News for hackers. Stuff that matters.

A comment on Crypto 101 – Introductory course on cryptography. Parent comment

Re:Crypto 101 – Introductory course on cryptography by wolf550e on Friday December 02, 2016 @01:13PM (#13090872)
People who can break it won't spend the time breaking your homegrown crypto, so you won't get proof it's broken. But it's still broken. If lots of money or lives of political dissidents are at stake, it will be broken.

To have really capable people work on breaking your crypto for free, you have to be an insider. You become an insider by breaking other people's crypto. You can publish a break in an insider's crypto even if you are unknown. After you publish a few such papers, you become an insider and can publish your own crypto other people will spend their time trying to break.

People can learn the state of the art and develop an alternative to the common (NIST) choices which are no worse, but also no better. Some of those are blessed as "national pride ciphers" (GOST, Camellia, SEED, etc.).

[ Parent | on HN ]
Re:Crypto 101 – Introductory course on cryptography by stcredzero on Friday December 02, 2016 @01:25PM (#13090957)
Ciphers aren't the place where security most often fails. The failures have to do with implementation. More commonly, they have to do with implementation of protocols and systems using the protocols.
[ Parent | on HN ]
Re:Crypto 101 – Introductory course on cryptography by wolf550e on Friday December 02, 2016 @01:58PM (#13091262)
I agree, but I replied to someone who talked about ciphers.
[ Parent | on HN ]
Re:Crypto 101 – Introductory course on cryptography by stcredzero on Friday December 02, 2016 @04:26PM (#13092422)
Of course. I was also (mainly) posting for the benefit of 3rd parties.
[ Parent | on HN ]
Re:Crypto 101 – Introductory course on cryptography by andrewflnr on Friday December 02, 2016 @03:33PM (#13092039)
We're specifically talking about the scenario where you have a "tiger team" (strcredzero's phrasing) trying to break it. I interpreted GP as asking just how hard a time the tiger team would have if they don't have source code.
[ Parent | on HN ]