a cryptography coding standard - jean-philippe aumasson · checklist takeoff 1. rotate at vi to...

19
a cryptography coding standard ?

Upload: vuthu

Post on 13-May-2018

214 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

a cryptography coding standard

?

Page 2: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

because even experts make mistakes

Page 3: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

because even experts make mistakes

Page 4: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

lots of mistakes (SANS top 25 software errors)

Page 5: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

we need some rules

Page 6: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

checklists are simple and effective

Page 7: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

and familiar to programmers

Page 8: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

and familiar to programmers

Page 9: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

and familiar to programmers

Page 10: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

and familiar to programmers

Page 11: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

plenty of resources

Page 12: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

but much less for crypto

Page 13: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

the closest I found

Page 14: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

starting this project after I had to write

my own crypto coding rules…

Page 15: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

inspiration: PTES

Page 16: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

checklists by experienced professionals

Page 17: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

similar motivations

Page 18: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed

how should this look like for crypto?

Page 19: a cryptography coding standard - Jean-Philippe Aumasson · CHECKLIST TAKEOFF 1. ROTATE AT VI TO APPROX r NOSE up 2. ESTABLISH POSITIVE RATE OF CLIMB 3. ... baseline of what is needed