Show HN: Write (almost) perfect encryption in an hour

Re:Show HN: Write (almost) perfect encryption in an hour by lawl on Saturday January 24, 2015 @12:53PM (#8940316)

Oh god. Please don't use that code for anything remotely serious. It's fine as a learning project, but please, PLEASE make that very clear in the readme.md then.

from random.c

    srand(time(NULL));// seed

Here goes your security. All one needs to know is when you generated your keyfile. srand() and rand() ARE NOT secure for crypto applications.

[ Parent | on HN ]

Re:Show HN: Write (almost) perfect encryption in an hour by TheJH_ on Saturday January 24, 2015 @04:32PM (#8941113)

Aaaactually, if you read the code, you'd see that he XORs the bytes from rand() with bytes from /dev/random. This project is horrible, but that's not one of the completely wrong parts.

[ Parent | on HN ]

Re:Show HN: Write (almost) perfect encryption in an hour by lawl on Saturday January 24, 2015 @06:03PM (#8941392)

Oops. You're right. I stand corrected.

[ Parent | on HN ]

Re:Show HN: Write (almost) perfect encryption in an hour by hoers on Saturday January 24, 2015 @01:56PM (#8940532)

>PLEASE make that very clear in the readme.md then.

This.

I wish people dabbling in crypto wouldn't be using phrases like "With this project you can be perfectly sure" or "[...]this encryption is unbreakable even in theory."

[ Parent | on HN ]