3 ms·
I disagree with this stance. Technical decisions should be made on technical merit, not because a person or institution has a shady background. The algorithms i
by beefhash 9y ago
I disagree with this stance. Technical decisions should be made on technical merit, not because a person or institution has a shady background. The algorithms in questions have been under a lot of analysis precisely because the NSA designed them. Yet we rely on AES and SHA every day.
There is no good that can come from knee-jerk reactions.
- psyc 9y agoPerhaps important decisions that affect everybody should be based on relevant information. Technical merit is relevant, but so is the known adversarial motivations of powerful actors.
- lvh 9y agoI’m not sure I follow entirely: AES isn’t an NSA design, and neither is SHA-3 (though earlier ones are). Are you referring to NIST, perhaps in the context of DualEC-DRBG?