3 ms·
This article is dead wrong on multiple points. First off, the impact of multiple keys is different for the parallel Rho method: the time to the first key to be
by wbl 13y ago
This article is dead wrong on multiple points. First off, the impact of multiple keys is different for the parallel Rho method: the time to the first key to be cracked is the same. Secondly ECDH is commonly used to avoid the problem mentioned in the second point. The worst part is people will make decisions based on this wrong information.
- xnyhps 13y agoMy claim is: FS does not imply, by definition, that every attack scales linearly in the amount of keys. Having a counter-example of an attack that does scale linearly does not disprove that point. I indeed only cover DH at #2, as index-calculus does not apply to ECDH.