Don't put the solutions to the crypto challenges up

#1

Post by king_mob » Wed, Aug 20, 2014, 3:55 PM UTC

Seriously. I've learnt more programming in the past two days going through the first sets than i ever have before. I can't help but feel that solutions would ruin that, the need to really get your head around the concepts. If the point of the crypto challenges is to demonstrate how crypto fails, isn't it better to force people into understanding the attacks?

Joking aside i am actually interested in the rational behind providing direct solutions in code, in place of say, the plaintext you should be able to retrieve.

Also, thanks a bunch for putting this up, it's by far the most enjoyable resource I've found on crypto.

Re: Don't put the solutions to the crypto challenges up

#2

Post by poopsintub » Wed, Aug 20, 2014, 4:42 PM UTC

Crypto challenges, you say? Where can one find some interesting crypto challenges, preferably beginner level> Poject Euler?

Re: Don't put the solutions to the crypto challenges up

#3

Post by king_mob » Wed, Aug 20, 2014, 4:47 PM UTC

poopsintub wrote: post #2

Crypto challenges, you say? Where can one find some interesting crypto challenges, preferably beginner level> Poject Euler?

cryptopals.com

Re: Don't put the solutions to the crypto challenges up

#4

Post by king_mob » Wed, Aug 20, 2014, 4:48 PM UTC

I should of added, i'm referring to the matasano crypto challenges www.cryptopals.com

Re: Don't put the solutions to the crypto challenges up

#5

Post by tptacek » Wed, Aug 20, 2014, 4:52 PM UTC

(This thread is about CRYPTOPALS.COM, the site at which we've finally published the crypto challenges we've been running over email. There's also an IRC channel on Freenode, #cryptopals, where lots of people are hanging out.)

Give us ideas on how we can put them up without spoiling them, and we'll try to do that.

Part of the problem with not posting solutions is that we embargoed participants from posting their solutions. We'd like to stop doing that; the people who have generously held back their solutions have done us a favor, and we'd like to stop asking it of them.

Once people start posting solutions anywhere, we think it's better that there be a curated set of solutions (we're working on ways to make it receptive to git pull requests) than things scattered all over the Internet.

Thank you, by the way, for the kind words!

Re: Don't put the solutions to the crypto challenges up

#6

Post by danielweber » Wed, Aug 20, 2014, 6:22 PM UTC

king_mob wrote: post #4

I should of added, i'm referring to the matasano crypto challenges www.cryptopals.com

It's a blast. Between various job hunt activities I'm simultaneously learning Go and working through the challenges (just as advertised, it's a great way to explore a new language).

Re: Don't put the solutions to the crypto challenges up

#7

Post by danielweber » Wed, Aug 20, 2014, 6:23 PM UTC

tptacek wrote: post #5

(This thread is about CRYPTOPALS.COM, the site at which we've finally published the crypto challenges we've been running over email. There's also an IRC channel on Freenode, #cryptopals, where lots of people are hanging out.) Give us ideas on how we can put them up without spoiling them, and we'll try to do that. Part of the problem with not posting solutions is that we embargoed participants from posting their solut…

Give us ideas on how we can put them up without spoiling them, and we'll try to do that.

Invisiclues-style, where you give progressively bigger and bigger hints to solvers trying to get through them?

Re: Don't put the solutions to the crypto challenges up

#8

Post by wikwocket » Wed, Aug 20, 2014, 8:08 PM UTC

Perhaps the solutions could be encrypted, so that you need to decrypt them to read them?

Re: Don't put the solutions to the crypto challenges up

#9

Post by king_mob » Wed, Aug 20, 2014, 10:01 PM UTC

tptacek wrote: post #5

(This thread is about CRYPTOPALS.COM, the site at which we've finally published the crypto challenges we've been running over email. There's also an IRC channel on Freenode, #cryptopals, where lots of people are hanging out.) Give us ideas on how we can put them up without spoiling them, and we'll try to do that. Part of the problem with not posting solutions is that we embargoed participants from posting their solut…

I realize however you do it would be a compromise of some sorts, for what its worth how you explained it here seems to be the best solution, thanks for the explanation!

Re: Don't put the solutions to the crypto challenges up

#10

Post by deskamess » Wed, Aug 20, 2014, 10:23 PM UTC

tptacek wrote: post #5

(This thread is about CRYPTOPALS.COM, the site at which we've finally published the crypto challenges we've been running over email. There's also an IRC channel on Freenode, #cryptopals, where lots of people are hanging out.) Give us ideas on how we can put them up without spoiling them, and we'll try to do that. Part of the problem with not posting solutions is that we embargoed participants from posting their solut…

Where there is an exact answer could you provide the sha256(answer) on the challenge page? This way plain text is not shown but we can check our answers against the hash.

Perhaps a wrapper function to call the language/platform specific sha256 could be asked for as a Set 1 challenge. In this particular challenge the answer to a well known input would be un-hashed for verification purposes.