On the rijndael page I see this note below the optimized code link :
IMPORTANT NOTE ! This code was written in order to clarify the mathematical >description, and to run the statistical test. Without modification, it should not be used to encrypt files, or for any other application.
What exactly does this mean? The code is not correct and functional? Mike http://www.esat.kuleuven.ac.be/~rijmen/rijndael/
On Thu, 7 Dec 2000 mmotyka@lsil.com wrote:
On the rijndael page I see this note below the optimized code link :
IMPORTANT NOTE ! This code was written in order to clarify the mathematical description, and to run the statistical test. Without modification, it should not be used to encrypt files, or for any other application.
What exactly does this mean? The code is not correct and functional?
Functional code isn't secure. Correct code doesn't exist.* This probably means that the code does not check for buffer overflows and other bad programming, or that it has not been audited for security holes. -Ryan * except as a platonic ideal -- Ryan McBride - mcbride@countersiege.com Systems Security Consultant Countersiege Systems Corporation - http://www.countersiege.com
participants (2)
-
mmotyka＠lsil.com -
Ryan McBride