News for hackers. Stuff that matters.
Re:RSA is a fragile cryptosystem by rocqua on Monday July 08, 2019 @10:21AM (#20382928)
I might be misreading, but it seems like you advise against IES. If so, does that extend to ECIES? I ask because the actual article actually suggests ECIES.
Re:RSA is a fragile cryptosystem by lvh on Monday July 08, 2019 @11:34AM (#20383608)
"Finite-field" is the operative phrase in that sentence. I wouldn't tell you to use IES, as in the thing where you do g^xy mod p. I would tell you to use libsodium's box, which is a specific implementation of something sorta like ECIES, though.

The confusion is that IES/ElGamal sometimes means a family of systems and sometimes someone literally means FFDH + AESCTR or something. The abstract concept is fine, but you should use a hardened implementation.