3 ms·

> It's past time people started moving away from RSA. What do you recommend instead?

• tptacek 13y ago
  ECDH, ECDSA.
  • cperciva 13y ago
    Over prime fields, please.
    • pbsd 13y ago
      Do you really not trust binary curves that much? I'm certainly not going to defend them, but curves over prime exponent binary fields seem OK for now. For us this might not matter much, but hardware people like binary fields a lot.
      • cperciva 13y ago
        They scare me a bit, simply because of the added structure. I don't have any concrete argument for why they're bad; it's just that there's more places to start from when analysing them. I don't buy the cost arguments... if you're limited by how many asymmetric crypto operations you can handle, you're either doing something very wrong or something very unusual.