Rust Cryptography Should Be Written in Rust
briansmith.org
Rust Cryptography Should Be Written in Rust
1–10 of 110 posts
Re: Rust Cryptography Should Be Written in Rust
#2So far the only solid use case for Rust that I have seen in applications where security is extremely important.
Not wonder it is becoming the de-facto language for building applications in the blockchain space.
Does anyone else use Rust outside the blockchain/cryptography space? What are you working on?
Re: Rust Cryptography Should Be Written in Rust
#3So far the only solid use case for Rust that I have seen in applications where security is extremely important. Not wonder it is becoming the de-facto language for building applications in the blockchain space. Does anyone else use Rust outside the blockchain/cryptography space? What are you working on?
> So far the only solid use case for Rust that I have seen in applications where security is extremely important.
Playing devil's advocate, when is security not extremely important, except maybe in throwaway bash script-type applications?
Re: Rust Cryptography Should Be Written in Rust
#4So far the only solid use case for Rust that I have seen in applications where security is extremely important. Not wonder it is becoming the de-facto language for building applications in the blockchain space. Does anyone else use Rust outside the blockchain/cryptography space? What are you working on?
there are some data processing projects, www.pola.rs for example
Re: Rust Cryptography Should Be Written in Rust
#5Crypto code should be written in assembly.
Zero ambiguity, zero undefined behavior, 100% verifiable.
Re: Rust Cryptography Should Be Written in Rust
#6Security is a weak-link problem. Once you decide to solve the bootstrapping challenge, you can use Rust for everything else.
Re: Rust Cryptography Should Be Written in Rust
#7So far the only solid use case for Rust that I have seen in applications where security is extremely important. Not wonder it is becoming the de-facto language for building applications in the blockchain space. Does anyone else use Rust outside the blockchain/cryptography space? What are you working on?
I use it for a desktop file transfer app [0]. I chose Rust because my primary language is Python and I just wanted to learn something new and really different for this project. Go would have been easier, but Rust just feels bullet proof. It's so strict. If it compiles, it works! It's been a very interesting journey.
Re: Rust Cryptography Should Be Written in Rust
#8Crypto code should be written in assembly. Zero ambiguity, zero undefined behavior, 100% verifiable.
Readability suffers though, with negative impacts on maintainability and even verifiability (fewer people able/willing to examine the source code).
Re: Rust Cryptography Should Be Written in Rust
#9Crypto code should be written in assembly. Zero ambiguity, zero undefined behavior, 100% verifiable.
There's plenty of undefined behaviour at that level, just look at Spectre and Meltdown vulnerabilities for example.
Re: Rust Cryptography Should Be Written in Rust
#10Crypto code should be written in assembly. Zero ambiguity, zero undefined behavior, 100% verifiable.
goto fail wasn't caused by ambiguity or undefined behavior. C's rules here are crystal clear, and conditional branches in assembly also do not make the following instructions condition (unless you're using delay slots à la SPARC).
Heartbleed also wasn't caused by ambiguity or undefined behavior, if you believe compiler writers.