2 ms·
Absolutely incorrect. Anything above 90-100 bits of effective (symmetric) strength is currently more than enough, even against nation state actors.
by svenfaw 10y ago
Absolutely incorrect. Anything above 90-100 bits of effective (symmetric) strength is currently more than enough, even against nation state actors.
- mSparks 10y ago112 bit effective strength has been the required MINIMUM for FIPS/NIST since 2014. ->and that is just to protect you from NON nation state actors. http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-131a.pdf http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublic... Plus, we KNOW they were routinely breaking 64bit effective strength since the 90s, 30 years on we need a lot lot more than twice the strength, even against half decent hackers - but changing the backbone is considered "too expensive". So that isn't ME saying the US doesn't have anything valuable enough to protect. Its the US standards agencies.
- willthames 10y ago128 bits isn't twice as strong as 64 bits. 65 bits is twice as strong as 64 bits. 2^64 ~= 10^19 - or 10 million million million times stronger.
- mSparks 10y agotechnically its around ln(n)ln(ln(n)) stronger "best case" thats a lot closer to 2 than 10 million million million whoever taught you integer factorisation and the dlp are order c^n was either lying to you or had been lied to.