Re: How secure is 2048 bit RSA?
From: Roger Schlafly (rogersc1_at_mindspring.com)
Date: 04/12/04
- Next message: Bill Unruh: "Re: true random number generator"
- Previous message: Tom St Denis: "Re: question about Diffie Hellman key exchange ??"
- In reply to: Paul Crowley: "Re: How secure is 2048 bit RSA?"
- Next in thread: Paul Rubin: "Re: How secure is 2048 bit RSA?"
- Reply: Paul Rubin: "Re: How secure is 2048 bit RSA?"
- Reply: Paul Crowley: "Re: How secure is 2048 bit RSA?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 12 Apr 2004 09:19:19 -0700
"Paul Crowley" <paul@JUNKCATCHER.ciphergoth.org> wrote
> > It does not make sense. Using a 256 bit AES key
> > is in and of itself crazy.
> Ross Anderson disagrees with you; at AES3 he advised the use of
> 256-bit keys to defend against attacks in which small amounts of key
> material are leaked through side channels. I'm not sure I agree with
> his reasoning but it's not a crazy thing to think.
If you are leaking key bits, then the solution is to plug the leak;
not to just use a larger key size.
If, say, you leak just 1 key bit with every message, it may not be
long before you have no security at all.
- Next message: Bill Unruh: "Re: true random number generator"
- Previous message: Tom St Denis: "Re: question about Diffie Hellman key exchange ??"
- In reply to: Paul Crowley: "Re: How secure is 2048 bit RSA?"
- Next in thread: Paul Rubin: "Re: How secure is 2048 bit RSA?"
- Reply: Paul Rubin: "Re: How secure is 2048 bit RSA?"
- Reply: Paul Crowley: "Re: How secure is 2048 bit RSA?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|