4 ms·
Most open source crypto code just does what NIST and DJB say to do. There's no magic imparted by it being FOSS.
by jart 5y ago
Most open source crypto code just does what NIST and DJB say to do. There's no magic imparted by it being FOSS.
- collsni 5y agoI agree and that's pretty sad. FOSS gives the opportunity to code review.
- SV_BubbleTime 5y agoHeart bleed is still the biggest point against your argument. The key word you correctly used is OPPORTUNITY. I like smaller localized governance, but would not be opposed at all to a federal subsidized program for security bugs and open source development of algorithms and code for commonly required tasks.
- goodpoint 5y agoOn the contrary, there's plenty of different implementations of the same algorithms. Plus it's also extremely difficult to make underhanded changes to magic numbers if the source code is public.
- slim 5y agoNIST or DJB. It's safer to ignore NIST and do what DJB says.
- nullc 5y agoMakes NIST's responses towards DJB in the PQ crypto process have been ... interesting. https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/3mVeyEfYnUY/m/_xYg6HRcDQAJ https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/3mVe...
- slim 5y agoIt's even more interesting that DJB did not care to answer
- nullc 5y agoHe had answered, in advance-- in the form of a formal complaint because the substance of NIST's message (the complaint that DJB had hung a carrot of 'attacks' in front of them in private but hadn't delivered a publication 'on time') had been previously stated by one of their staff. He published the formal complaint today: https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/4baO2sC9dLA/m/PRlPLUL1BgAJ https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/4baO...
- jart 5y agoWell that's what most open source does today. GitHub posted a blog post four days ago that the majority of SSH clients have moved away from aes to chacha. https://github.blog/2021-09-01-improving-git-protocol-security-github/ https://github.blog/2021-09-01-improving-git-protocol-securi... I wouldn't be surprised if the majority of https traffic uses x25519 these days instead of rsa or ℘256. djb is an influential guy.
- cryptonector 5y agoAnd you still need to review the code yourself and review the compiler's code, and all the object code produced, and test it, and...