2 ms·
That makes a lot of sense, thank you! I got the impression that the parent comment meant that the certification itself means nothing, hence my confusion.
by kop316 8y ago
That makes a lot of sense, thank you! I got the impression that the parent comment meant that the certification itself means nothing, hence my confusion.
- toast0 8y agoI mean; a crypto certification that doesn't tell you very much about the effective security of the product doesn't provide very much value though, does it? All it tells me, is that someone thought it would increase their sales enough to justify the time and money; they may not have spent time and money to generate random numbers properly, and may just use 4 all the time; they could probably still get a fips cert, because it's out of the scope of the certification.
- tptacek 8y agoPretty much, yep.