An Empirical Study of Vulnerabilities in Cryptographic Libraries

Re:An Empirical Study of Vulnerabilities in Cryptographic Li... by TheChaplain on Sunday July 25, 2021 @10:51AM (#27949552)

Many seems to agree with the "You Shouldn't Roll Your Own Crypto", but I interpret it differently.

If you are interested you definitely should. Implement existing ciphers, learn, compare, create your own ciphers, test, crack, research and discuss. It's the perfect way to learn more and become better at it.

However, don't put it in production or with real data.

[ Parent | on HN ]

Re:An Empirical Study of Vulnerabilities in Cryptographic Li... by detaro on Sunday July 25, 2021 @10:54AM (#27949571)

That is the mainstream interpretation.

[ Parent | on HN ]

Re:An Empirical Study of Vulnerabilities in Cryptographic Li... by ghoward on Sunday July 25, 2021 @11:01AM (#27949645)

You are correct, but to someone new, the phrase sounds like an absolute and probably discourages them from ever trying. A great blog post about this phenomenon is https://soatok.blog/2021/03/04/no-gates-no-keepers/ .

For my part, I've met people who have told me to not even try because I need to get a PhD before I even implement crypto. Not design crypto; implement crypto.

So while you are correct that it is the mainstream interpretation, that's not how it looks from the outside.

[ Parent | on HN ]