Google Announces The Tink Crypto Library

[computerquip]

I want the crypto library to implemented in Rust, so it can be safe.
C and other languages are too unsafe to trust with crypto.

Rust doesn't magically protect you against every possible memory-concerned bug. It helps with some edge cases at compile-time. Note there are similar tools that provide similar features to C and C++ at compile-time and run-time, it's just a matter of using them. Simply because you don't understand how to use those tools or you're ignorant of the vulnerabilities that are possible in Rust, doesn't suddenly make Rust a more viable solution.

[uid313]

Rust doesn't magically protect you against every possible memory-concerned bug. It helps with some edge cases at compile-time. Note there are similar tools that provide similar features to C and C++ at compile-time and run-time, it's just a matter of using them. Simply because you don't understand how to use those tools or you're ignorant of the vulnerabilities that are possible in Rust, doesn't suddenly make Rust a more viable solution.

C is notoriously difficult to code in.
I couldn't even write a secure Hello World program.
Also not only memory-concerned bugs, but also other bugs.

[Weasel]

C is notoriously difficult to code in.

No, most people making such statements are notoriously bad at coding. Truth hurts.

I couldn't even write a secure Hello World program.

See what I mean?

Sure, you can write safe code in C. For example, Daniel J. Bernstein could do it.
But for far too many people, it is far too easy to shoot yourself in the foot with C.

Of course, the fact that you think that the crypto algorithm has anything to do with "memory bugs" or the language at all, proves the point even more.

[tildearrow]

I couldn't even write a secure Hello World program.

Is this a joke? Hello World programs are usually secure since all they do is write some text and quit...

#include <stdio.h>

int retval;

int main() {
  retval=puts("Hello World!");
  return 0;
}

...or is there any vulnerability in the code above? (I'm not dropping the return value of puts or using printf)

[uid313]

Is this a joke? Hello World programs are usually secure since all they do is write some text and quit...

#include <stdio.h>

int retval;

int main() {
retval=puts("Hello World!");
return 0;
}

...or is there any vulnerability in the code above? (I'm not dropping the return value of puts or using printf)

I have no idea if there is any vulnerability in that code. Yeah, Hello World programs are very simple so should be secure, but if I wrote one, I wouldn't count on it. The most simple thing in C is very complex, and it is so easy to shoot yourself in the foot, even doing the most basic things.

[Weasel]

I have no idea if there is any vulnerability in that code. Yeah, Hello World programs are very simple so should be secure, but if I wrote one, I wouldn't count on it. The most simple thing in C is very complex, and it is so easy to shoot yourself in the foot, even doing the most basic things.

Well, the "vulnerability" is in your brain.

[uid313]

Well, the "vulnerability" is in your brain.

Yeah, I am not a smart guy. I am a pretty dumb guy.
But in C it is way to easy to write insecure code and shoot yourself in the foot.
As a pretty dumb guy, I can write code that is probably reasonably secure in other languages, but not in C.

[pal666]

I want the crypto library to implemented in Rust, so it can be safe.

start coding then. btw, this library is not a crypto library, it is a wrapper around real crypto library. which in turn is implemented in c. just as most of rust stuff

C and other languages are too unsafe to trust with crypto.

rust has nothing to improve safety with crypto against c++ or java (two of subj's apis)

[pal666]

https://www.redox-os.org/

that is not linux kernel

[pal666]

C is notoriously difficult to code in.
I couldn't even write a secure Hello World program.
Also not only memory-concerned bugs, but also other bugs.

that's why c++ exists