Insecurity in the Jungle (disk)

Re:Insecurity in the Jungle (disk) by tptacek on Friday June 03, 2011 @12:38PM (#2617002)

I'd rather geek out about CTR v CBC than harp on the scrypt recommendation. Consider the scrypt thing a friendly style note. You wrote an article about a competitor's insecurities. When you do that, don't recommend they adopt your own cryptosystem unless (like CRI had to do with DPA countermeasures) they have to. Here, it just made you look unnecessarily petty.

What privacy attacks were you thinking of? Call some of them out.

[ Parent | on HN ]

Re:Insecurity in the Jungle (disk) by cperciva on Friday June 03, 2011 @01:31PM (#2617216)

Consider the scrypt thing a friendly style note.

Note taken. :-)

What privacy attacks were you thinking of?

Things like replacing files with malware.

[ Parent | on HN ]

Re:Insecurity in the Jungle (disk) by tptacek on Friday June 03, 2011 @01:33PM (#2617232)

Yeah, we were saying the same thing, I think, but you said it more clearly.

[ Parent | on HN ]