> The fact that my 4096-bit-gpg-encrypted mail has been stored by them doesn't mean my communication is pwned... Maybe not today. Maybe not tomorrow. However,

> The fact that my 4096-bit-gpg-encrypted mail has been stored by them doesn't mean my communication is pwned... Maybe not today. Maybe not tomorrow. However, if they ever manage to get hold of your secret key (or crack the encryption scheme you're using), they'll be able to decrypt and read all your old email. How safe is your secret key? Is it on a computer than you connect to the Internet with? How do you know it hasn't already been purloined by malware? Have you ever left it alone at home or in a hotel room? Or carried it through an international border? As for GPG, how do you know the NSA haven't been multiplying every single number together with every other single number for the past forty years to build a gigantic rainbow table that they just have to grep through to find the factors of any number? $ grep 4294967296 products.txt | head -20 65536 x 65536 = 4294967296 131072 x 32768 = 4294967296 262144 x 16384 = 4294967296 524288 x 8192 = 4294967296 1048576 x 4096 = 4294967296 2097152 x 2048 = 4294967296 4194304 x 1024 = 4294967296 8388608 x 512 = 4294967296 16777216 x 256 = 4294967296 33554432 x 128 = 4294967296 67108864 x 64 = 4294967296 134217728 x 32 = 4294967296 268435456 x 16 = 4294967296 536870912 x 8 = 4294967296 1073741824 x 4 = 4294967296 2147483648 x 2 = 4294967296 4294967296 x 2 = 8589934592 4294967296 x 3 = 12884901888 4294967296 x 4 = 17179869184 4294967296 x 5 = 21474836480 $ Are you paranoid yet? ;-) PS: Yes, yes, I know... sigh