[Top] [All Lists]

Re: [openpgp] On Streaming and Chunking

2015-03-27 05:38:09
ianG <iang(_at_)iang(_dot_)org> writes:

One moving part in particular is the interface design.  It has been an
article of faith for a long time that the crypto libraries should deliver to
the application a CIPHER metaphor, and that's good enough for any programmer.
And a MAC metaphor.  And a MODE metaphor.  Which has gradually morphed into a

And one with the defaults set wrong.  In Java, do a Cipher.getInstance("AES")
and you get AES in ECB mode.  To paraphrase a quote about C, "it gives you a
loaded gun and points it at your foot by default".

openpgp mailing list

<Prev in Thread] Current Thread [Next in Thread>