3 ms·

I think he advocates for crypto implementations that are provably secure. Provably secure = boring, because there are no security holes to be found. (the docum

by Kristine1975 11y ago

I think he advocates for crypto implementations that are provably secure. Provably secure = boring, because there are no security holes to be found. (the document gets much easier to read when viewed in single page mode)

tveita 11y ago
Maybe he's arguing for implementations that are provably correct, but I don't think DJB is a big fan of "provable security". https://twitter.com/hashbreaker/status/294465109613477889 https://twitter.com/hashbreaker/status/294465109613477889, "Some evidence that "provable security" is negatively correlated with actual security: http://cr.yp.to/talks/2013.01.23/slides.pdf http://cr.yp.to/talks/2013.01.23/slides.pdf "