Live data from Hacker News

Crypto 101 – Introductory course on cryptography

crypto101.io

21–30 of 74 posts

Re: Crypto 101 – Introductory course on cryptography

#21
post #19
post #17

Earlier quoted context omitted.

AES explanation before DES? Why? It doesn't make any sense.

... because the only way to introduce ciphers is, what, chronologically? Why? And why does that make it superficial?

AAMOF, I've never seen a more shallow explanation of AES... and I find it rather superficial for this reason. Man, that's nice you have written a book, now plant a tree, have a baby, and relax... take a constructive review on your work. Use it to improve that version.

Re: Crypto 101 – Introductory course on cryptography

#22
post #21
post #19

Earlier quoted context omitted.

... because the only way to introduce ciphers is, what, chronologically? Why? And why does that make it superficial?

AAMOF, I've never seen a more shallow explanation of AES... and I find it rather superficial for this reason. Man, that's nice you have written a book, now plant a tree, have a baby, and relax... take a constructive review on your work. Use it to improve that version.

> Man, that's nice you have written a book, now plant a tree, have a baby, and relax... take a constructive review on your work. Use it to improve that version.

Your feedback isn't really actionable. How is the author supposed to use anything about your feedback to "improve that version"?

Re: Crypto 101 – Introductory course on cryptography

#23

Started reading it, pretty good so far! Only thing, why did you choose to introduce block cipher modes in the stream cipher chapter? This makes little sense to me.

It actually makes a lot of sense for practical purposes. This probably looks strange to you because most introductory cryptography texts strictly segregate stream and block ciphers. The standard pedagogical style bifurcates modern symmetric encryption into one of these two categories and talks about things like synchronization, on-the-fly encryption, speed, error correction, etc. between the two. In point of fact, th…

> Many (most?) stream ciphers actually use blocks internally.

I don't think there have been any new designs for a good while that didn't. RC4 is, I think, the last actual stream cipher that saw widespread use (apart from designed-as-broken telco crypto). The same observation can be made for classified crypto, where they used to use bit-stream ciphers like Walburn or Saville (efficient, relatively low gate count hardware implementation) but pivoted to block ciphers since the ~80s.

Re: Crypto 101 – Introductory course on cryptography

#24
post #18

Oh interesting. I recently got "Applied Cryptography" in one of the nostarchpress sales. I expected it to be turbo technical and way outside my league but popped it open on a whim one day. So far it's incredibly accessible, does anyone have thoughts on that versus this course? Worth taking the course after I finish Applied cryptography?

Incidentally, Applied Cryptography is often critiqued for making crypto seemingly easy and incredibly accessible, which led to some people implementing very nice fails. For practical purposes the later Cryptography Engineering book is probably a better choice.

Re: Crypto 101 – Introductory course on cryptography

#26

Earlier quoted context omitted.

It actually makes a lot of sense for practical purposes. This probably looks strange to you because most introductory cryptography texts strictly segregate stream and block ciphers. The standard pedagogical style bifurcates modern symmetric encryption into one of these two categories and talks about things like synchronization, on-the-fly encryption, speed, error correction, etc. between the two. In point of fact, th…

> Many (most?) stream ciphers actually use blocks internally. I don't think there have been any new designs for a good while that didn't. RC4 is, I think, the last actual stream cipher that saw widespread use (apart from designed-as-broken telco crypto). The same observation can be made for classified crypto, where they used to use bit-stream ciphers like Walburn or Saville (efficient, relatively low gate count hardw…

> I don't think there have been any new designs for a good while that didn't.

Every entry in CAESAR that I've studied is either based on a block cipher or a hash function. A lot of them use AES internally, but others (MORUS, NORX) used their own designs.

There are no RC4-esque stream ciphers being taken seriously these days, for good reason.

Re: Crypto 101 – Introductory course on cryptography

#27
post #18

Oh interesting. I recently got "Applied Cryptography" in one of the nostarchpress sales. I expected it to be turbo technical and way outside my league but popped it open on a whim one day. So far it's incredibly accessible, does anyone have thoughts on that versus this course? Worth taking the course after I finish Applied cryptography?

Applied Cryptography is terrible.

https://sockpuppet.org/blog/2013/07/22/applied-practical-cry...

No Starch's "Serious Cryptography", the JP Aumasson book, is strong.

Re: Crypto 101 – Introductory course on cryptography

#28
post #21
post #19

Earlier quoted context omitted.

... because the only way to introduce ciphers is, what, chronologically? Why? And why does that make it superficial?

AAMOF, I've never seen a more shallow explanation of AES... and I find it rather superficial for this reason. Man, that's nice you have written a book, now plant a tree, have a baby, and relax... take a constructive review on your work. Use it to improve that version.

You've said literally nothing that could be considered constructive.

Re: Crypto 101 – Introductory course on cryptography

#30
post #21
post #19

Earlier quoted context omitted.

... because the only way to introduce ciphers is, what, chronologically? Why? And why does that make it superficial?

AAMOF, I've never seen a more shallow explanation of AES... and I find it rather superficial for this reason. Man, that's nice you have written a book, now plant a tree, have a baby, and relax... take a constructive review on your work. Use it to improve that version.

The purpose of the book is explicitly to mint developers who can responsibly build cryptographic features, not mint cryptographers -- so a detailed look at e.g. differential cryptanalysis is pretty clearly out of scope. AES is pretty much a perfect PRP and that's all you oughta care about.
Post reply on HN