News for hackers. Stuff that matters.
Re:Myths about /dev/urandom by tedunangst on Tuesday September 01, 2015 @09:34AM (#10152180)
Well, this is the point of nacl (and successors). You don't need to know that it's using a stream cipher. You only need to know you want to send a secret, and this is the function that does that.
Re:Myths about /dev/urandom by falcolas on Tuesday September 01, 2015 @10:19AM (#10152476)
How secret is it? How much effort do you want an adversary to spend vs. your intended recipient. How do you want to manage keys between yourself and the recipient? What is the size of the secret? How much do you trust the channels over which you are sending the message? Do you need to validate the identity of the secret's recipient? How many secrets do you need to send to how many recipients each minute?

All of these influence how the secret should be bundled up and sent, and it takes more than a library to pick the appropriate method.

Re:Myths about /dev/urandom by tedunangst on Tuesday September 01, 2015 @11:33AM (#10153053)
OK, I admit, if you like you can make it much harder than it needs to be.