The hard part of a crypto specification: make it safe and misuse resistant.
Posted by jpluimers on 2021/10/19
Great quote from a while back:
[WayBack] Filippo Valsorda on Twitter: “Here’s a secret: it’s not that hard to put together a crypto specification. What’s hard is to make it safe and misuse resistant. What needs to be “battle tested” is the security devex, not the narrow happy path, and blaming the developer when it breaks is not battle testing.”
From the same thread:
-
- [WayBack] Filippo Valsorda on Twitter: “Here’s a secret: it’s not that hard to put together a crypto specification. What’s hard is to make it safe and misuse resistant. What needs to be “battle tested” is the security devex, not the narrow happy path, and blaming the developer when it breaks is not battle testing.”
–jeroen
Leave a Comment