3 ms·
Key length is a user-facing parameter of encryption libraries.
by nothrabannosir 9y ago
Key length is a user-facing parameter of encryption libraries.
- heavenlyblue 9y agoLibrary interface does not imply safe interface. More often than not one is required to study the supplied documentation, but even then some libraries require a certain amount of domain knowledge before one could apply their programming skills. That goes beyond security.
- nothrabannosir 9y agoThe reason we're talking about it is because someone sang the "leave crypto to the experts" tune. Apparently not, because this was about key size. Responsibility for which is punted by experts to non-experts. I'm not saying don't study the docs. I'm pointing out the irony in bring up this "leave it to the experts" platitude, when it's so clearly about something left to end users. And to that effect: if interfaces are not safe, why are experts designing unsafe interfaces? I'm tired of this victim blaming in crypto failures.