Kryptor
https://news.ycombinator.com/item?id=41159236

I can't quite make out from https://www.kryptor.co.uk/specification if it does proper signcryption, sign-then-encrypt (vulnerable to signature stripping and re-signing), or encrypt-then-sign

Maybe need clarification in the spec.

[samuel-lucas6]

I think it's pretty clear that ChaCha20-Poly1305 is being used if you read the full spec. I expect Filippo didn't look too thoroughly because there's a lot of information on the page. Signatures aren't mention for anything related to encryption.

However, I will review the website at some point. I do need to discuss insider non-repudiation on the limitations page.