3 ms·
Isn't it pretty clear why the question wasn't asked much and why nobody there really had an answer? These are cryptologists who are spending their time thinking
by RyanZAG 11y ago
Isn't it pretty clear why the question wasn't asked much and why nobody there really had an answer? These are cryptologists who are spending their time thinking of the science behind the implementation.
A good analogy would be to go to a conference for traffic planners and asking "How do we know that the car's breaking system is correctly implemented?". Obviously none of the traffic planners would be asking that question and wouldn't have an answer. But if you go ask an automotive engineer, they'll give you the run-down on all the tests they do to ensure it is implemented correctly. Whether cars are breaking correctly or not is obviously incredibly important for traffic planners but it's not their field of expertise.
I'd think it would be the same in this case. If you want to know if a crypto function is correctly implemented then you should go talk to the OpenSSL guys and ask them. I'm sure they have a lot of answers and a lot of ideas here.