2 ms·

Ah. Ouch. Sorry.

• sangnoir 10y ago
  And that - in an ironic nutshell - is the problem with crypto: had you been tasked with implementing the crypto, you would have (unknowingly) done it wrong and called it a day. Someone else would be berating you to "leave it to the experts"
  • qwertyuiop924 10y ago
    I was going to write a comment pointing that out. But I couldn't figure out how to write it. Go ahead, laugh. It means you'll be hesitant to make that kind of mistake, which is the main thing.
    • sangnoir 10y ago
      I did laugh - but not at you. As I said - the problem is with crypto (not you). Crypto gives the appearance of being simple, straightforward and immutable - but its not. A lot of things can go wrong with your PRNG, or the key exchange, or the cipher, or a combination of any/all of the above. Oh, by the way a novel attack was discovered last week; it's the full package, complete with a mildly ominous ALLCAPS name, a fancy logo and a bloody domain - the state-of-the-art has changed. Again. I don't know if the 'crypto problem' can be solved for all F/OSS projects that need it - there might not be enough experts to go around.