3 ms·
> AES is in that range for the short term. Not over months or years. Why do you say so?
by feanaro 4y ago
> AES is in that range for the short term. Not over months or years.
Why do you say so?
- Dylan16807 4y agoOh, I guess my second paragraph is not a good enough explanation? The key leaked, which means anyone that has the key can generate all the IDs from videos uploaded before 2017. If your key ever gets out, you face the same problem. The secrecy of all existing IDs is gone. With HTTPS, you can rotate keys often, older connections would have to have been packet-captured to get decrypted, and newer connections mandate perfect forward secrecy.
- feanaro 4y agoOh, I somehow managed to understand those two paragraphs as two separate observations. Sorry. Yes, the key can leak and there's no forward secrecy in this scheme. That's a valid point.