News for hackers. Stuff that matters.

A comment on All the crypto code you've ever written is probably broken. Parent comment

Re:All the crypto code you've ever written is probably broken by tptacek on Tuesday November 13, 2012 @08:04PM (#4781500)
Keyczar is sound.

NACL is sound.

Using straight-up TLS with OpenSSL or your platform default is fine as long as you test that you're validating certificates.

PGP/GPG is fine.

Everything else is extremely suspect.

[ Parent | on HN ]
Re:All the crypto code you've ever written is probably broken by jarrett on Wednesday November 14, 2012 @01:15PM (#4784595)
Does that mean Bcrypt is extremely suspect? If so, then we have a real communication problem, because lots of people who claim to know crypto sing Bcrypt's praises.
[ Parent | on HN ]
Re:All the crypto code you've ever written is probably broken by tptacek on Wednesday November 14, 2012 @03:27PM (#4785352)
We aren't talking about password hashes.
[ Parent | on HN ]