[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Is crypto developed the way it should? - [WAS: since demise of encfs what to use for encrypting dir]



On Sun, 03 Aug 2014 10:43:18 -0400
Harry Putnam <reader@newsguy.com> wrote:

> Gack,,, I duplicated your posted URL before seeing your post

You will rot in a windows-only hell for that!
(without a debugger) *<;-p)


The question raise the underlying problems:

* Is crypto a specialist affair?
   YES it is, indeed.

* Can we rely on only one or two teams for good crypto?
   NO, especially if they are from a country where you can
   be forced to collaborate while keeping your mouth shut
   under penalty of prison/losing your life/torture/etc.
   We _need_ international teams.

* Is C a good candidate to write crypto?
   NOT AT ALL, a _very strict_ language should be used instead,
   such as ADA (think contracts, and do not think it is slow).
   Programs have bugs, we all know that, but crypto bugs are
   the most terrible (for millions of people and for freedom)
   (when they are really bugs…)

* Should we pay for good crypto (and very good cryptanalysis)?
    I think YES (stop yelling, think crowfunding;), because
    good crypto skills are rare and thus expensive; 
    furthermore, we need stable teams.
    What we _really_ can't afford is having any doubt against
    crypto.

-- 
Robin dit : I love my physician
Robin dit : he started by tranquilizing me : "no no you don't have an allergy"
Robin dit : "… you have skin cancer".

Attachment: signature.asc
Description: PGP signature


Reply to: