News for hackers. Stuff that matters.
Re:Ask HN: Seeking Cryptography Certification by als0 on Saturday June 25, 2022 @08:20AM (#31874640)
With respect, you really shouldn't be designing your own cryptographic protocols if they are going into a product. Even the best of the best make serious mistakes. A course is not going to give you the confidence that you need. There are so many peer reviewed protocols out there that there's almost no need to make one yourself unless you're in a very specialised or niche scenario. That said, if you just want to learn about them, there are plenty of good, readable books like Real World Cryptography and Applied Cryptography (Schneier).
Re:Ask HN: Seeking Cryptography Certification by macksd on Saturday June 25, 2022 @08:53AM (#31874904)
And "peer reviewed" is a big key here. I don't use RSA because someone certified the protocol's authors, I use it because the details have been so heavily looked into by the whole industry and accepted by virtually everyone.
Re:Ask HN: Seeking Cryptography Certification by cpach on Saturday June 25, 2022 @09:19AM (#31875072)
Re:Ask HN: Seeking Cryptography Certification by upofadown on Saturday June 25, 2022 @09:53AM (#31875310)
The link did not contain any compelling arguments against RSA. So turning the question around, what's wrong with RSA?
Re:Ask HN: Seeking Cryptography Certification by arccy on Saturday June 25, 2022 @10:15AM (#31875461)
Re:Ask HN: Seeking Cryptography Certification by upofadown on Saturday June 25, 2022 @09:58PM (#31880383)
One link to an article without comment deserves another:

* https://articles.59.ca/doku.php?id=pgpfan:rsabad

Re:Ask HN: Seeking Cryptography Certification by als0 on Saturday June 25, 2022 @11:30AM (#31876042)
You could easily write a blog post called fuck-ecc and describe the difficulties in implementing ECC correctly. RSA has a good share of band aids but ECC implementations are, in my opinion, just as hard to get right.
Re:Ask HN: Seeking Cryptography Certification by mhluongo on Saturday June 25, 2022 @10:13AM (#31875450)
Elliptic curves provide more long-term security.
Re:Ask HN: Seeking Cryptography Certification by als0 on Saturday June 25, 2022 @11:33AM (#31876062)
Not if you're thinking about early quantum computers https://security.stackexchange.com/questions/33069/why-is-ec...