you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 4 months ago (1 child)

The value in cryptographic agility comes entirely from the ability to deprecate insecure algorithms, it does not come from the ability to add new algorithms because we can always do that with a version bump anyway.

Also, on the note of interfaces, KEM constructions can not be swapped in for most generic ECC key exchange functions due to different requirements on message round-trips.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 4 months ago

    I recognize the term "cryptographic alacrity" to specifically include the deprecation of unsafe cryptography, to distinguish from "agility" that could may or may not deprecate old cryptography, thus allowing for fallback attacks to truly ancient cryptography. So yes, I think we're on the same page as to where the utility lays.

  • source
  • parent