dchest

57 ms·

751.
by dchest 10y ago
I like such tiny projects: you can drop .c and .h into your own project and have something useful ready-to-use. Thanks for sharing! For those asking, this is what distinguishes it from libsodium. Compared to NaCl or TweetNaCl, it has passwo
752.
by dchest 10y ago
To add more: Not only 0, but also some other keys listed here https://cr.yp.to/ecdh.html which produce all-zero shared key. DJB argues you shouldn't validate public keys except for "some unusual non-Diffie-Hellman
753.
by dchest 10y ago
Richard Hipp called SQLite "serverless" long before you started trying to be cool by hating buzzwords https://sqlite.org/serverless.html
754.
by dchest 10y ago
Not every serverless database is embedded, but most of them - those that are also called "database library" are. Some examples of DBs that are both embedded and call themselves serverless: - SQLite: https://sqlite.org&#
755.
by dchest 10y ago
No, serverless database is not a recent buzz word, but a term frequently used to describe DB that doesn't need a separate server running to which clients connect: compare MySQL, PostgreSQL against BDB, LMDB, SQLite.
756.
by dchest 10y ago
and in V8 https://v8project.blogspot.ch/2015/09/custom-startup-snapsho...
757.
by dchest 10y ago
(The JSX one returns undefined)
758.
by dchest 10y ago
Ubuntu 12.04 is supported until April 2017, so yes, it's still an "active" version, and security issues should be fixed.
759.
by dchest 10y ago
It's still alive — latest release December 11, 2016! Two years ago I worked on an Electron-based app for Windows. I tested* it right on my dev machine in Electron for Linux _and_ the whole build process, including the NSIS-based insta
760.
by dchest 10y ago
TrueOS (PC-BSD successor) recently switched to it ( https://www.trueos.org/handbook/postinstall.html#use-of-open... ) citing much faster boot times due to parallel launching.
761.
by dchest 10y ago
Similarly: BLAKE2s (32-bit words) - 554 MiB/s BLAKE2b (64-bit words) - 890 MiB/s (source: https://blake2.net/ ) The difference is also clear in pure JavaScript implementations — JS doesn't have na
762.
by dchest 10y ago
Impressive.
763.
by dchest 10y ago
Secret Service shouldn't protect vice president, because there's a higher target! This gets repeated so many times, I wonder if we even should use crypto for anything that costs less than a billion dollars. Imagine that you can st
764.
by dchest 10y ago
For no practical reason — actually, for the same reason I rewrote in from the original Python version: I just fell in love with the language (first Racket, then Go). Also, rewriting it in Go helped me understand that my brain is wired for i
765.
by dchest 10y ago
As a data point, this little Racket server — https://github.com/coding-robots/iwl — served millions of requests from late 2010 until early 2016 (when I switched to Go) without any issues first on a smallest Rackspace C
766.
by dchest 10y ago
https://news.ycombinator.com/item?id=13466306
767.
by dchest 10y ago
"In addition, your inbox is encrypted with AES-256 which is superior to RSA." Ha! https://blog.scryptmail.com/q-a/
768.
by dchest 10y ago
A user once asked me if subscribing to our newsletter — with announcements about our software releases — was free. Since then I added "free" ("Subscribe to our free newsletter") to every subscribe form I designed.
769.
by dchest 10y ago
Agreed on phone numbers. Speaking of Wire, it doesn't require them.
770.
by dchest 10y ago
If you're interested in learning how to implement end-to-end chats with multiple devices, checkout out Wire security whitepaper ( https://wire.com/resource/Wire%20Security%20Whitepaper/downl... ) for one way o
771.
by dchest 10y ago
Parallel versions of BLAKE2 are indeed even faster, but optimized implementations of non-parallel BLAKE2s and BLAKE2b also use SIMD instructions in compression function (e.g. https://github.com/BLAKE2/BLAKE2/blob&#
772.
by dchest 10y ago
(Thanks!:) There are a few optimized implementation in the BLAKE2 code package — https://github.com/BLAKE2/BLAKE2 . "Ref" indeed doesn't use SIMD, but other implementations do use them. I think the claim
773.
by dchest 10y ago
What I'm saying is that not revealing key from observing outputs is a required feature for such PRF to be cryptographically secure. What you cited is a "worst case" for hash table implementation — a hash table revealing its i
774.
by dchest 10y ago
All collision-resistant secure cryptographic hash functions (whew) should have this property (BLAKE2, SHA-3, Skein, etc.) (Note: those vulnerable to length extension — e.g. SHA-1, SHA-2 — should be used in HMAC construction for keying.) BLA
775.
by dchest 10y ago
A secure cryptographic hash function's collision resistance should be MIN(output_length/2, claimed_security). For example, SHA-256 collision security is 128 bits with 256-bit output, but if you truncate output to 128 bits, collisi
776.
by dchest 10y ago
Chopped HMAC-SHA will have similar properties to SipHash, however it is a lot slower.
777.
by dchest 10y ago
It's not "worst case" feature, it's the standard, minimal feature of any secure cryptographic PRF.
778.
MacOS 10.12 “Allow apps downloaded from” settings(twitter.com)
3 points by dchest 10y ago|0 comments
779.
by dchest 10y ago
There's this: https://vivaldi.com/source/ (don't know what's inside)
780.
by dchest 10y ago
It was true a few years ago, but Chrome no longer uses WebKit, they forked it to their own Blink engine, so now there are differences between them and you have to write stylesheets for both (example: -apple-system font vs BlinkMacSystemFont

More ›