Re: [Algorithms] Message signature in token ring

[George M. <gf...@ya...>]

While your basic statement is true, there are some
borderline cases to consider here...

Since I mostly agree with what Tony has suggested
about the potential for very subtle errors (involving
things such as paging to disk, etc) when implementing
these algorithms, consider a situation where you're
using one of the CryptoAPI supported ciphers to talk
from an MMOG Windows-only client to a UNIX-based
backend.  In this situation, I'd feel pretty good
about using CryptoAPI on the Windows side and then
just rolling my own, or using Joe Random's open source
implemention, on the UNIX side.  

When it comes to these subtle exploitable errors the
implementation on the client is, IMO, more important
to have exactly correct since it will be in the hands
of the "enemy" and they will be able to look at every
dark corner of it.  

Obviously doing something stupid like putting an
exploitable buffer overflow in my server-side
implementation would be troublesome, but the very
minute details like not paging the plaintext out to
disk are pretty insignificant -- if the attacker has
already hacked into my server to the point where this
is an issue, I'm already screwed no matter what.

--- Javier Arevalo <ja...@py...> wrote:
> The point is that if you are writing a game for
> several platforms, using a
> platform-specific API in one of your targets doesn't
> help when you need to
> get it working in another target that doesn't have
> such an API. If you're
> going to use a full source code implementation in
> one target (possibly an
> open-source implementation), you might just use it
> in all of them.
> 
> 
> 
>
-------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> GDAlgorithms-list mailing list
> GDA...@li...
>
https://lists.sourceforge.net/lists/listinfo/gdalgorithms-list
> Archives:
>
http://sourceforge.net/mailarchive/forum.php?forum_id=6188


__________________________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo
http://search.yahoo.com