Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Crypto 101 – Introductory course on cryptography

crypto101.io

Post reply on HN
Print view View original

91–100 of 148 posts

Re: Crypto 101 – Introductory course on cryptography

#91

Post by gist »

tptacek wrote: post #80
gist wrote: post #74

Earlier quoted context omitted.

My trust chain: I don't know crypto and didn't know who you were (so I might have asked the same question) but a few days ago I found out you are involved with tptacek with latacora.com so that was all I needed to know and trust what you said.

That's a little scary but I appreciate the compliment.

It's sort of the HN version of 'yeah, he's a goodfella'.

Separately with latacora I suggest that you wrap in some ongoing residual that carries on far past the 'eventually you staff your own security team' phase (as added insurance for 'leadership').

Re: Crypto 101 – Introductory course on cryptography

#92

Post by tptacek »

gist wrote: post #91
tptacek wrote: post #80

Earlier quoted context omitted.

That's a little scary but I appreciate the compliment.

It's sort of the HN version of 'yeah, he's a goodfella'. Separately with latacora I suggest that you wrap in some ongoing residual that carries on far past the 'eventually you staff your own security team' phase (as added insurance for 'leadership').

Thanks! We're not looking to make money from clients in perpetuity. One of the things we like about the model is that we plan our own obsolescence and then get out of the way. It lines up our incentives.

Re: Crypto 101 – Introductory course on cryptography

#94

Post by lvh »

clifanatic wrote: post #71
lvh wrote: post #63

Earlier quoted context omitted.

Hi! I'm the author. I should stop calling it a pre-release. There's no useful "done" marker. It includes most of the material I wanted to talk about, and has for a while. You should update the PDF though; as the other commenter mentioned, it does get updated :)

> There's no useful "done" marker. Well, maybe when there are no more "TODOs" ;)

That doesn't work too well when they get added faster than they get removed; which is what I mean by "no useful done marker". There's an issue tracker now instead of TODOs in the document (not to say that all of them have been removed) -- I don't think that _actually_ improves anything except optics :)

Re: Crypto 101 – Introductory course on cryptography

#95

Post by lvh »

LaurensBER wrote: post #2

I checked the PDF and this looks very interesting and comprehensive, any change you could give an eta for the final release and more specific the epub release? Thanks!

Hi! I'm the author. I should remove that "pre-release" notice. Sure; there's plenty more that I could talk about, but there's also plenty of stuff there that you can use right now (and most of the stuff I wanted to talk about). Suggestions come in faster than I have time to implement them, so... Maybe this will never be done, and maybe that doesn't stop it from being a useful resource :-) I hope you enjoy it!

Re: Crypto 101 – Introductory course on cryptography

#96

Post by tptacek »

zimmerfrei wrote: post #86

Maybe I am being too harsh, but it is clear the author does not have a formal education in the subject [0] nor any track in breaking non-toy crypto implementations [1]. This alone makes me a bit wary of any recommendation one may read in the material. There seems to be more attention to listing all the beasts in the cryptographic zoo than to the few fundamental tools required to really understand the mechanics (e.g.…

What "prime number theory" would you be referring to?

Re: Crypto 101 – Introductory course on cryptography

#97

Post by fovc »

gist wrote: post #74
lvh wrote: post #60

Earlier quoted context omitted.

Hi! I'm the author of Crypto 101. Firstly, I'm a real, honest-to-God cryptographer. I don't know if there are any particular people you had in mind whose recommendations you'd like to see, but there are a few HN bigwigs who'd probably be willing to generally endorse it :-) Also, it's been posted on HN a few times before, so it's had some scrutiny. That doesn't mean I don't make mistakes, but generally speaking, an ac…

My trust chain: I don't know crypto and didn't know who you were (so I might have asked the same question) but a few days ago I found out you are involved with tptacek with latacora.com so that was all I needed to know and trust what you said.

I Ctrl-Fd "tptacek" as soon as I opened the page

Re: Crypto 101 – Introductory course on cryptography

#98

Post by derefr »

stcredzero wrote: post #12

When I was taking Aikido, there was a day when the sensei was going through all of our techniques and showed how the uke (initiator of the attack, receiver of the technique) could turn things around on the tori . (receiver of the attack, initiator of the technique) It seemed like there were a half dozen ways each that a technique could go seriously wrong, and that many of them didn't require much skill, only determin…

I've always thought it would be neat to have something like the Netflix "Chaos Monkey", but rather than sitting around on your machines taking them down at random, it sits on your network (or as part of the offering of the PaaS you've deployed to) trying to break into your stack using Metasploit et al, and then will immediately shut down/isolate every piece of software it manages to gain access to.

If you deployed vulnerable code, you'd see your stack fall over ~10mins later, along with an accompanying notice from the Penetrator Monkey that you've got work to do.

Re: Crypto 101 – Introductory course on cryptography

#99

Post by theschwa »

There seems to be a lot of comments asking about the quality of this piece. I read through this the last time it was posted to HN, and I just have to say that this is the perfect balance of having enough detail to understand how things work, but not so much that it's overwhelming. That's a really difficult balance when it comes to crypto, so major props to the author. Fantastic work.

Re: Crypto 101 – Introductory course on cryptography

#100

Post by wglb »

zimmerfrei wrote: post #86

Maybe I am being too harsh, but it is clear the author does not have a formal education in the subject [0] nor any track in breaking non-toy crypto implementations [1]. This alone makes me a bit wary of any recommendation one may read in the material. There seems to be more attention to listing all the beasts in the cryptographic zoo than to the few fundamental tools required to really understand the mechanics (e.g.…

I am curious about what leads you to the conclusion but it is clear the author does not have a formal education in the subject?
Post reply on HN