News for hackers. Stuff that matters.

A comment on Show HN: Cryptob.in – A snippet share tool with client-side encryption. Parent comment

Re:Show HN: Cryptob.in – A snippet share tool with client-si... by viktorelofsson on Saturday November 18, 2017 @04:56AM (#15728431)
Yes, that would probably make sense for the browsers that supports it. Which seems to be mostly everyone except IE.

It will be fixed in the next update!

[ Parent | on HN ]
Re:Show HN: Cryptob.in – A snippet share tool with client-si... by tptacek on Saturday November 18, 2017 @02:28PM (#15730261)
Don't bother. You won't gain any meaningful security, and you'll be using the same error-prone, outmoded constructions. Even if you had built this application in perfect, error-proof Haskell, it would still be insecure because of the way you're using AES. Adopt a credible NaCL library.

Really though, if you're interested in crypto, I strongly urge you not to go the route of trying to build crypto applications. The crypto apps people really need are extremely hard to build safely.

A better place to start with crypto is to learn how to break it. The cryptopals challenges are programming intensive and don't have any prerequisites; or, check out LVH's Crypto 101.

[ Parent | on HN ]
Re:Show HN: Cryptob.in – A snippet share tool with client-si... by viktorelofsson on Sunday November 19, 2017 @12:15PM (#15734725)
I took your advice from the other comment and started using TweetNaCl.js which had some pretty good endorsements :)

I’ll definitely check out some more sources on crypto in general. Thanks for the input, really!

[ Parent | on HN ]