4 ms·
One could take the view that a full TLS stack is so complicated that it is much more likely to contain exploitable flaws than some simple signature checking cod
by mortehu 10y ago
One could take the view that a full TLS stack is so complicated that it is much more likely to contain exploitable flaws than some simple signature checking code.
- mjg59 10y agoThere are plenty of off the shelf TLS stacks, but people tend to end up hand-rolling their own signature validation code badly.
- revelation 10y agoAnd all of them are universally terrible and a MAJOR hassle to integrate with any embedded system. If you read mbedTLS or PolarSSL run far far away. Maybe people hand-roll their own signature validation code badly, but those same people will just as much screw up or plain disable the CA verification. If you have the knowledge to use the primitives from something like NaCl, you have nothing to gain from using a full TLS stack but pain building, upgrading, programming your firmware and massive middleware problems in the field. And when they inevitably find issues in the TLS stack you used, your device is now fucked since there is no virtual address space, W^X, even stack cookies..
- patrickmn 10y agoUndoubtedly true, assuming you use something well-scrutinized like signify or gnupg for that signature verification.