3 ms·
Why didn't they contact the authors of AES-SIV and AES-GCM-SIV to review their idea?
by wolf550e 7y ago
Why didn't they contact the authors of AES-SIV and AES-GCM-SIV to review their idea?
- abofh 7y agoBecause that would likely cost money, asking on SO costs literally nothing... And surely all appropriate expertise either read SO or their blog, so no problems here! To be fair, I see nothing obviously wrong with their solution, it's their approach that concerns me.
- bsder 7y ago> Because that would likely cost money Yeah, maybe a flight and some expensive beers. Most academic crypto guys are ecstatic at the thought of someone asking them prior to using their stuff wrong.
- tptacek 7y agoHave you asked a lot of academic crypto people about their bill rates?
- bsder 7y agoI've asked a few, and they've been pretty reasonable. Of course, I haven't had something where I've had to ask DJB, so I may be biased.
- CaliforniaKarl 7y agoWhen I work with Faculty (teaching or research, tenured or not), they are very conscious of their image/reputation. It would look pretty bad for a researcher to "sign off" on something, only for flaws to be discovered.
- bsder 7y ago> It would look pretty bad for a researcher to "sign off" on something, only for flaws to be discovered. True, but there is a big difference between "Hey, I'm using your stuff, could you look at this and see if I did something stupid?" and "I want you to sign off on this publicly. Here is the contract."