Re: [cryptography] Explaining crypto to engineers

2012-02-26 Thread Ondrej Mikle
On 02/26/2012 04:47 AM, Kevin W. Wall wrote: On Sat, Feb 25, 2012 at 2:22 PM, Ondrej Mikle ondrej.mi...@nic.cz wrote: Estimating RSA key size: it's more an educated guess/magic given how the sizes are derived than anything else. And if you base your estimate for given time window on

Re: [cryptography] Explaining crypto to engineers (was: Duplicate primes in lots of RSA moduli)

2012-02-26 Thread Jeffrey Walton
On Sun, Feb 26, 2012 at 1:46 AM, Jeffrey Walton noloa...@gmail.com wrote: On Sat, Feb 25, 2012 at 10:47 PM, Kevin W. Wall kevin.w.w...@gmail.com wrote: [SNIP] Thanks for the link. It took me a LONG time to convince the ESAPI team of this because I was the newb to them and I came in and

Re: [cryptography] Explaining crypto to engineers

2012-02-26 Thread ianG
On 26/02/12 14:47 PM, Kevin W. Wall wrote: But if I could put to something that was about 5-8 pages about something like Ten Things Every Developer Should Know About Cryptography, that would be great for starters. Does such a thing exist? Maybe it can't distilled to only 10, but you get my

Re: [cryptography] Explaining crypto to engineers

2012-02-26 Thread Peter Gutmann
Ondrej Mikle ondrej.mi...@nic.cz writes: I've just found an article about the OAEP padding oracle (that I couldn't recall before): There's another one that was published about a year ago that looks at things like side-channel attacks via the integer-to-octet-string conversion primitives and

Re: [cryptography] Explaining crypto to engineers (was: Duplicate primes in lots of RSA moduli)

2012-02-25 Thread Ondrej Mikle
Hi, here is an attempt to summarize view of crypto from engineers' point of view. It's based on discussing the points raised in the Duplicate primes... thread with couple of HW/SW engineers and past experience with colleagues. Sorry for the length, this post grew quite a bit. Hopefully I caught