News for hackers. Stuff that matters.
Re:Too Much Crypto [pdf] by fanf2 on Tuesday December 31, 2019 @08:15AM (#21920763)
Algorithm agility is a feature of most cryptographic protocols, and it is hard to do well. https://tools.ietf.org/html/rfc7696
Re:Too Much Crypto [pdf] by haecceity on Tuesday December 31, 2019 @04:30PM (#21924888)
Why is it difficult? TLS 1.3 has a much smaller set of cipher suites than previous versions. Does that help?
Re:Too Much Crypto [pdf] by bjoli on Friday January 10, 2020 @02:54AM (#22009212)
The reason for that is that there were way to many attacks on earlier TLS versions that used the cryptographic agility to make the victims use poor crypto. The strong crypto was never broken, but the protocol was used to make sure strong crypto never happened.