3 ms·

> RSA-4069? That's pretty damn hefty This surprised me for a different reason: I was under the impression that effective security bit size does not scale linea

> RSA-4069? That's pretty damn hefty This surprised me for a different reason: I was under the impression that effective security bit size does not scale linearly with bit lengths in RSA, and that key size would need to be 16,000-bits long for a comfortable safety margin (a size not practical and not supported by RSA). Are there any practical reasons why one shouldn't use epileptic-curve based crypto?

kobayashi 10y ago
>epileptic *elliptic
theandrewbailey 10y ago
> Are there any practical reasons why one shouldn't use epileptic-curve based crypto? Because it doesn't exist yet? Sounds like it would be all over the place and secure. \s Isn't RSA more widely used? It could also be that the NSA is discouraging EC-based crypto[0]; though whether this is due to "We can't crack this" to "As a guideline to other agencies OMG THIS SHIT IS SO BROKEN" is anyone's guess. [0] by alleged concerns over quantum computing https://threatpost.com/nsas-divorce-from-ecc-causing-crypto-hand-wringing/115150/ https://threatpost.com/nsas-divorce-from-ecc-causing-crypto-...