On 2013-11-04 10:40, Peter Gutmann wrote:
Beyond that, there are other problems with the recommendation. For example it
strongly recommends DLP algorithms over RSA. DLP is great on a whiteboard but
extremely brittle in practice, since the entire family has a distressing
propensity to leak the private key if you get even the tiniest implementation
detail wrong.
Pretty much all crypto algorithms fail if you get the tiniest detail wrong.
In fact, come to think of it, pretty much all algorithms fail if you get
the tiniest detail wrong, the difference with crypto being that you do
not notice you have failed.
_______________________________________________
cryptography mailing list
[email protected]
http://lists.randombit.net/mailman/listinfo/cryptography
