Re:Libsodium 1.0.0 released
by tptacek on Wednesday September 24, 2014 @07:51PM
(#8364807)
Nacl makes it hard to screw up the constructions. It doesn't make it hard to make invalid assumptions about what a signed encrypted blob actually means.
[ Parent
| on HN ]
+ makes it easy to add two numbers. It doesn't make it hard to make invalid assumptions about what adding two numbers together actually means.
Nacl is a good thing. But crypto is just a tool. It's not a magic wand. People have already built vulnerable systems by making bogus assumptions about what Nacl can do.
Re:Libsodium 1.0.0 released
by sarciszewski on Sunday September 28, 2014 @01:00AM
(#8378974)
That's a shame :(