[Cryptography] Shortening block cipher length...

Ray Dillinger bear at sonic.net
Tue Jul 20 21:48:07 EDT 2021



On 7/20/21 6:11 PM, Peter Gutmann wrote:
> Ray Dillinger <bear at sonic.net> writes:
>
>> I don't think NaCl as it is today is vulnerable
> Unless it's changed recently, the NaCL API assumes the nonce is user-supplied,
> which means it's completely vulnerable.  It's RC4 as used in the 1990s all
> over again.
>
> Peter.


Aw crap.  I'm so sorry to hear that, I thought it was better.

                Bear



More information about the cryptography mailing list