The cr.yp.to microblog: 2015.05.20 13:30:19

2015.05.20 13:30:19 (600986908903243776) from Daniel J. Bernstein:

"Cryptographic algorithm agility" is a security problem. What we need is something quite different: cryptographic algorithm extermination.

2015.05.20 13:48:10 (600991399211851776) from Daniel J. Bernstein:

What we need is, e.g., to _exterminate the code_ for 512-bit DH to make sure nobody is using it. "Algorithm agility" doesn't try to do this.