FWIW, this small function had external audits several times and nobody spotted the algorithmic problem.
Why doesn't someone just rewrite GnuPG? All these audits... could we spend these resources more effectively?https://twitter.com/gnupg/status/765947090212126721 …
-
-
-
Thanks for the extra info. I'm a fan of rewriting legacy-free and using verification from the start. Amazon doing this with s2n.
- 2 more replies
New conversation -
-
-
REWRITING software is bad. Major REFACTORING software, though, is good, like LibreSSL and BoringSSL.
-
I think you might be saying that rewriting is bad _commercially_.
- 5 more replies
New conversation -
-
-
Recoding may work but every major rewrite has flaws. I'd love to be proven wrong with a counter example. An audit is still needed.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.