News for hackers. Stuff that matters.

A comment on Show HN: Encrypted VPN in 2k lines of Go. Parent comment

Re:Show HN: Encrypted VPN in 2k lines of Go by daxorid on Thursday October 05, 2017 @11:59AM (#15410196)
It builds on Noise, which is very highly regarded and reasonably well researched in crypto circles. Ironically (vis-a-vis your comment), it was designed largely to avoid the mistakes inherent in developers "rolling [their] own" crypto on TLS with poorly chosen stacks, ciphers, parameters, downgrade criteria, etc.

https://noiseprotocol.org/noise.html

[ Parent | on HN ]
Re:Show HN: Encrypted VPN in 2k lines of Go by twitchyliquid64 on Thursday October 05, 2017 @08:00PM (#15413497)
Guess you could say noise is pretty quiet xD

+1 for trying to eliminate complexity from developer error. This was one of the worst cows in the herd for OpenSSL.

That said, I think a bit of good design on the APIs part can go a long way. For Instance, I think Go's crypto/tls aint bad: Its pretty difficult to 'accidentally' configure it in a shocking configuration (suites have to be overridden, turning off verification requires you to set a field called InsecureNoVerify etc).

[ Parent | on HN ]