Hacker News new | ask | show | jobs
by jimktrains2 4229 days ago
> There is no connection or session establishment between peers.

OK, so I'm not understanding why isn't a 1-to-1 message, nor why DTLS isn't an option here.

> I guess it depends on your definition of roll your own. We didn't invent AES-GCM or implement it. We are using the implementation shipped with the Golang stdlib.

You need to read better. I didn't say "crypto primitives", I've said "crypto _system_". That includes everything, including primitives, key management, authentication, replay (which means your application protocol is now part of the crypto system, not a good sign), field concatenation for singing/hashing, &c.

The most important thing is that when your improvised system fails, you will more-than-likely never know and it'll never cause any errors.