News for hackers. Stuff that matters.

A comment on Cryptographic Right Answers. Parent comment

Re:Cryptographic Right Answers by web007 on Wednesday April 04, 2018 @01:21AM (#16752180)
Is it problematic that we're moving to a djb crypto monoculture, with 25519 and ChaCha and Poly1305 and even NaCl all as recommendations? Or is he the hero we need to fight bad or weakened crypto?

I've loved the CryptoPals series, even just reading the challenges for the more advanced parts while I poke at the easier stuff. Please keep them up, and hopefully I'll get all the way through "Shackling the Masses with Drastic Rap Tactics" someday!

[ Parent | on HN ]
Re:Cryptographic Right Answers by loup-vaillant on Wednesday April 04, 2018 @04:08AM (#16752937)
DJB's primitives are generally simpler than what came before. They're easy to implement, pretty easy to immunise against timing attacks, and relatively easy to review.

So we're not just trusting DJB here. We're trusting a sizeable community that reviewed his work.

[ Parent | on HN ]
Re:Cryptographic Right Answers by lvh on Wednesday April 04, 2018 @12:09PM (#16756081)
I don't think there's a problem with djb monoculture, and I geerally agree that the real enemy is "yet another !@#$%! CBC padding oracle attack". It's not like these things haven't been analyzed by third parties.
[ Parent | on HN ]