News for hackers. Stuff that matters.

A comment on Assume your devices are compromised. Parent comment

Re:Assume your devices are compromised by bouncycastle on Sunday April 17, 2022 @09:57PM (#31066492)
I was wondering, how much do you trust these tools? Cryptography can be extremely tricky to implement. For example, has the tool been checked for side-channel attacks? Has it had any other audits? (On the GitHub page of the library, it says it's no longer maintained)
[ Parent | on HN ]
Re:Assume your devices are compromised by g3rv4 on Monday April 18, 2022 @05:56AM (#31068946)
I trust it enough no solve my DR scenario. If I was targeted by the NSA, I don't expect this to keep me safe.

I don't think SecretSharingDotNet has had any audits, and I'm pretty sure i hasn't been checked for side-channel attacks. I couldn't find anything in GitHub [1] saying it's no longer maintained though.

I'm pretty sure a well founded attacker would be able to hack me, but I think it's orders of magnitude more likely that I'll forget my master password, I'll get stolen, my apartment will catch on fire or I'll just die. Those are the scenarios I'm preparing for.

[1]: https://github.com/shinji-san/SecretSharingDotNet

[ Parent | on HN ]