3 ms·
I was sort of surprised that he wrote a whole blog post about what's wrong with RSA and never mentioned that it doesn't provide perfect forward secrecy - if the
by commandlinefan 7y ago
I was sort of surprised that he wrote a whole blog post about what's wrong with RSA and never mentioned that it doesn't provide perfect forward secrecy - if the private key is ever compromised, every communication that was ever secured using that key can be decrypted after the fact (if we're nitpicking).
- ma2rten 7y agoIs this different with other algorithms, such as the one implemented by libsodium?
- commandlinefan 7y agoIt's different with all Diffie-Hellman key agreements (which I _think_ libsodium's key exchange API uses, although it's sort of difficult to tell for sure from the docs). Diffie-Hellman key agreements generate a new key on the fly and then throw it away so that there's nothing to compromise later.
- floatboth 7y agoYes, of course. It uses X25519 which is an elliptic curve Diffie-Hellman exchange.
- baby 7y agoTechnically not true. You can generate an ephemeral RSA public key.