News for hackers. Stuff that matters.
Re:Everything you need to know about cryptography in 1 hour by tptacek on Friday May 14, 2010 @03:12PM (#1348264)
ECC vs. RSA is a place where you certainly know better than me; I have that list of things Kaliski said not to do wrong with ECC and very little else. I also think we probably don't disagree very much about ECC.

Where I know we do disagree: public key crypto is a threshold over which I would not be OK implementing a custom cryptosystem. If I need public key, it's GPG or nothing. I am terrified of public key crypto.

Re:Everything you need to know about cryptography in 1 hour by cperciva on Friday May 14, 2010 @03:31PM (#1348313)
I didn't intend for my audience to be implementing everything themeselves. Knowing that OAEP is better than PKCS padding is useful even if you don't write a single line of code, because it helps you select the right library to use.