Wycheproof – Tests that check cryptographic software for known weaknesses

Re:Wycheproof – Tests that check cryptographic software for ... by quickben on Monday December 19, 2016 @05:59PM (#13215752)

It would be awesome if they port this to c/c++.

On a related note: how prevalent is Java among the security folk?

Most of the crypto algorithms I've read are done in C. As a person that wants to try rolling my own crypto, I just don't see myself writing it in Java.

[ Parent | on HN ]

Re:Wycheproof – Tests that check cryptographic software for ... by r3bl on Monday December 19, 2016 @06:18PM (#13215876)

Not an expert, but I'm pretty sure that the first rule of crypto is that you should not roll your own, at least not in a place of any actual importance.

[ Parent | on HN ]

Re:Wycheproof – Tests that check cryptographic software for ... by dboreham on Tuesday December 20, 2016 @03:24AM (#13218320)

Crypto for Java programs tends to be written in Java. Not always: you see OpenSSL used underneath Tomcat via APR for example, but certainly very often the crypto is coded in Java.

[ Parent | on HN ]

Re:Wycheproof – Tests that check cryptographic software for ... by frugalmail on Monday December 19, 2016 @07:29PM (#13216312)

Too bad there aren't good standards in C++ for security APIs and architectures unlike Java.

[ Parent | on HN ]

Re:Wycheproof – Tests that check cryptographic software for ... by baby on Tuesday December 20, 2016 @02:04PM (#13222836)

Unfortunately a bunch of stuff uses java. Like Android.

[ Parent | on HN ]