News for hackers. Stuff that matters.

A comment on Typing the Letters A-E-S Into Your Code (2009).

Re:Typing the Letters A-E-S Into Your Code (2009) by aburan28 on Friday January 09, 2015 @10:58PM (#8865870)
Especially since the NSA has had atleast "a handful of in-house" attacks on AES since 2012. AES(Rijndael) was given a score 1.11 in the AES competition and to put that in context a score of 1.0 is considered a broken cipher. Blowfish scored over 3.0 and was clearly a much stronger candidate algorithm. http://www.spiegel.de/international/germany/bild-1010361-793...
[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by tedunangst on Friday January 09, 2015 @11:22PM (#8865906)
Blowfish? Really? Do you know what you're talking about?
[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by aburan28 on Saturday January 10, 2015 @02:32AM (#8866245)
Serpent is the cipher with the score over 3.0 not Blowfish my mistake. But seriously I would read up instead of trusting the conventional wisdom when it comes to the strongest cipher. http://qr.ae/6wveK
[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by cm2187 on Sunday January 11, 2015 @08:51AM (#8869952)
The problem with serpent is that it seems to be hard to find a simple to use implementation for a non specialist, and god knows how much review the few implementations around benefited from.
[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by forgotpasswd3x on Saturday January 10, 2015 @02:45AM (#8866260)
So Serpent appears to be strongest, just slow? Is time really that big of an issue? I mean, why not spend a few extra seconds encrypting something if it is that much more secure?
[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by sarciszewski on Saturday January 10, 2015 @03:29PM (#8867806)
If by seconds you mean milliseconds ;)
[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by tedunangst on Saturday January 10, 2015 @09:21AM (#8866790)
Oh, you're talking about safety factors? Reducing that to a "score" loses a lost of context.
[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by sarciszewski on Saturday January 10, 2015 @02:06AM (#8866200)
The benefit of the doubt would say they meant Twofish.

The realist says they do not.

[ Parent | on HN ]
Re:Typing the Letters A-E-S Into Your Code (2009) by harshreality on Saturday January 10, 2015 @01:23PM (#8867436)
> NSA had had at least "a handful of in-house" attacks on AES

That is not what that link says.

[ Parent | on HN ]