3 ms·

Did you read to the end of the paragraph where they say that they're going to implement crypto? They're not insecure about being able to make a workable crypto

by tinco 12y ago

Did you read to the end of the paragraph where they say that they're going to implement crypto? They're not insecure about being able to make a workable crypto api. They are aware that it's not a good idea to implement crypto in a high level language that's not been engineered for security yet. Their solution is to wrap a proven C crypto library, which is probably what good Go and JVM languages do also (I wouldn't trust one that doesn't) and it's probably going to be ready within a month or two. edit: just an aside, why would you terminate your SSL in Go/Java, it's good practice to have a proxy like nginx or haproxy do that for you.

leorocky 12y ago
> Did you read to the end of the paragraph where they say that they're going to implement crypto? I did, they said it would take a very long time. > Their solution is to wrap a proven C crypto library This is good. I don't have a problem with that, because that's what you'd have to do yourself right now if you wanted to do any kind of basic crypto with rust, include a C library and wrap it with boiler plate just to get it working. > which is probably what good Go and JVM languages do Nope, Go implemented their own crypto: http://golang.org/src/pkg/crypto/elliptic/p224.go http://golang.org/src/pkg/crypto/elliptic/p224.go http://golang.org/src/pkg/crypto/ http://golang.org/src/pkg/crypto/
- tptacek 12y ago
  Golang had subject matter experts to do that work.
  - deleted 12y ago
    [deleted]
numbsafari 12y ago
Here's the go crypto, written in go (and some hand-crafted assembly): https://code.google.com/p/go/source/browse/#hg%2Fsrc%2Fpkg%2Fcrypto https://code.google.com/p/go/source/browse/#hg%2Fsrc%2Fpkg%2... and, in case you are curious: https://groups.google.com/forum/#!topic/golang-nuts/0za-R3wVaeQ https://groups.google.com/forum/#!topic/golang-nuts/0za-R3wV...

by tinco 12y ago

leorocky 12y ago

> Did you read to the end of the paragraph where they say that they're going to implement crypto? I did, they said it would take a very long time. > Their solution is to wrap a proven C crypto library This is good. I don't have a problem with that, because that's what you'd have to do yourself right now if you wanted to do any kind of basic crypto with rust, include a C library and wrap it with boiler plate just to get it working. > which is probably what good Go and JVM languages do Nope, Go implemented their own crypto: http://golang.org/src/pkg/crypto/elliptic/p224.go http://golang.org/src/pkg/crypto/elliptic/p224.go http://golang.org/src/pkg/crypto/ http://golang.org/src/pkg/crypto/

tptacek 12y ago
Golang had subject matter experts to do that work.
- deleted 12y ago
  [deleted]

numbsafari 12y ago

Here's the go crypto, written in go (and some hand-crafted assembly): https://code.google.com/p/go/source/browse/#hg%2Fsrc%2Fpkg%2Fcrypto https://code.google.com/p/go/source/browse/#hg%2Fsrc%2Fpkg%2... and, in case you are curious: https://groups.google.com/forum/#!topic/golang-nuts/0za-R3wVaeQ https://groups.google.com/forum/#!topic/golang-nuts/0za-R3wV...