Moxie Marlinspike personal blog
The Cryptographic Doom Principle (2011)
When it comes to designing secure protocols, I have a principle that goes like this: if you have to perform any cryptographic operation before verifying the MAC on a message you’ve received, it will somehow inevitably lead to doom.
- Points
- 139
- HN comments
- 9
- Submissions
- 1
- Cited by
- 6 commenters
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Aug 24, 2024 | The Cryptographic Doom Principle (2011) by Bluestein | 139 | 9 |
Cited in comments
Linked from 7 Hacker News comments by 6 different people, from Dec 2020 to Nov 2025.
Most recent:
- SAI_Peregrinus · Nov 25, 2025
- loup-vaillant · Nov 26, 2024
- SAI_Peregrinus · Sep 24, 2024
- saclark11 · Aug 24, 2024
- Retr0id · Jan 5, 2024
- rakoo · Jan 9, 2021
