7 ms·
What I don't like is when I hear people say the phrase "don't roll your own crypto!", I don't know whether they mean: "don't use a cryptographic library yourse
by jason0597 6y ago
What I don't like is when I hear people say the phrase "don't roll your own crypto!", I don't know whether they mean:
"don't use a cryptographic library yourself and build the cryptographic scheme yourself (HMAC, encryption, signing, etc.)"
or
"don't write your own cryptographic library and do all the base crypto functions yourself!"
- PeterisP 6y agoBoth. The former is just as tricky and prone to seemingly innocent but fatal mistakes as the latter.
- jnwatson 6y agoIt means leave the high templar to write any code that has confidentiality, integrity, or availability requirements.
- loup-vaillant 6y agoI prefer to join the rebels on this one: http://loup-vaillant.fr/articles/crypto-is-not-magic http://loup-vaillant.fr/articles/crypto-is-not-magic