3 ms·
I'm surprised the attackers used Ed448 instead of Ed25519.
by cryptonector 3y ago
I'm surprised the attackers used Ed448 instead of Ed25519.
- supposemaybe 3y agoMaybe they know something we don’t about Ed25519? [Queue X-Files theme tune]
- t0mas88 3y agoMaybe their organisation has a policy that requires stronger encryption? Possibly because that organisation is also in the business of cracking such encryption...
- hosteur 3y agoIs Ed448 stronger than Ed25519?
- d-z-m 3y agoQuantitatively, yes(2^224 security target vs 2^128 security target respectively wrt. discrete log calculation). Qualitatively, 2^128 is already computationally infeasible(barring some advance in quantum computing), so the meaningful difference in security is debatable, assuming no weaknesses in the underlying curve.