To whoever is working on "image encryption" out there:
- Your custom stream cipher using chaotic maps is not secure or efficient
- AES-CTR is not slow and does not suffer from weak entropy problems (WTF)
- Floating point is not great for cryptography (sorry, Falcon folks!)
Just released a new version of libaegis, as well as the rust bindings https://t.co/Zjd49CzbXN - Easy-to-use, high security, high performance authenticated encryption. Now with convenient helpers to use it as a MAC, and workarounds for LLVM18 regressions. https://t.co/Zjd49CzbXN
Security Issues, Abandonment, and Fork of PHP ECC library (mdanter/ecc, phpecc/phpecc) https://t.co/yzF2fNmQou
The project "has not responded to our attempts to fix
security issues from the year 2021" so "we opted
to fork this library." by @ParagonIE
The latest release of EasyECC uses our PHPECC fork.
Additionally, it prevents and rejects malleable ECDSA signatures and opts for constant-time algorithms when secret keys are involved.
However, this library is still rather low-level, so you're better off using https://t.co/0nQQ1Oibam instead.
The API for EasyECC is much simpler, easier to get right, and harder to get wrong.
Given the prevalence of software (especially cryptocurrency-adjacent) that relies on this code, we thought we'd take it over and provide a better story for its security.
So we forked it.
The latest release of EasyECC uses our PHPECC fork.
Additionally, it prevents and rejects malleable ECDSA signatures and opts for constant-time algorithms when secret keys are involved.
However, this library is still rather low-level, so you're better off using https://t.co/0nQQ1Oibam instead.
The API for EasyECC is much simpler, easier to get right, and harder to get wrong.