Re: rsa v. dsa authentication
From: Simon Tatham (anakin_at_pobox.com)
Date: 01/26/05
- Next message: Nico Kadel-Garcia: "Re: Speed Difference SCP vs. RCP"
- Previous message: Chuck: "rsa v. dsa authentication"
- In reply to: Chuck: "rsa v. dsa authentication"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 26 Jan 2005 14:20:42 +0000 (GMT)
Chuck <skilover_nospam@softhome.net> wrote:
> Is there any significant advantage of using one over the other? I
> thought I read somewhere that RSA is more secure, but one of my
> sysadmins read that DSA is.
DSA _can_ be worryingly insecure if implemented poorly; a bad DSA
implementation is capable of giving away your private key (allowing
anyone to authenticate as if they were you). This is about the worst
thing a public-key mechanism can do.
I don't know what the security differences are between RSA and
properly implemented DSA, though. I suspect there isn't much
difference, or at least no difference that couldn't be made
irrelevant just by increasing the key size.
-- Simon Tatham "The voices in my head are trying to ignore me. <anakin@pobox.com> But if I keep talking, I can drive them insane."
- Next message: Nico Kadel-Garcia: "Re: Speed Difference SCP vs. RCP"
- Previous message: Chuck: "rsa v. dsa authentication"
- In reply to: Chuck: "rsa v. dsa authentication"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
