2 ms·
I'd like to add a caveat to the "Implement a cryptosystem" suggestion--Implement one, but DO NOT USE IT. It's a fun challenge, but only fools use their own cryp
by teeray 15y ago
I'd like to add a caveat to the "Implement a cryptosystem" suggestion--Implement one, but DO NOT USE IT. It's a fun challenge, but only fools use their own crypto libraries.
- finnw 15y agoBetter still, implement one, assume it is broken, and find out why.
- beagle3 15y agoThat's not a good advice. It is extremely hard to find problems in your own implementation, even if you're experienced in doing that. Better advice: Find a mate (or a group), and find out why the other's implementation is broken. And go through some case studies first (see e.g. colin percival's postmortem in http://www.daemonology.net/blog/2011-01-18-tarsnap-critical-security-bug.html http://www.daemonology.net/blog/2011-01-18-tarsnap-critical-...)