4 ms·

Satoshi is more than likely one or more individuals with significant crypto experience. Open{SSH/BSD/SSL} developers have significant crypto experience. Don't

by dfc 13y ago

Satoshi is more than likely one or more individuals with significant crypto experience. Open{SSH/BSD/SSL} developers have significant crypto experience. Don't get me wrong I am a huge Debian fanboy, but how much crypto code do Debian developers write?

betterunix 13y ago
"Satoshi is more than likely one or more individuals with significant crypto experience" I doubt that very much, based on reading the original Bitcoin paper and his posts to the cryptography mailing list. More than likely Satoshi was an amateur/enthusiast.
dllthomas 13y ago
> how much crypto code do Debian developers write? The historical answer seems to have been "too much"...
- mcguire 13y ago
  Didn't they break OpenSSL quite significantly?
  - dllthomas 13y ago
    http://www.debian.org/security/2008/dsa-1571 http://www.debian.org/security/2008/dsa-1571 "Luciano Bello discovered that the random number generator in Debian's openssl package is predictable. This is caused by an incorrect Debian-specific change to the openssl package (CVE-2008-0166). As a result, cryptographic key material may be guessable."
- dfc 13y ago
  The openssl keys were a disaster, no doubt. Are there other examples?
  - dllthomas 13y ago
    Not that I'm aware of; I was just referencing the one. But the one certainly provides some support for "don't touch crypto" as a good guideline.
    - dfc 13y ago
      Certainly provides support for "don't touch crypto" guidance, but that was not your original comment. I thought your response unfairly characterized the entire DD team over one incident.
      - dllthomas 13y ago
        I didn't mean to offend - it was good natured teasing. I use Debian myself.
  - pilsetnieks 13y ago
    I assume you meant the OpenSSL PRNG seed? (https://www.schneier.com/blog/archives/2008/05/random_number_b.html https://www.schneier.com/blog/archives/2008/05/random_number...)

4 ms·

Satoshi is more than likely one or more individuals with significant crypto experience. Open{SSH/BSD/SSL} developers have significant crypto experience. Don't

by dfc 13y ago

betterunix 13y ago
"Satoshi is more than likely one or more individuals with significant crypto experience" I doubt that very much, based on reading the original Bitcoin paper and his posts to the cryptography mailing list. More than likely Satoshi was an amateur/enthusiast.
dllthomas 13y ago
> how much crypto code do Debian developers write? The historical answer seems to have been "too much"...
- mcguire 13y ago
  Didn't they break OpenSSL quite significantly?
  - dllthomas 13y ago
    http://www.debian.org/security/2008/dsa-1571 http://www.debian.org/security/2008/dsa-1571 "Luciano Bello discovered that the random number generator in Debian's openssl package is predictable. This is caused by an incorrect Debian-specific change to the openssl package (CVE-2008-0166). As a result, cryptographic key material may be guessable."
- dfc 13y ago
  The openssl keys were a disaster, no doubt. Are there other examples?
  - dllthomas 13y ago
    Not that I'm aware of; I was just referencing the one. But the one certainly provides some support for "don't touch crypto" as a good guideline.
    - dfc 13y ago
      Certainly provides support for "don't touch crypto" guidance, but that was not your original comment. I thought your response unfairly characterized the entire DD team over one incident.
      - dllthomas 13y ago
        I didn't mean to offend - it was good natured teasing. I use Debian myself.
  - pilsetnieks 13y ago
    I assume you meant the OpenSSL PRNG seed? (https://www.schneier.com/blog/archives/2008/05/random_number_b.html https://www.schneier.com/blog/archives/2008/05/random_number...)