undefined | Better HN

0 pointstptacek13y ago0 comments

Are you sure you're right about that? Because I think you're wrong. I think you could spend 15 minutes on Wikipedia, write your own block cipher core, and if you used Keyczar as the protocol implementation, you'd be better off than if you had used AES directly.

Your AES code, I am implying, would be so bad that you'd be better off not having used it at all.

0 comments

1 comments · 1 top-level

ircmaxell13y ago

That's fair. However I'd argue that someone implementing their own algorithm would not use a library like keyczar. They would just write their own.

So while it's possible to write your own and be secure, IMHO it'd be better to stick to vetted algorithms and libraries... I think it's just that - all other things being equal - the public algorithm is more likely to be more secure...

j / k navigate · click thread line to collapse