News for hackers. Stuff that matters.

A comment on DNSSEC surpasses 50% of root domains. Parent comment

Re:DNSSEC surpasses 50% of root domains by tptacek on Friday January 24, 2014 @03:15PM (#7117650)
If you are talking about CurveCP, I don't have strong opinions. In fact, there are issues with CurveCP; CodesInChaos posted a critique of the CurveCP key exchange awhile back. Trevor Perrin pointed out at Baysec a few months back that key exchanges are particularly hard to get right, using CurveCP as an example. CurveCP may very well be DOA. I don't know.

If you're talking about Nacl, though, from everything I can tell Nacl is very successful and seems to have a pretty bright future. Certainly, I'd recommend Nacl over any other crypto library you might use to build a new system with.

[ Parent | on HN ]
Re:DNSSEC surpasses 50% of root domains by nly on Friday January 24, 2014 @04:10PM (#7118051)
Yeah, here's a couple of good twitter threads that sum up some of the issues with CurveCP (and perhaps ZeroMQ)

https://twitter.com/bascule/status/383364389576773632

https://twitter.com/jedisct1/status/381136544515375104

Lord knows if anyone is actually working on a protocol that fixes the issues mentioned.

[ Parent | on HN ]