2 ms·
If I'm reading correctly, spiped uses Diffie–Hellman for public key cryptography, while contemporary best practices suggest using elliptic curve crypto with shh
by spekcular 5y ago
If I'm reading correctly, spiped uses Diffie–Hellman for public key cryptography, while contemporary best practices suggest using elliptic curve crypto with shh (e.g. see [0]). So, for the truly paranoid, it might also provide some protection against crypto attacks too?
Note that the NSA can break 1028-bit DH [1], but spiped uses 2048-bit.
[0] https://docs.github.com/en/authentication/connecting-to-github-with-ssh/generating-a-new-ssh-key-and-adding-it-to-the-ssh-agent https://docs.github.com/en/authentication/connecting-to-gith...
[1] https://blog.securegroup.com/did-the-nsa-really-break-diffie-hellman https://blog.securegroup.com/did-the-nsa-really-break-diffie...