News for hackers. Stuff that matters.
Re:PuTTY vulnerability vuln-p521-bias by hobbified on Tuesday April 16, 2024 @10:36AM (#40052508)
In a parallel universe, they switched to RFC6979 in 2013, but the implementation had a bug that wasn't detected for years, allowing compromise of lots of keys. In that parallel universe, HN is criticizing them for following fashion instead of just leaving an already-proven piece of crypto code in place.

It's an unfortunate bug, an unfortunate oversight, but I think they made a perfectly reasonable choice at the time.

There are no comments on this comment yet.