News for hackers. Stuff that matters.

A comment on RSA is a fragile cryptosystem. Parent comment

Re:RSA is a fragile cryptosystem by tptacek on Monday July 08, 2019 @09:36AM (#20382563)
He’s saying that if you can get away with generating something like a random API key and just having the client save that, that’s much safer than using public key cryptography.
[ Parent | on HN ]
Re:RSA is a fragile cryptosystem by fireflash38 on Tuesday July 09, 2019 @07:45AM (#20390820)
Minor clarification:

> that’s much safer than using public key cryptography.

It's much harder to screw up than using PKC (thereby making it safer). It's something that is really important for UX - you want to make the easiest path the safest path.

[ Parent | on HN ]
Re:RSA is a fragile cryptosystem by tptacek on Tuesday July 09, 2019 @11:56AM (#20393081)
No. Don't go looking for reasons to use public key where the underlying design doesn't necessitate it.
[ Parent | on HN ]