4 ms·
No, you simply version the format if required, picking a new (disjoint) primitive set. Algorithm agility has caused many of the security defects in TLS, PGP, an
by tatersolid 8y ago
No, you simply version the format if required, picking a new (disjoint) primitive set.
Algorithm agility has caused many of the security defects in TLS, PGP, and SSH. It has remedied exactly zero flaws that a simpler versioned scheme would not also have addressed.
- emmelaich 8y agoDisjoint versions would be good. Has it ever been tried? Also - would it have prevented, say, heartbleed?
- tatersolid 8y ago> Disjoint versions would be good. Has it ever been tried? I believe Signal does this based on the papers I’ve read; I’m sure many private or lesser-known protocols do as well. >would it have prevented, say, heart bleed? Probably, because in a strictly versioned scheme with no options, the buggy DTLS keepalive mechanism would not even have been in the same library. OpenSSL’s position of “we’ve got nine of everything including the kitchen sink” was the true cause of Heartbleed. Simpler code is easier to get right, debug, and perhaps formally verify as correct.