3 ms·
Well. OP says ->Generate your new sexy Ed25519 key I too, say, No f'ing thanks https://en.wikipedia.org/wiki/Curve25519 https://en.wikipedia.org/wiki/Curve2551
by mSparks 10y ago
Well. OP says
->Generate your new sexy Ed25519 key
I too, say, No f'ing thanks
https://en.wikipedia.org/wiki/Curve25519 https://en.wikipedia.org/wiki/Curve25519
In cryptography, Curve25519 is an elliptic curve offering 128 bits of security - The curve is birationally equivalent to Ed25519, a Twisted Edwards curve.
Ecrypt II - the EU project into encryption security says:
https://www.keylength.com/en/3/ https://www.keylength.com/en/3/
That gives you
Very short-term protection against small organizations
Should not be used for confidentiality in new systems
and is equivelent to an 816bit RSA key
So how is this new key "Sexy" in any way.
- hannob 10y agoFirst of all the Ecrypt project is is really outdated. Second you're reading the table wrong. Curve25519 gives you 128 bit of symmetric security, but the curve is 255 bit long. So from your table this compares to 3248 RSA. Third I'm no fan of such key number tables, it's a bit arbitrary and doesn't really reflect the complexities of modern cryptography.
- mSparks 10y agoso we should just take yours, and a random blogs word for it over a group of eu cryptologists paid by the eu to keep our data safe from the us and russian state hackers. again. no thanks. you want to join all the american idiots listening to such nonesense disinformation and give all your data to the ruskies. be my guest.
- acqq 10y agoThe paper of the designers of ed25519 specifies the design of the curve: the modulo is 2 to the 255th power - 19 (note that it's how the curve got its name), in the table you quote it's equvalent to (roughly) 3000 RSA bits: https://ed25519.cr.yp.to/ed25519-20110926.pdf https://ed25519.cr.yp.to/ed25519-20110926.pdf
- sctb 10y agoPlease comment civilly and substantively or not at all. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- rockdoe 10y agoYou are misunderstanding. Curve25519 offers 128 bits of symmetric security, or the equivalent of a 256 bit elliptic curve key.
- mSparks 10y agoeven if that is true. its still not enough to protect anything of value.
- pfg 10y agoThat's not what your own source says about 128-bit symmetric keys: > Long-term protection > Generic application-independent recommendation, protection from 2016 to 2040
- mSparks 10y agototal nonsense. 25519 is an asymetric key using eliptic curves
- pfg 10y agoAs both rockdoe and hannob have mentioned, ed25519 provides the same attack resistance as a 128-bit symmetric cipher. This is even mentioned in the original DJB ed25519 paper: > High security level. This system has a 2^128 security target; breaking it has similar difficulty to breaking NIST P-256, RSA with ≈ 3000-bit keys, strong 128-bit block ciphers, etc. (The same techniques would also produce speed improvements at other security levels.) The best attacks known actually cost more than 2^140 bit operations on average, and degrade quadratically in success probability as the number of bit operations drops.
- mSparks 10y ago->similar difficulty to breaking NIST P-256 which takes our comp sci lab 35 seconds on a cluster of 8 machines. so still no.
- roblabla 10y agoIf it really was equivalent to 816bit rsa, messages encrypted with it would be cracked within hours, and nobody would use ecc... I'd like to see proof that a 256bit Curve25519 is really that weak.