6 ms·
Is not the solution to have crypto libraries abstract away the exact crypto algorithm used. Say it provides a collection of symmetric key algorithms without let
by haecceity 7y ago
Is not the solution to have crypto libraries abstract away the exact crypto algorithm used. Say it provides a collection of symmetric key algorithms without letting the users pick which algorithm is used. This way the library can update and prohibit algorithms deemed insecure and the user doesn’t have to worry about it.
- fanf2 7y agoAlgorithm agility is a feature of most cryptographic protocols, and it is hard to do well. https://tools.ietf.org/html/rfc7696 https://tools.ietf.org/html/rfc7696
- haecceity 7y agoWhy is it difficult? TLS 1.3 has a much smaller set of cipher suites than previous versions. Does that help?
- bjoli 7y agoThe reason for that is that there were way to many attacks on earlier TLS versions that used the cryptographic agility to make the victims use poor crypto. The strong crypto was never broken, but the protocol was used to make sure strong crypto never happened.