3 ms·
For TLS much larger keys are typically used, "The recommended minimum key length is 1024 bits, with 2048 bits preferred, but this is up to a thousand times more
by bretpiatt 5y ago
For TLS much larger keys are typically used, "The recommended minimum key length is 1024 bits, with 2048 bits preferred, but this is up to a thousand times more computationally intensive than symmetric keys of equivalent strength (e.g. a 2048-bit asymmetric key is approximately equivalent to a 112-bit symmetric key) and makes asymmetric encryption too slow for many purposes."
Source: https://www.internetsociety.org/deploy360/tls/basics/ https://www.internetsociety.org/deploy360/tls/basics/
- resoluteteeth 5y agoThis is wrong at least as a response to the original comment, which is correct about the state of the art (TLS is also moving to elliptic curves where shorter keys are used).
- _wldu 5y agoFor signatures, I hope EdDSA wins out over ECDSA.
- monocasa 5y agoTLS isn't encrypting data with those longer keys. That's used for auth and connection bring up before switching to a symmetric encryption scheme to actually encrypt data.