3 ms·
The title is misleading, but it gave me a good time. Imagine all companies are sending sensitive documents encrypted with 256-bit keys. Oh, shit, that's a true
by esjeon 5y ago
The title is misleading, but it gave me a good time. Imagine all companies are sending sensitive documents encrypted with 256-bit keys. Oh, shit, that's a true gold mine. Park near a corporate HQ, scoop up some WiFi traffic, decrypt, and profit.
- DennisP 5y agoThat'd be bad if they were using RSA but elliptic curves and symmetric algorithms are fine at 256 bits.
- esjeon 5y agoYeah, you're right. I was somehow assuming RSA. For anyone not familiar with this, 256-bit ECDSA is considered to have the same security as 3072-bit RSA. A lot of large shops use 2048-bit keys, and GPG folks think 4096 is "unnecessary"[1]. So 3072 is a more-than-decent strength by today's standards. [1]: https://gnupg.org/faq/gnupg-faq.html#not_a_bad_idea_just_unnecessary https://gnupg.org/faq/gnupg-faq.html#not_a_bad_idea_just_unn...