3 ms·
What do you mean? I thought if you eliminate any of the things I've mentioned previously all that is left is just checksum algorithm and some math. Note that th
by deno 15y ago
What do you mean? I thought if you eliminate any of the things I've mentioned previously all that is left is just checksum algorithm and some math. Note that the public key would come from the secure TLS channel, so there's no issue of obtaining and verifying one.
- tptacek 15y agoWe're too far to the right on this thread to keep going with this, but take my word for at least this: public key signature verification is advanced number theoretic cryptography. It is actually less straightforward than somehow applying a block cipher to variable-length arrays of user data.
- deno 15y agoSo does it just mean that the implementation is hard to get right? I'm all for killing off ideas, especially when it comes to cryptography, but I'd like to at least learn something in the process. Is there somewhere I can learn about everything that can go wrong with that specific process, or would I have to just try to implement this algorithms myself, to understand the risks? BTW. Thanks for everything so far; I trust you're a busy man.
- tptacek 15y agoA great place to start is (Google) [nigel cryptography]; for your particular question, start with the chapter "attacks on public key cryptography".