3 ms·
So... in other words, encryption with a key greater than 256 bits is forbidden unless you use one of the state-sanctioned (read: backdoored) algorithms. Neat.
by kijin 5y ago
So... in other words, encryption with a key greater than 256 bits is forbidden unless you use one of the state-sanctioned (read: backdoored) algorithms. Neat.
- bloak 5y agoThat is not a correct paraphrase of what chenzhekl wrote. Perhaps there is a rule that prevents someone in China from implementing any algorithm they want to implement with any number of bits they want to use, but that rule would hardly be an "import control", which is what the linked article is about.
- svennek 5y agoOr it may just be, that anyone (currently) caring about >256 bits of symmetric key is likely not knowledgeable enough to avoid snake-oil salesmen (usually are annoying, but in crypto are outright dangerous). Is there any well-defined, well-implemented cipher with a keysize of >256. AFAIR the AES is either 128 or 256. That seems more (rightfully) careful than draconian..
- pmorici 5y agoThe “key size” for aes-xts a mode used for disk encryption uses a 512 bit key. Effectively it is really 2 different 256 but keys though.
- jwalton 5y agoI suspect this more the Chinese equivalent of America’s FIPS 140-2. https://en.m.wikipedia.org/wiki/FIPS_140-2 https://en.m.wikipedia.org/wiki/FIPS_140-2
- mlindner 5y agoNo not really. FIPS specifies minimum encryption levels and forces certain things to not be used that are considered insecure. However it doesn't cap the maximum key length that is possible to be used. Also FIPS 140-2 is outdated, please see FIPS 140-3. https://en.wikipedia.org/wiki/FIPS_140-3 https://en.wikipedia.org/wiki/FIPS_140-3