Live data from Hacker News

An Overview of Cryptography

garykessler.net

1–10 of 34 posts

Re: An Overview of Cryptography

#5
post #3

Great paper! Given the write-ups of old and broken crypto, perhaps a better title would be History of Cryptography?

Indeed. Interesting mix of theory ("here's how RSA works and why") and practice (list of specs and RFCs), but very old-school.

Today, I'd expect less focus on RSA and PGP, and instead a mention of elliptic curves, the Signal protocol (double ratchet), etc.

Re: An Overview of Cryptography

#6
"This scheme also provides nonrepudiation since it proves that Alice sent the message; if the hash value recovered by Bob using Alice's public key proves that the message has not been altered, then only Alice could have created the digital signature."

This is a common misconception.

Just because a signature verifies under Alice's public key, it does not necessarily imply Alice generated the signature. For many common signature schemes, if Bob makes a signature using their public/private key, Alice can produce a different private/public key such that Bob's signature will verify under Alice's key.

Paper (we) wrote on the impacts of this: https://eprint.iacr.org/2019/779

Re: An Overview of Cryptography

#7
post #6

"This scheme also provides nonrepudiation since it proves that Alice sent the message; if the hash value recovered by Bob using Alice's public key proves that the message has not been altered, then only Alice could have created the digital signature." This is a common misconception. Just because a signature verifies under Alice's public key, it does not necessarily imply Alice generated the signature. For many common…

In particular, see also this 2005 paper by Thomas Pornin: http://www.bolet.org/~pornin/2005-acns-pornin+stern.pdf

EDIT: Looks like this paper is also already included in the list of citations for the 2019 paper :)

Re: An Overview of Cryptography

#8
post #3

Great paper! Given the write-ups of old and broken crypto, perhaps a better title would be History of Cryptography?

It does say at the top "originally written in 1998" and it was basically amended over time, but regardless I still love learning about "historical" views.

Example: A textbook from '95 had a pretty large section on "the future" of ECC and "current" trends in research. It was interesting seeing what came true, or what was still being worked on.

Post reply on HN