News for hackers. Stuff that matters.

A comment on If your cipher were secure, this image wouldn't have repeating patterns (2015). Parent comment

Re:If your cipher were secure, this image wouldn't have repe... by cryptonector on Friday February 28, 2020 @07:38PM (#22447756)
This happens with some regularity in the crypto scene. Someone comes up with a cipher and they think it must be awesome! because they came up with it. Not being cryptographers, these ciphers always fall quickly, then the authors get defensive. I want a doll with Alan Turing's likeness that says "cryptography is hard" when you pull the cord.
[ Parent | on HN ]
Re:If your cipher were secure, this image wouldn't have repe... by teddyh on Friday February 28, 2020 @08:16PM (#22447949)
“Anyone, from the most clueless amateur to the best cryptographer, can create an algorithm that he himself can't break.”

— Bruce Schneier

https://www.schneier.com/blog/archives/2011/04/schneiers_law...

[ Parent | on HN ]
Re:If your cipher were secure, this image wouldn't have repe... by ErikAugust on Friday February 28, 2020 @09:17PM (#22448274)
That was one of my takeaways from reading Applied Cryptography. It has come in handy when evaluating crypto-based software. “Rolled their own crypto... avoid.”
[ Parent | on HN ]
Re:If your cipher were secure, this image wouldn't have repe... by hinkley on Friday February 28, 2020 @09:52PM (#22448418)
If you get bored or tired you could hop over to the compression groups and have some of the same arguments, but with easier counter examples.
[ Parent | on HN ]
Re:If your cipher were secure, this image wouldn't have repe... by jascii on Friday February 28, 2020 @07:54PM (#22447831)
Cryptography is hard enough when using proven algorithms..
[ Parent | on HN ]
Re:If your cipher were secure, this image wouldn't have repe... by Gibbon1 on Friday February 28, 2020 @08:35PM (#22448057)
I remember on an old crypto mailing list some lowly PHP programmer asking if instead of a grab bag of primitives there was some library where he could just encrypt/decrypt a random object. Without having to build a Frankenstein thing out of random cryptographic parts.

Everyone peed on him and he never came back.

The poor sap was right though. The proven algorithms tend to fail catastrophically when used or implemented incorrectly.

[ Parent | on HN ]
Re:If your cipher were secure, this image wouldn't have repe... by larzang on Friday February 28, 2020 @10:29PM (#22448583)
Ironically now PHP is one of the few high-level languages doing this right, with built-in libsodium support and an excellent idiot-proof library available in Halite on top of that.
[ Parent | on HN ]
Re:If your cipher were secure, this image wouldn't have repe... by jjeaff on Friday February 28, 2020 @11:19PM (#22448791)
Agreed. And it even has a global you can use for the cipher that is updated along with the php version.
[ Parent | on HN ]
Re:If your cipher were secure, this image wouldn't have repe... by artsyca on Friday February 28, 2020 @08:18PM (#22447970)
Turing is my hero as I'm sure he is for a lot of us I sometimes apply the reasoning of what would Alan Turing say? And not only what would he say but how would he say it?

I'm fascinated by his gentle nature as an algorithmic thinker who applied computer science to all aspects of his experience

[ Parent | on HN ]