6 ms·
That is an interesting comment. How did SHA/RSA/AES cause more harm? Every other web developer has to use SHA for one thing or the other. SSL is the application
by SriniK 16y ago
That is an interesting comment. How did SHA/RSA/AES cause more harm? Every other web developer has to use SHA for one thing or the other. SSL is the application of RSA.
- tptacek 16y agoSSL is the application of RSA like a pebble bed nuclear reactor is the application of radioactivity. Every-other-web-developer's use of SHA has created vulnerabilities, from crappy password hashes through poorly-considered URL authentication schemes that have blown up on extremely well-funded teams (see: Amazon and Flickr). Just like that Boy Scout who figured out how to extract uranium from old clocks and gas lanterns, most of the time, when lay developers try to build something with cryptography, all that happens is that a team of people in hazmat gear have to come clean up the mess.
- SriniK 16y agoIt's like you are saying though tools are good but because ignorant people use it, tools must be bad. This is the classic example of 'fools blame their tools'. AES/SHA/RSA are really good tools and great asset for crypto community.
- tptacek 16y agoThat's all you've got? "Fools blame their tools"? Who then, besides the people who wisely chose to eschew these particular tools, isn't a fool? Who's used them well, from 2000-2010?