3 ms·
I would say AC is good from a theory point of view, but bad as an implementation guide. Kind of in the same way that a Chilton guide will tell you all sorts of
by icey 19y ago
I would say AC is good from a theory point of view, but bad as an implementation guide. Kind of in the same way that a Chilton guide will tell you all sorts of things about your car, but you shouldn't try to build a car from scratch based on it.
- tptacek 19y agoFerguson and Schneier wrote a followup book, "Practical Cryptography", which addresses the shortcomings of "Applied Cryptography" --- it selects the "best" algorithms and protocols to use, and tries to document the pitfalls of actually implementing them in real software. I recommend it with reservations. It's an extremely valuable book, especially if you're a security evaluator looking for crypto vulnerabilities. As an implementation guide, it misses glaring faults that real software constantly introduces. There simply is no by-the-numbers guide to implementing crypto in an application, and doing it wrong is worse than not doing it at all.