4 ms·
"Don't roll your own crypto..."
by exfil 3y ago
"Don't roll your own crypto..."
- josephg 3y agoThis is coming from Signal, who are more than qualified to do this kind of work. You shouldn't roll your own crypto. But crypto experts can do what they want.
- inp 3y agoYes, and moreover, they just add a shared secret in the computation of the initial root key, it cannot be worse in this case.
- zx8080 3y agoWhat could go wrong
- flangola7 3y agoIs that good or bad?
- 7v3x3n3sem9vv 3y agoit's good. think of it like adding a different kind of lock that requires a different key (method) to open up first. at worst it's no less secure than before. If it works as intended it's a huge disincentive for anyone collecting encrypted data with the hopes that a quantum computer may break encryption the "old" method in the future.
- HumanOstrich 3y agoIf this is always true, then where does crypto come from?
- omginternets 3y agoI believe a stork installs the crypto package for your favorite language.
- lxgr 3y agoJust like the efficient market hypothesis presents a paradox of who actually makes the market, "don't roll your own crypto" keeps this question unanswered :)
- minroot 3y ago[dead]
- lxgr 3y agoNot sure if you're joking, but "your own" usually means "in isolation of both academic and applied cryptography" – and Signal has some of the world's finest of both working on their protocol, as evidenced by the multiple quoted academic papers.