3 ms·
4096 bit keys, comparison, aah. Sounds like the crypto stuff is really badly off in this article. Key length alone doesn't practically mean anything. Classic VP
by Sami_Lehtinen 8y ago
4096 bit keys, comparison, aah. Sounds like the crypto stuff is really badly off in this article. Key length alone doesn't practically mean anything. Classic VPN lies and hype.
- borski 8y agoDid you read the article? The author agrees with you, and talks about why 4096-bit keys are not inherently more secure...
- SlowRobotAhead 8y ago12 cheeseburgers are more than 1, but pretty useless to me because 1 is really all I can use. If current openvpn or IPSEC isn’t being cracked, there is only more energy wasted in going to 4096bit keys. Edit: lol downvotes... ok, cool. Tell me who is breaking 2048bit diffiehellman exchange to 256bit AES in CBC mode. I’ll wait right here.
- rubatuga 8y agoExcept cheeseburgers rot, but crypto doesn’t. 4096 keys might be useful twenty years in the future.
- y4mi 8y agoYou are probably getting downvoted because the article points out exactly that. The author was erroneously thinking that a big key is necessary - and wireguard doesn't provide one. Which made him discover that fallacy.
- computerfriend 8y agoThe author seems to misunderstand that the 4096 bit keys are RSA keys, not elliptic curve or symmetric AES keys.
- Dylan16807 8y agoThe reason OpenVPN (and almost all VPN solutions) use such ridiculously long keys is that you don't have to brute-force them. An actual cryptographic attack on the algorithms commonly used for VPNs (or for HTTPS connections to websites) looks a lot more like a dictionary attack than a brute-force attack; you can discount great swathes of the problem space without having to actually try them. That explanation seems fine to me. It's not an explanation of the underlying math but it doesn't need to be.