4 ms·
i have never seen anything anywhere advocating for moving away from RSA. i'm curious to see what their sources are for this claim.
by holtalanm 5y ago
i have never seen anything anywhere advocating for moving away from RSA. i'm curious to see what their sources are for this claim.
- vbezhenar 5y agohttps://news.ycombinator.com/item?id=25022845 https://news.ycombinator.com/item?id=25022845 (https://blog.trailofbits.com/2019/07/08/fuck-rsa/ https://blog.trailofbits.com/2019/07/08/fuck-rsa/) for example
- holtalanm 5y agowatched the whole thing. was very informative. Actually havent used RSA in any capacity in years (AES is a lot easier to use), but always viewed RSA as a battle-tested encryption method/alg. I suppose with anything there are ways to misuse it, and RSA appears to be really easy to misuse.
- noodlesUK 5y agoI would say that it’s fairly rare that RSA and AES are really competitors for the same category of uses, as they’re asymmetric and symmetric algorithms respectively. I would suggest that anyone who doesn’t know about the differences between these things just not use cryptography directly and instead use things like libsodium which has sane defaults and a hard to misuse api. If you don’t know cryptography fairly well, it’s a massive minefield.
- jnwatson 5y agoIn 2005, The NSA began recommended migrating away from RSA and onto ECC algorithms for its customers' classified use cases. [1] In 2018, it paused that recommendation, essentially arguing that if you haven't migrated already, wait until the quantum-resistant algorithms are well vetted to avoid a second migration. 1. [https://en.wikipedia.org/wiki/NSA_Suite_B_Cryptography https://en.wikipedia.org/wiki/NSA_Suite_B_Cryptography]