There seems to be a general consensus that people shouldn't implement their own cryptography but rather rely on pre-existing standards.

Should we permit questions that discuss implementing a standard (AES, PGP, etc) in contrast to homebrew crypto that isn't affiliated (or diverges from) a known standard?

1 Answer 1


Where the implementation is something a security professional has to be aware of, then this should be on-topic, however if it is the case that the question is purely a coding one (ie it isn't about security decisions, but is about coding or configuration) then I would feel it would be offtopic here, but possibly better served on SO, SF, SU or even one of the specific sites such as Ask, Android etc.

  • 7
    Agreed. On the other hand, if it is about the details of the algorithm, then it would be better on Crypto.
    – AviD Mod
    Jan 2, 2013 at 21:52
  • 13
    Seems like how the algorithm works is crypto, how the algorithm is used is Security and how the algorithm is implemented is StackOverflow. Jan 4, 2013 at 3:23
  • 7
    @AJHenderson and whether [hipster language of the week] is the "best" language for implementing it is Programmers.
    – user185
    Jan 14, 2013 at 11:08

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .