5 ms·

Hey tptacek, I'm CTO at a young zero knowledge email startup, and while I'm a proficient crypto user, I'd like to learn more about security and cryptography in

by simi_ 12y ago

Hey tptacek, I'm CTO at a young zero knowledge email startup, and while I'm a proficient crypto user, I'd like to learn more about security and cryptography in general. Do you have any tips for me? Thanks!

tptacek 12y ago
I do! http://cryptopals.com http://cryptopals.com.
- ndesaulniers 12y ago
  I noticed that solutions to Set 1 Challenge 1 in languages other than C++ all 404. Does that mean that no one has contributed solutions? If so, how can I contribute?
  - WatchDog 12y ago
    They received a ton of solutions in a bunch of different languages when they were running this as a closed competition. They said it would take some time for them to add the solutions to the page, but its been months and I think they have given up on it.
    - tptacek 12y ago
      We didn't give up on it! I did, however, leave Matasano to start a new company, and that's slowed us down. We will certainly still be posting solutions. Another problem is that every time we've talked about posting solutions, people have asked us to hold off. Finally, a quick jab: thousands and thousands of people completed several sets of these challenges --- more than a thousand got through the CBC padding oracle, which (in our challenge) is cryptographically more complicated than the TLS POODLE attack. None of them had solutions. You don't need them either. :)
      - sanderjd 12y ago
        I thought 1.6 (repeating-key xor) was the hardest one prior to set 6 and I'm guessing many thousands made it through that one!
        sgdread 12y ago
        Set #7 is much harder than #6. And there're rumors about set #8 which has attacks on EC-algos.
        tptacek 12y ago
        We know what the 8 challenges are, but we have to do the work of getting good reproducible challenges worked out for them.
        sanderjd 12y ago
        Set #6 is also much harder than set #5! Or at least, I thought so, but I haven't finished it or, sadly, worked on it for quite a few months.
- simi_ 12y ago
  Thank you!
emmelaich 12y ago
Try this "Crypto I" course https://www.coursera.org/course/crypto
- simi_ 12y ago
  Thanks, will do!
- Elhana 12y ago
  Also Udacity has "Applied Cryptography"[1]. While coursera focuses on theory, it is a bit more practical. I'd say they complement each other nicely. [1] https://www.udacity.com/course/cs387 https://www.udacity.com/course/cs387

by simi_ 12y ago

tptacek 12y ago

I do! http://cryptopals.com http://cryptopals.com.

ndesaulniers 12y ago
I noticed that solutions to Set 1 Challenge 1 in languages other than C++ all 404. Does that mean that no one has contributed solutions? If so, how can I contribute?
- WatchDog 12y ago
  They received a ton of solutions in a bunch of different languages when they were running this as a closed competition. They said it would take some time for them to add the solutions to the page, but its been months and I think they have given up on it.
  - tptacek 12y ago
    We didn't give up on it! I did, however, leave Matasano to start a new company, and that's slowed us down. We will certainly still be posting solutions. Another problem is that every time we've talked about posting solutions, people have asked us to hold off. Finally, a quick jab: thousands and thousands of people completed several sets of these challenges --- more than a thousand got through the CBC padding oracle, which (in our challenge) is cryptographically more complicated than the TLS POODLE attack. None of them had solutions. You don't need them either. :)
    - sanderjd 12y ago
      I thought 1.6 (repeating-key xor) was the hardest one prior to set 6 and I'm guessing many thousands made it through that one!
      - sgdread 12y ago
        Set #7 is much harder than #6. And there're rumors about set #8 which has attacks on EC-algos.
        tptacek 12y ago
        We know what the 8 challenges are, but we have to do the work of getting good reproducible challenges worked out for them.
        sanderjd 12y ago
        Set #6 is also much harder than set #5! Or at least, I thought so, but I haven't finished it or, sadly, worked on it for quite a few months.
simi_ 12y ago
Thank you!

emmelaich 12y ago

Try this "Crypto I" course https://www.coursera.org/course/crypto

simi_ 12y ago
Thanks, will do!
Elhana 12y ago
Also Udacity has "Applied Cryptography"[1]. While coursera focuses on theory, it is a bit more practical. I'd say they complement each other nicely. [1] https://www.udacity.com/course/cs387 https://www.udacity.com/course/cs387