4 ms·
There are some weak curves that may be vulnerable. This is mostly (conjectured) to be about quantum computing. However, the solution they offer is RSA 3072. No
by snarf21 7y ago
There are some weak curves that may be vulnerable. This is mostly (conjectured) to be about quantum computing. However, the solution they offer is RSA 3072. No thanks, I'll stick with ECC. We'll know pretty instantly when ECC gets cracked as the whole crypto space will collapse like a balloon. You could also be more cynical and assume that the NSA has a backdoor for even huge RSA and just want to push people to something they pwn.
- monkeynotes 7y agoGiven what we know about the NSA, do you have to be 'cynical'? I think a backdoor is even likely.
- commandlinefan 7y agoKoblitz and Menenez took a long look at that - they believe it's possible, but not necessarily likely: https://eprint.iacr.org/2015/1018.pdf https://eprint.iacr.org/2015/1018.pdf
- monkeynotes 7y agoGiven the known motivations of the NSA, and the deep involvement they had in designing and promoting SHA and its derivatives gives reasonable doubt to their benevolent credibility. Look at the amount of trouble the NSA went into to create Stuxnet. They stole digitally signed certificates from big corporations, completely undetected. If a known burglar installed your home security system, even if the security system was from a well known and trusted manufacturer would you trust that your house was actually secure while you were on vacation?
- tptacek 7y agoWhat's this supposed to mean? SHA-2, which is an NSA design, is one of the best cryptographic hashes we have. SHA-1 fell, but so did MD4 and MD5, the other mainstream hashes of that era.
- opportune 7y agoThe NSA might have a big quantum computer and know that they are the only ones who are even close, hence pushing people towards RSA
- johncolanduoni 7y agoECC is vulnerable to Shor’s algorithm as well.
- opportune 7y agoAhh ok, interesting. I stand corrected