Re:Phil Zimmermann: Beware of Snake Oil Crypto (1997)
by yuhong on Tuesday August 23, 2011 @02:25PM
(#2917721)
It is still a good point though. Even using proven protocols, you can still make mistakes in the implementation. Using proven implementations is best.
[ Parent
| on HN ]
Re:Phil Zimmermann: Beware of Snake Oil Crypto (1997)
by tptacek on Tuesday August 23, 2011 @02:30PM
(#2917757)
I took his point to be the opposite: that the worst that seems to happen with cryptosystems is that implementations are broken.
That bugged me on two levels: first, the idea that there haven't been terrible bugs in e.g. SSL3, and second that an implementation bug means "just upgrade OpenSSL", when it's more like "the discovery of buffer overflows and attendant years of chaos".
I am jumpy about this topic, though.