3 ms·
Crypto library authors seem to have taken the philosophy that "it was hard for me to learn all this stuff, so it should be hard to use". Since I started working
by kingkilr 13y ago
Crypto library authors seem to have taken the philosophy that "it was hard for me to learn all this stuff, so it should be hard to use". Since I started working on the cryptography library that lvh mentioned I've seen some absolutely amazing APIs from crypto libraries:
* Undocumented error conditions (actually in general the documentation is atrocious for crypto libraries, "crypto is easy, why would you need docs"?)
* ECB as the default mode for block ciphers
* Ignoring invalid parameters
* Allowing you to provide parameters which basically your cryptography a no-op (e=1)
* Modes whose purpose is undocumented, merely "This mode should not be used"
And finally, absolutely NO python crypto libraries expose AES GCM. (This is all to say nothing of the myriad of other issues I have)
- illumen 13y agoCrypto is hard - we should teach it better. This book helps with teaching crypto and python at the same time... http://inventwithpython.com/hacking/ http://inventwithpython.com/hacking/