Re: ODT Today
Robin Sheat <[email protected]>
| Newsgroups | gmane.org.user-groups.linux.dunedin.general |
|---|---|
| Message-ID | <1397615632.26172.35.camel@zarathud> |
Thomi Richards schreef op wo 16-04-2014 om 10:13 [+1200]: > presumably it has lots of people involved in the project. I don't think that this is actually the case. Also, it's worth noting that openssl does a lot more than just crypto. It does all the ASN.1 and X.509 stuff too. The heartbleed thing wasn't a crypto issue, it was a protocol implementation issue. It's easy enough to write a bit of code that will do some crypto things. It's hard to deal with all the extra stuff (protocol handling, avoiding sidechannel attacks, avoiding standard attacks, etc.) Robin. _______________________________________________ DunLUG mailing list [email protected] http://lists.ethernal.org/listinfo/dunlug DunLUG Wiki - http://dunlug.kallisti.net.nz/
signature.asc
(application/pgp-signature, 490 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) iQEcBAABCgAGBQJTTewQAAoJEHf1tyT4cTvf8SUH/26CeLMAcQq8OL+8Wuyu0TrM eqzWpo+AJSgSRjczuEKYMb0OpZ1BSsedRR0tXrVYn0pxBE36cRhRtYXXlS7i4nzr Fc675vf01SU67LRBsBgZbyyPe/SZnnhL77bd72EdwdiOQmOtgIqusrr4nCE0zN9c wl3BP/xKjj+eQNlIUs80LLbHuecdiX8LepZtJ8Saxk3qnEhfTAWvHsaPeySzRCQL g2L9pwVOFQGKDJZ79o6f0hmm7DrSfvy3zRvgMOYAnCSWAYK3rxvC7N0Dc7vLERAo UyLn1nbSU5vATUVBtw8Kd8DMgqIABhpmupEsIkhWG8scn4IteP+5Z6XR+ScZewI= =EZgG -----END PGP SIGNATURE-----