News for hackers. Stuff that matters.
Re:MEGA: Malleable Encryption Goes Awry by api on Tuesday June 21, 2022 @09:00PM (#31830886)
Cryptographers say "don't roll your own," but there is a real poverty of well designed clean easy to use cryptographic libraries that provide well designed building blocks with clear instructions or fully baked well designed protocols. Most cryptographic libraries are arcane and hard to use, and the user experience around things like TLS certificate management is horrible.

Most people face a choice between rolling their own crypto or not using it at all.

Re:MEGA: Malleable Encryption Goes Awry by tptacek on Tuesday June 21, 2022 @09:33PM (#31831073)
Is this true, or is it true of people who don't want to use libsodium, Ring, the Go Seal/Unseal AEAD interface, or KMS because it doesn't feel as cool as inventing your own authentication proof protocol?
Re:MEGA: Malleable Encryption Goes Awry by na85 on Tuesday June 21, 2022 @09:43PM (#31831151)
>Ring

Can you provide a link? That one's hard to Google.

Re:MEGA: Malleable Encryption Goes Awry by tptacek on Tuesday June 21, 2022 @09:44PM (#31831154)