News for hackers. Stuff that matters.
Re:This shouldn't have happened: A vulnerability postmortem by loup-vaillant on Thursday December 02, 2021 @11:57AM (#29418761)
For symmetric cryptography (ciphers & hashes), I agree. I'd say as far as to say they're stupidly easy to test.

Polynomial hashes, elliptic curves, and anything involving huge numbers however are more delicate. Depending on how you implement them, you could have subtle limb overflow issues, that occur so extremely rarely by chance that random test don't catch them. For those you're stuck with either proving that your code does not overflow, or reverting to simpler, slower, safer implementation techniques.

Re:This shouldn't have happened: A vulnerability postmortem by vlovich123 on Thursday December 02, 2021 @07:37PM (#29425126)
That's a very good point. Thanks for the correction!