Re: 128bit RSA public key - time to break?

From: Shane Hird (shanehird@hotmail.com)
Date: 02/23/03


From: "Shane Hird" <shanehird@hotmail.com>
Date: Sun, 23 Feb 2003 13:14:15 +1000

By 6 months, I mean, from a single ~3Ghz PC. It is highly unlikley anyone
will try a distributed attack or use some super computer to break these
keys.

My understanding is ECC is typically more secure than RSA in regards to bits
needed for similar security. How long would a 3Ghz PC take to crack a 128bit
RSA key? a 128bit ECC key (if its possible)?

Thanks

"Tom St Denis" <tomstdenis@iahu.ca> wrote in message
news:3e582160$1_3@news.teranews.com...
>
> "shane" <shanehird@hotmail.com> wrote in message
> news:bb693fad.0302221727.274f070e@posting.google.com...
> > I realise that a 128bit key would be exceptionally weak, but I haven't
> > been able to find out just how weak it is.
> >
> > I am in need of a small public key, which would provide security from
> > a typical user for about 6 months. Security in this situation isn't
> > paramount, 6 months would be plenty enough to deter anyone from
> > bothering to try - more important is the size of the key - it would be
> > great if it could be 128 bits or less.
>
> 6 Months you'd probably need at least ~650 bits or so is my guess [though
I
> wouldn't venture below 1024 bits].
>
> > Can anyone recommend a key size?
> > Or an algorithm? I considered ECC, but it seems to have a minimum of
> > 160bits. Is this the case?
>
> Unless you use ONB [e.g. curves over patented mathematical fields...
shame!]
> ECC is in fact slower than RSA for most processors. Though a ECC-192 op
> over GF(p) is fairly fast [~24ms iirc] on say a Athlon XP.
>
> Tom
>
>



Relevant Pages

  • Re: 128bit RSA public key - time to break?
    ... > I realise that a 128bit key would be exceptionally weak, ... > I am in need of a small public key, ... ECC will give you the best strength-per-bit of any public-key method. ... 128-bit RSA would take about 0.1 seconds to break. ...
    (sci.crypt)
  • Re: 128bit RSA public key - time to break?
    ... > needed for similar security. ... > RSA key? ... a 128bit ECC key? ... 128 bit RSA key: ...
    (sci.crypt)
  • Re: ADVERT: Secure comms
    ... It smells like snake-oil, but it's free software. ... `padded' integers prior to RSA encryption? ... eliminating security risks from symmetric ciphers. ... So, the actual encryption scheme... ...
    (sci.crypt)
  • [NT] RSA SecurID Web Agent Heap Overflow
    ... Get your security news from a reliable source. ... RSA SecurIDis a popular strong authentication ... * RSA SecurID web Agent version 5.3 and prior ...
    (Securiteam)
  • Re: ADVERT: Secure communications
    ... it "hides" ciphertext in padding? ... | eliminating security risks from symmetric ciphers. ... The security of RSA isn't even proven, ... encrypt with RSA. ...
    (comp.os.linux.security)

Quantcast