3 ms·
If you use a secure crypto primitive, is it correct to say your program is secure? I mean, can you be sure something is secure just because of the crypto lib?
by exposing 12y ago
If you use a secure crypto primitive, is it correct to say your program is secure?
I mean, can you be sure something is secure just because of the crypto lib?
I thought there had something to do with the implementation too?
I ask this because of Tox. The main developer claims Tox is secure because of the crypto library.
It sounds weird to me, so I decided to ask... After all, if it was this easy all programs would be secure, right? Just import a secure crypto lib and it's done? Sounds weird.
https://github.com/irungentoo/toxcore/issues/121#issuecomment-35750212 https://github.com/irungentoo/toxcore/issues/121#issuecommen...
- jimktrains2 12y agoHaving a sound library removes a whole host of issues; however, it doesn't remove all of them. First and second among many are key management and concatenating values before hashing or signing.
- detaro 12y agoNo, you didn't decide to ask, you take a lot of redirections and bullshitting to point out your link. Which is an interesting contribution, but the way you deliver it is really bad style and annoying.
- tox-exposed 12y agoI agree, the main developer has no clue what he is doing.