4 ms·
Note that ED25519 is more vulnerable to quantum computation than is RSA.
by duaneb 10y ago
Note that ED25519 is more vulnerable to quantum computation than is RSA.
- rosser 10y agoIf, like most such claims I've seen lately, you're referring to No Such Agency's recommendation against adopting Suite B, the reasons behind that move seemed to me not to be about ECC being "more" QC vulnerable than RSA. They simply said, "If you haven't made this switch already, just keep using RSA while we figure this whole 'quantum' thing out." ECC and RSA are both ultimately going to fall to practical quantum computing, and probably over a time frame short enough that it won't matter which cipher you picked.