4 ms·
And "peer reviewed" is a big key here. I don't use RSA because someone certified the protocol's authors, I use it because the details have been so heavily looke
by macksd 4y ago
And "peer reviewed" is a big key here. I don't use RSA because someone certified the protocol's authors, I use it because the details have been so heavily looked into by the whole industry and accepted by virtually everyone.
- cpach 4y agoMay I ask why you use RSA and not ECC? https://latacora.micro.blog/2018/04/03/cryptographic-right-answers.html https://latacora.micro.blog/2018/04/03/cryptographic-right-a...
- upofadown 4y agoThe link did not contain any compelling arguments against RSA. So turning the question around, what's wrong with RSA?
- mhluongo 4y agoElliptic curves provide more long-term security.
- als0 4y agoNot if you're thinking about early quantum computers https://security.stackexchange.com/questions/33069/why-is-ecc-more-vulnerable-than-rsa-in-a-post-quantum-world https://security.stackexchange.com/questions/33069/why-is-ec...
- arccy 4y agohttps://blog.trailofbits.com/2019/07/08/fuck-rsa/ https://blog.trailofbits.com/2019/07/08/fuck-rsa/
- als0 4y agoYou could easily write a blog post called fuck-ecc and describe the difficulties in implementing ECC correctly. RSA has a good share of band aids but ECC implementations are, in my opinion, just as hard to get right.
- upofadown 4y agoOne link to an article without comment deserves another: * https://articles.59.ca/doku.php?id=pgpfan:rsabad https://articles.59.ca/doku.php?id=pgpfan:rsabad