3 ms·
Looks like a misunderstanding. If you are following djb's researches, you'll know he doesn't have an agenda of attacking open-source cryptographic implementati
by segfaultbuserr 7y ago
Looks like a misunderstanding.
If you are following djb's researches, you'll know he doesn't have an agenda of attacking open-source cryptographic implementations as "problematic". Instead, his actual personal agenda is: most, if not all cryptographic implementations does not work correctly, and lots of work is needed to fix that. It's also obvious if you read beyond the first few pages of the slideshow.
> I’m focusing on open source in this talk because
> •I spend most of my time with open source and
> •the only paths that I see towards real security need everything published to build confidence.
So yes, he does work correctly.
- User23 7y agoI had a buddy who worked for the NSA for a bit before moving to the private sector. He didn't tell me much, but he did say that they rarely ever break the crypto algorithm (even when compute resources are available), they almost always attack implementation flaws. That and story about what a pain in the ass the entry keypads were when you were a little hung over, especially since the coffee was on the other side. The digit locations weren't fixed, so you couldn't rely on muscle memory.
- segfaultbuserr 7y agoHow does the keypad generates a new position? So the keypad has a digital display on the buttons?
- User23 7y agoCorrect.