dchest

76 ms·

691.
by dchest 9y ago
You'll need a time machine that can go back to the AES selection process to ask for a larger block size than 128 bits and/or faster key schedule. 96 bit nonce is so short because in counter mode you encrypt 128-bit block represent
692.
by dchest 9y ago
> t.hash(0.00000000000000001) '0000000000000000' > t.hash(0.00000000000000002) '00000000ffffffff' > t.hash(0.00000000000000003) '00000000ffffffff' > t.hash(0.0000000000000000
693.
by dchest 9y ago
The implementations measured are listed here: https://bench.cr.yp.to/impl-hash/blake2s.html Code mirror: https://github.com/floodyberry/supercop Yeah, of course reference implementation is a lot s
694.
by dchest 9y ago
NIST made clear that by the time of finalist selection, the point of SHA-3 was NOT to replace SHA-2. OP should know better. That's exactly what this post is about. That we shouldn't replace SHA-2 with SHA-3, just what NIST order
695.
by dchest 9y ago
If I recompile Wei Dai's code with optimization, it will make Crypto++ perform better and make blake2sp look slower. Just do it. If it's slower, you're doing something wrong. Which implementation of blake2sp are you measuri
696.
by dchest 9y ago
More than that, a block cipher is a keyed permutation — that is, many permutations selected by the key, soooo by fixing the key we can have an unkeyed permutation and use it for sponges! Or... BLAKE2 uses ChaCha permutation, but includes ad
697.
by dchest 9y ago
If I recompile blake2sp with "/O2" optimization, it improves to 171MB/sec. Too slow! You're doing something wrong or measuring some slow implementation :) It should be more than 500 MB/s. Therefore, every ha
698.
by dchest 9y ago
You're not wrong. Type this into Terminal: openssl speed sha512 sha256
699.
by dchest 9y ago
My pure JavaScript implementation of blake2s (which is approximately half the speed of parallelized sp variant) on 2.6 GHz Core i5 hashes at 170 MiB/s. JavaScript! Whatever you do with your benchmark, you're doing it wrong. Also,
700.
by dchest 9y ago
Hmm, something is wrong with your benchmark: the absolute values in MB/s are very low for i7, and relative too — blake2sp should be much faster than SHA256.
701.
by dchest 9y ago
This MAC did not magically appear from GCM, it is a variant of Carter-Wegman MAC. It's in the same class as Poly1305 and UMAC, VMAC. It was combined with CTR mode to create GCM. Poly1305 as used in NaCl (XSalsa20-Poly1305) or in TLS (C
702.
by dchest 9y ago
It uses a Carter-Wegman MAC variant.
703.
by dchest 9y ago
It is a composition. Some examples of non-composition schemes are sponge-based Keyak and NORX.
704.
by dchest 9y ago
That's still not error handling, that's error logging. Try writing code that depends on the success of the previous operation to perform another operation and you'll quickly find yourself in the callback soup.
705.
by dchest 9y ago
The author of the linked blog post has a post exactly about this: https://www.imperialviolet.org/2014/06/27/streamingencryptio... (I defined and implemented a variant of Adam's idea with NaCl secretboxes
706.
by dchest 9y ago
What an incorrect correction! The commenter's point was: instead of considering a block cipher (AES) as a primitive, developers should consider a higher-level authenticated encryption construction, crypto_box, as a primitive. What you&
707.
by dchest 9y ago
> physically mail the new password Nobody will ever do this.
708.
by dchest 9y ago
On the contrary, it makes it suitable for file systems! File systems are not block devices, they are data structures on top of block devices — it's the job of these data structures to keep stuff, such as data, inodes, and... keys, and
709.
by dchest 9y ago
The choice of algorithm is less baffling than the choice of mode of operation. When designing a new file system, why in world would you use unauthenticated XEX (or XTS) mode instead of an authenticated mode (SIV, HMAC+CTR, ChaCha20-Poly1305
710.
by dchest 9y ago
There's an API: https://github.com/HackerNews/API
711.
by dchest 9y ago
I have each project open in a different VSCode — is that what you're asking for? You can do File > New Window and then open another project in it or just set "window.openFoldersInNewWindow": "on" to always open d
712.
by dchest 9y ago
No, Blink doesn't include V8, it's a separate project. WebKit consists of WebCore — layout engine, and JavaScriptCore — JavaScript engine. Google forked WebCore part of WebKit to create Blink. Before the fork it used a combination
713.
by dchest 9y ago
Blink is a rendering engine, V8 is a JavaScript engine. Node.js contains V8, but not Blink.
714.
by dchest 9y ago
Here's proof of concept from yesterday: https://news.ycombinator.com/item?id=14260755
715.
by dchest 10y ago
How is this a terrible customer service? Sending easily faked pictures of documents is not a proof of account ownership. It's your (or your parents') responsibility to remember password or security answer, don't blame custome
716.
by dchest 10y ago
Sorry, but it doesn't seem to be their fault, it looks more like the usual case where the user doesn't want to take responsibility for their actions and blames customer support for it.
717.
by dchest 10y ago
Sure, but this just rephrases the question as "Why don't they implement hardware-accelerated WebM?".
718.
by dchest 10y ago
Ah, that's true, indeed. The page, though, will appear as a link without any contents, because the bot won't be able to index it.
719.
by dchest 10y ago
design your site properly then you shouldn't really need a robots.txt But how? For example, if you don't want a page to be indexed by Google, you add this information to robots.txt. Nofollow doesn't work for every case, bec
720.
by dchest 10y ago
This is crazy, that's not what robots.txt is for. How can you complain about the security of a thing that is not meant to provide security? According to your logic, newspapers are a "failed experiment because they rely on trust ra

More ›