3 ms·
This is a great article for beginners but I must take issue with the fact that gpg 2.1 has been released for a year now and this article still recommends non-el
by nimbius 9y ago
This is a great article for beginners but I must take issue with the fact that gpg 2.1 has been released for a year now and this article still recommends non-elliptic keys. When will we switch?
- dogcow 9y agoA lot (all?) PGP-enabled smart cards (that I'm aware of) only work with RSA keys.
- Diti 9y agoIs it definitely proven that elliptic curves are safer to use?
- sgtcodfish 9y agoYou can get the same amount of "bits" of security with EC as you can with RSA for sure if you choose the right parameters. There are also EC implementations (Ed25519 being an excellent example) which are incredibly simple which makes them easier to audit and reason about. Also the simplicity allows us to implement some EC crypto in constant time, so there are no timing side channels. The main reason not to use EC would be spottier hardware support (cards, keys, etc) and potentially less software support in the wild (people could be stuck on old versions of GPG for example).
- jlgaddis 9y agoSome of us have reservations about using, for example, NIST curves.