4 ms·
With respect, you really shouldn't be designing your own cryptographic protocols if they are going into a product. Even the best of the best make serious mistak
by als0 4y ago
With respect, you really shouldn't be designing your own cryptographic protocols if they are going into a product. Even the best of the best make serious mistakes. A course is not going to give you the confidence that you need. There are so many peer reviewed protocols out there that there's almost no need to make one yourself unless you're in a very specialised or niche scenario. That said, if you just want to learn about them, there are plenty of good, readable books like Real World Cryptography and Applied Cryptography (Schneier).
- macksd 4y agoAnd "peer reviewed" is a big key here. I don't use RSA because someone certified the protocol's authors, I use it because the details have been so heavily looked into by the whole industry and accepted by virtually everyone.
- cpach 4y agoMay I ask why you use RSA and not ECC? https://latacora.micro.blog/2018/04/03/cryptographic-right-answers.html https://latacora.micro.blog/2018/04/03/cryptographic-right-a...
- upofadown 4y agoThe link did not contain any compelling arguments against RSA. So turning the question around, what's wrong with RSA?
- mhluongo 4y agoElliptic curves provide more long-term security.
- als0 4y agoNot if you're thinking about early quantum computers https://security.stackexchange.com/questions/33069/why-is-ecc-more-vulnerable-than-rsa-in-a-post-quantum-world https://security.stackexchange.com/questions/33069/why-is-ec...
- arccy 4y agohttps://blog.trailofbits.com/2019/07/08/fuck-rsa/ https://blog.trailofbits.com/2019/07/08/fuck-rsa/
- als0 4y agoYou could easily write a blog post called fuck-ecc and describe the difficulties in implementing ECC correctly. RSA has a good share of band aids but ECC implementations are, in my opinion, just as hard to get right.
- upofadown 4y agoOne link to an article without comment deserves another: * https://articles.59.ca/doku.php?id=pgpfan:rsabad https://articles.59.ca/doku.php?id=pgpfan:rsabad