Hacker News new | past | comments | ask | show | jobs | submit login

Has a cryptographer ever looked at the protocol you invented? Maybe doing the asymmetric crypto on every packet is just a harmless performance problem that, but maybe you invented something insecure. Or is the protocol strictly from the spec (NaCl?) and just the implementation strange?



No, the project never got that far. I did discuss with a security researcher though, and it was secure, but it lacked features like PFS, and the handshake protocol could leak information.

In addition, using "pure" random nonces has all sorts of interesting problems.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: