3 ms·
It could have to do with the NSA's August 2015 plan for transitioning to quantum-resistant algorithms. In their new Commercial National Security Algorithm (CNSA
by fjarlq 10y ago
It could have to do with the NSA's August 2015 plan for transitioning to quantum-resistant algorithms. In their new Commercial National Security Algorithm (CNSA) Suite, they advise a minimum 3072-bit RSA modulus:
https://www.iad.gov/iad/programs/iad-initiatives/cnsa-suite.cfm https://www.iad.gov/iad/programs/iad-initiatives/cnsa-suite....
(Doh... I don't know why I'm getting an invalid certificate authority error when trying to access that site, but Qualys SSL Labs confirms it's a real error. Yikes.)
- mastazi 10y agoI did not read it due to the certificate problem. Could someone post an abstract here?
- fjarlq 10y agoHere's a copy of their CNSA FAQ: https://cryptome.org/2016/01/CNSA-Suite-and-Quantum-Computing-FAQ.pdf https://cryptome.org/2016/01/CNSA-Suite-and-Quantum-Computin...
- mastazi 10y agoAlso: with quantum computing still in its infancy, how do we actually know which types of keys would be adequate?
- fjarlq 10y agoKoblitz and Menezes explore various theories about the NSA's new policy in their paper, A Riddle Wrapped In An Enigma: https://eprint.iacr.org/2015/1018.pdf https://eprint.iacr.org/2015/1018.pdf
- cmrx64 10y agoFor anyone reading the thread, this is an absolute must-read paper if you're at all interested in the near-future of production cryptosystems in high-risk settings.
- sillysaurus3 10y agoNot a direct answer to your question, but http://pqcrypto.org http://pqcrypto.org has a lot of great information on post-quantum crypto.
- sesutton 10y agoThe certificate is issued by the DOD's internal CA. Not sure why they're using one for a public facing site though.
- nickpsecurity 10y agoThey're DOD so why not. There's a lot of them that do. What confused me was that browsers in US didnt trust DOD PKI... probably quite reliable... while they have plenty of shady, less-secure CA's on their list.