RSA is fragile and thus not ideal for security or GPG, etc. | The Diaries of Dr.Gonzo


From the article:



Onion Details



Page Clicks: 0

First Seen: 05/07/2024

Last Indexed: 10/25/2024

Domain Index Total: 164



Onion Content



From the article: Seriously, stop using RSA Here at Trail of Bits we review a lot of code. From major open source projects to exciting new proprietary software, we’ve seen it all. But one common denominator in all of these systems is that for some inexplicable reason people still seem to think RSA is a good cryptosystem to use. Let me save you a bit of time and money and just say outright-if you come to us with a codebase that uses RSA, you will be paying for the hour of time required for us to explain why you should stop using it. RSA is an intrinsically fragile cryptosystem containing countless foot-guns which the average software engineer cannot be expected to avoid. Weak parameters can be difficult, if not impossible, to check, and its poor performance compels developers to take risky shortcuts. Even worse, padding oracle attacks remain rampant 20 years after they were discovered. While it may be theoretically possible to implement RSA correctly, decades of devastating attacks have proven that such a feat may be unachievable in practice.om/2019/07/08/fuck-rsa/ The whole article and video here: https://blog.trailofbits.com/2019/07/08/fuck-rsa/ - Dr.Gonzo When the student is ready. the master appears. Apr 1, 2022