[145311] in cryptography@c2.net mail archive
Re: 1280-Bit RSA
daemon@ATHENA.MIT.EDU (Zooko O'Whielacronx)
Sun Jul 11 13:52:56 2010
In-Reply-To: <AANLkTilBXzndOa5TyFYTJI2jSRmsBDp7GcW3NDYUGTuq@mail.gmail.com>
Date: Sun, 11 Jul 2010 09:26:51 -0600
From: "Zooko O'Whielacronx" <zooko@zooko.com>
To: Dan Kaminsky <dan@doxpara.com>
Cc: cryptography@metzdowd.com,
Discussion of cryptography and related <cryptography@randombit.net>
Dan:
You didn't mention the option of switching to elliptic curves. A
256-bit elliptic curve is probably stronger than 2048-bit RSA [1]
while also being more efficient in every way except for CPU cost for
verifying signatures or encrypting [2].
I like the Brainpool curves which comes with a better demonstration
that they were generated with any possible "back door" than do the
NIST curves [3].
Regards,
Zooko
[1] http://www.keylength.com/
[2] http://bench.cr.yp.to/results-sign.html
[3] http://www.ecc-brainpool.org/download/draft-lochter-pkix-brainpool-ecc-00.txt
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
