3 ms·
That'd be bad if they were using RSA but elliptic curves and symmetric algorithms are fine at 256 bits.
by DennisP 5y ago
That'd be bad if they were using RSA but elliptic curves and symmetric algorithms are fine at 256 bits.
- esjeon 5y agoYeah, you're right. I was somehow assuming RSA. For anyone not familiar with this, 256-bit ECDSA is considered to have the same security as 3072-bit RSA. A lot of large shops use 2048-bit keys, and GPG folks think 4096 is "unnecessary"[1]. So 3072 is a more-than-decent strength by today's standards. [1]: https://gnupg.org/faq/gnupg-faq.html#not_a_bad_idea_just_unnecessary https://gnupg.org/faq/gnupg-faq.html#not_a_bad_idea_just_unn...