3 ms·
Not that I sanction all of the parent's post, but for instance Telegram did exactly that, and they still receive grief for rolling their own crypto. So per the
by troyvit 5y ago
Not that I sanction all of the parent's post, but for instance Telegram did exactly that, and they still receive grief for rolling their own crypto. So per the parent you can either use back-doored state-sponsored encryption or roll your own which nobody trusts. Which is better? Is there another alternative?
- marcan_42 5y agoState sponsorship doesn't matter, what matters is that it's secure. Everyone knew Dual-EC DRBG was likely backdoored, it stank to hell and back. There are dozens of other CSPRNGs, including other "state sponsored" ones, that pretty clearly aren't. There is also a whole world of crypto developed by people not associated with any state, including the modern ec25519/ChaCha based combinations (which are partly a response to the idea that the widely used NSA proposed ECC parameters may also be backdoored). There are trustable people doing things right with easy to use libraries you can just drop in today, with documented rationale for the designs and without any "magic numbers" (which are a telltale of the backdoored and suspected-backdoored NSA algorithms).