6 ms·
Practical Cryptography
- hannob 10y agoSkimming through it this seems largely a description of historic and broken cryptography and almost no information about practical modern cryptography. (also the obligatory note: no HTTPS for a webpage about cryptography?)
- deleted 10y ago[deleted]
- delinka 10y agoThink of it as "cryptography in practice." And in practice, it's often broken, whether from poor implementation or design flaws.
- hannob 10y agoExcept that it's not even that. You're right that a lot of crypto is broken, but usually because of implementation bugs, not because people use vigenere ciphers.
- mhw 10y agoHmm; appears unrelated to https://www.schneier.com/books/practical_cryptography/ https://www.schneier.com/books/practical_cryptography/
- TrueDuality 10y ago> Cryptography refers almost exclusively to encryption Ooof first line. That's like saying math refers almost exclusively to physics. Grabbing that name from a well respected and popular book as well. Tsk. Tsk.
- paulddraper 10y agoThere is a section dedicated to hashes, but ooof indeed.
- RandomInteger4 10y agoWell, one could argue that cryptographic hashing is like encryption which isn't meant to be reversible.
- strictnein 10y agoInteresting that Sir Francis Bacon counted in binary, which wasn't formally invented until after his death: http://practicalcryptography.com/ciphers/classical-era/baconian/ http://practicalcryptography.com/ciphers/classical-era/bacon... edit: Binary "invention" - http://www.computinghistory.org.uk/det/5913/Gottfried-Wilhelm-Leibniz-invents-the-Binary-System/ http://www.computinghistory.org.uk/det/5913/Gottfried-Wilhel...
- gone35 10y ago[...]cryptography is the study and practice of obscuring information What about authentication?
- xs 10y agoSo what type of job can you get if you specialize in cryptography?
- jonathanstrange 10y agoThat IT support guy who babbles about password entropy and security but nobody listens to him. ducksforcoverandruns
- bdamm 10y agoWhat you're describing isn't crypto. You're describing an ineffective IT organization. Either the management hasn't made clear the policies they prefer, or the guy isn't listening and/or doesn't trust them.
- stefs 10y agoi'm not employed in the field, so this is mostly uninformed guessimation. a) there are companies working on products with tight security requirements. if this is a respectable company, you'd probably spend most of your time examining and evaluating existing solutions and maybe review the use of said solutions by your own programmers. (i'd say this is usually more "security" than "cryptography" though) b) there are companies working on their own cryptography schemes. those are not per-se snake oil, but ... it's complicated. few have the resources and the structure to do this right. skype, for example, rolled their own closed source implementation. back then we've been told: "trade secret, but trust us, we've done it right and we had independent experts review this." c) security review: be the company/expert that skype hires to evaluate their cryptography while under an NDA (?) d) pen-testing: maybe? not sure if this is realistic. get paid to check company security (network, servers, general infrastructure) for weaknesses. they might employ cryptographers? e) research: probably the most likely area. crypto development usually has to happen in the open, otherwise it's not trustworthy. f) intelligence agencies. NSA and co.
- bdamm 10y agoPart of engineering the future of computer security. It is now widely recognized that you can't have computer security without crypto. (Can we have computer security with crypto? Different question, not so clear.) Cryptography is a huge field. Pure mathematics? Cipher implementation? Systems design using crypto? Hardware concerns involved when implementing crypto? Crypto vendor? Crypto consumer? Analyst of crypto systems (compliance, approval, etc)? And yeah, as your snarky interlocutor says, the IT guy that handles the "hard stuff" like certificate renewal[sarc]? The choices are so enormous that even "specializing in crypto" isn't much of a specialization at all!
- 45h34jh53k4j 10y agoCopyright James Lyons © 2009-2012 Latest reference is Stinson, Douglas (2005). "Cryptography: Theory and Practice" intro to classic crypto. Not so practical in 2016? Wheres the circa 2016 https?
- sweis 10y agoThis site contains little practical information about cryptography.