4 ms·
“These findings underscore the importance for software developers in China to use well-supported encryption implementations such as TLS instead of attempting to
by pm2222 3y ago
“These findings underscore the importance for software developers in China to use well-supported encryption implementations such as TLS instead of attempting to custom design their own.” So generally speaking established standard are scrutinized more and thus more trustworthy, right? I can think of all those WiFi encryption methods we’ve been through and they are all vulnerable, sooner or later.
- JohnFen 3y ago> So generally speaking established standard are scrutinized more and thus more trustworthy, right? Yes, in large part. Also, implementing good cryptography requires specialist mathematical skills on par with dev skills. It's very easy to make a really trivial mistake such that it looks like the crypto is solid, when it's in fact very weak. The ability to make a trivial mistake that's hard to spot, combined with the high stakes involved, makes cryptography something that's better left to the experts.