Cryptopathic: The situation at LastPass may be worse than they are letting on

Re:Cryptopathic: The situation at LastPass may be worse than... by Gasp0de on Saturday December 24, 2022 @06:41AM (#34115979)

Use available and widely used libraries for the low level crypto parts (e.g. don't code RSA or key generation on your own). Apart from that, get audits if you have the means but I guess using libraries like openssl should be enough for most open source projects.

[ Parent | on HN ]

Re:Cryptopathic: The situation at LastPass may be worse than... by goku12 on Sunday December 25, 2022 @01:21AM (#34124909)

> Use available and widely used libraries for the low level crypto parts (e.g. don't code RSA or key generation on your own).

Yes. That's the plan. I'm using Rust's crypto libraries. All the code in the application are basically just calls to those libs.

> Apart from that, get audits if you have the means

Unfortunately no. But I got the plan from a crypto forum. I will be seeking their validation when it's done.

[ Parent | on HN ]