News for hackers. Stuff that matters.

A comment on It’s 255:19AM. Do you know what your validation criteria are?. Parent comment

Re:It’s 255:19AM. Do you know what your validation criteria ... by Joker_vD on Tuesday October 06, 2020 @08:38AM (#24697052)
> it was never a design goal of Ed25519 to begin with to strictly define the set of valid (and invalid) signatures

For a popular enough protocol, if there is an underspecified thing then there will be two implementations that implement that thing differently, and if possible, incompatibly. And I am talking about correctly programmed and compliant implementations, never mind the buggy and/or deliberately non-compliant implementations (cf. Microsoft's "No standard or clause in a standard has a divine right of existence" stance). That's why the designer should not leave the implementers any rope whatsoever to strangle themselves, especially in cryptography.

[ Parent | on HN ]
Re:It’s 255:19AM. Do you know what your validation criteria ... by formerly_proven on Tuesday October 06, 2020 @12:13PM (#24699310)
> That's why the designer should not leave the implementers any rope whatsoever to strangle themselves, especially in cryptography.

5 bits of choice is a lot of rope to auto-asphyxiate oneself in cryptography.

[ Parent | on HN ]