Re:Phil Zimmermann: Beware of Snake Oil Crypto (1997)
by tptacek on Tuesday August 23, 2011 @07:59PM
(#2918868)
Saying "AES-256-CBC and RSA 4096" isn't nearly enough detail to assess whether you know what you're talking about, and pushing me through a thread to the limit of what I personally know how to break is just going to give you false confidence, because I know less than a lot of people I know.
In case this is what you were implying: it is absolutely not the case that the big problem with OpenSSL is that it'll let you use Camellia in ECB or 512 bit ElGamal. The problem is that there are (a) more things you can do terribly wrong with AES-256-CBC than there are things you ar likely to do with wrong with, say, C memory handling, and (b) things you have to do well beyond encrypting soundly with AES-256-CBC to make your system work as a whole.
In case this is what you were implying: it is absolutely not the case that the big problem with OpenSSL is that it'll let you use Camellia in ECB or 512 bit ElGamal. The problem is that there are (a) more things you can do terribly wrong with AES-256-CBC than there are things you ar likely to do with wrong with, say, C memory handling, and (b) things you have to do well beyond encrypting soundly with AES-256-CBC to make your system work as a whole.