4 ms·
Old isn't a valid critique with crypto; 2048-bit DH is verifiably secure.
by prophesi 7y ago
Old isn't a valid critique with crypto; 2048-bit DH is verifiably secure.
- j-berman 7y agoI thought that old + verifiably secure combine for the safest property in a crypto algorithm
- tuxxy 7y agoOld is entirely a valid critique of crypto; it demonstrates the authors aren't familiar with modern privacy tooling which tells me a lot.
- j-berman 7y agoWe looked at libsodium and its choices impacted our discussions on our system. We decided not to use it because it's not compatible with many browsers [0] We also discussed using a modern asymmetric key algorithm. We decided on Diffie-Hellman because we were extremely confident it's secure (so long as we choose the right parameters and implement it correctly), and would be very simple to fit it into our architecture. [0] https://github.com/jedisct1/libsodium.js/#compatibility https://github.com/jedisct1/libsodium.js/#compatibility
- prophesi 7y agoI know this thread's a bit old now, but could you expound on what the implications are for that?