News for hackers. Stuff that matters.
Re:Telegram’s Cryptanalysis Contest by paveldurov on Friday December 20, 2013 @05:38PM (#6944576)
If the advice comes from tptacek, you should probably do the opposite. He insisted this was NOT a backdoor:

https://news.ycombinator.com/item?id=6944118

Re:Telegram’s Cryptanalysis Contest by tptacek on Friday December 20, 2013 @08:10PM (#6945220)
No, that's not at all what I said, but I despair of explaining the distinctions to someone who thinks AES-IGE+SHA1 and unpadded RSA is a sound design.
Re:Telegram’s Cryptanalysis Contest by moocowduckquack on Friday December 20, 2013 @07:13PM (#6945038)
Hey, but now he knows that you are planning to do the opposite of what he says, presumably he will start giving you good advice, just to trick you.

The reason that people are so cynical about your custom solution is that being completely and utterly cynical about custom solutions, unless the architects can defend the solution rigorously, is the only sane approach in cryptography.

Re:Telegram’s Cryptanalysis Contest by Smirnoff on Friday December 20, 2013 @06:16PM (#6944780)
Pavel, showing that he was wrong once in the past doesn't invalidate his multiple points he made now (or in the past).