Show HN: Cryptob.in – A snippet share tool with client-side encryption

Re:Show HN: Cryptob.in – A snippet share tool with client-si... by tptacek on Saturday November 18, 2017 @02:28PM (#15730261)

Don't bother. You won't gain any meaningful security, and you'll be using the same error-prone, outmoded constructions. Even if you had built this application in perfect, error-proof Haskell, it would still be insecure because of the way you're using AES. Adopt a credible NaCL library.

Really though, if you're interested in crypto, I strongly urge you not to go the route of trying to build crypto applications. The crypto apps people really need are extremely hard to build safely.

A better place to start with crypto is to learn how to break it. The cryptopals challenges are programming intensive and don't have any prerequisites; or, check out LVH's Crypto 101.

[ Parent | on HN ]

Re:Show HN: Cryptob.in – A snippet share tool with client-si... by viktorelofsson on Sunday November 19, 2017 @12:15PM (#15734725)

I took your advice from the other comment and started using TweetNaCl.js which had some pretty good endorsements :)

I’ll definitely check out some more sources on crypto in general. Thanks for the input, really!

[ Parent | on HN ]