4 ms·
I once heard something along the lines of "if you're writing the words RSA, you're doing it wrong." I guess that goes for ED25519 also. If you want to secure a
by c7DJTLrn 4y ago
I once heard something along the lines of "if you're writing the words RSA, you're doing it wrong." I guess that goes for ED25519 also.
If you want to secure a stream with asymmetric cryptography and don't need all the bells and whistles of TLS, what's the correct way to do it? Noise? Is there nothing simpler?
- d-z-m 4y agoAs far as language support goes, it doesn't get much easier than working with TLS, especially in Go. As far as alternatives go, Noise Pipes[0] never took off, but feel like they'd be well suited to this task. [0]: https://noiseprotocol.org/noise.html#noise-pipes https://noiseprotocol.org/noise.html#noise-pipes
- mwcampbell 4y agoIIUC the correct answer, according to the 2009 blog post that popularized the saying you're referring to, is to just use TLS anyway. In most cases it's better to accept some extra complexity than to get crypto wrong. Edit: Here's that classic: https://web.archive.org/web/20090606064715/http://www.matasano.com/log/1749/typing-the-letters-a-e-s-into-your-code-youre-doing-it-wrong/ https://web.archive.org/web/20090606064715/http://www.matasa...