Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Everything you need to know about cryptography in 1 hour (2010) [pdf]

daemonology.net

Post reply on HN
Print view View original

1–10 of 104 posts

Re: Everything you need to know about cryptography in 1 hour (2010) [pdf]

#4

Post by mmastrac »

He recommends HMAC-SHA256 in this paper, but I think that AES-GCM is a better construction, as long as you understand the requirements for IV uniqueness. It offers significant improvements on top of the standard HMAC (privacy and additional out-of-band data) without adding much in terms of size.

Re: Everything you need to know about cryptography in 1 hour (2010) [pdf]

#7

Post by cperciva »

asciimo wrote: post #6

Here's a provocative gem: > The purpose of cryptography is to force the US government to torture you.

It's pretty simple -- if the US government really really wants your secrets, they can kidnap you and torture you until you tell them what they want to know. Cryptography can protect data, but it doesn't protect humans; all it can do is make sure that humans are the only remaining point of attack.

Re: Everything you need to know about cryptography in 1 hour (2010) [pdf]

#8

Post by cperciva »

The reason this is being (re)posted now is that I gave this talk at a Polyglot Vancouver meetup last night. Freed from the constraint of a conference schedule I actually took about 90 minutes to go through this talk this time (followed by another 30 minutes of questions).

Re: Everything you need to know about cryptography in 1 hour (2010) [pdf]

#9

Post by zatkin »

cperciva wrote: post #8

The reason this is being (re)posted now is that I gave this talk at a Polyglot Vancouver meetup last night. Freed from the constraint of a conference schedule I actually took about 90 minutes to go through this talk this time (followed by another 30 minutes of questions).

As someone who is completely new to cryptography and knows very little, where would you recommend I start? I've recently been reading about bitwise operations to become familiar with how to (somewhat) interpret what a cryptograhic algorithm is doing in a program, since bitwise operations seems to be popular in almost all crypto algorithms.

Re: Everything you need to know about cryptography in 1 hour (2010) [pdf]

#10

Post by zatkin »

mmastrac wrote: post #4

He recommends HMAC-SHA256 in this paper, but I think that AES-GCM is a better construction, as long as you understand the requirements for IV uniqueness. It offers significant improvements on top of the standard HMAC (privacy and additional out-of-band data) without adding much in terms of size.

Would HMAC-SHA256 been a better recommendation in, the year that this presentation was given, 2010?
Post reply on HN