Has the nodejs crypto module been audited at all?

[bdharrington7]

Originally asked at StackOverflow, but putting it here for visibility.

I can't find an answer easily, just long-winded arguments about crypto in general.
I'm asking because I came across the tweetnacl module, and its corresponding audit.

[bnoordhuis]

If you mean by a for-profit company: no.

Since you bring up tweetnacl, your question is probably better directed at openssl. That's the crypto library that node.js uses under the hood.

[bdharrington7]

If you mean by a for-profit company: no.

So does that imply there's been some sort of auditing by non-profit companies?

[bnoordhuis]

No, just the many eyeballs principle of open source.