4 ms·
> Try to scare implementors away from constant-time software. e.g. “It will be too slow.” “It’s too hard to write.” More generally, try to scare implementors a
by jamesfisher 12y ago
> Try to scare implementors away from constant-time software. e.g. “It will be too slow.” “It’s too hard to write.”
More generally, try to scare implementors away entirely. "Never roll your own crypto." Leave it to the experts -- i.e., NSA.
- Nursie 12y agoErm, no. There are good reasons not to roll your own and none are to do with the NSA. One is that your own is likely full of flaws that you can't see but an attacker will spot in seconds. It's easy to write crypto you can't break yourself.
- tptacek 12y agoNot so much "easy" as "inevitable". Everyone can write crypto they can't break themselves.