Who actually needs the extra security? 112 bits of security is enough for everyone, bar none. If you have a 2^32 processors and they can crack 32 bits of encryp

Who actually needs the extra security? 112 bits of security is enough for everyone, bar none. If you have a 2^32 processors and they can crack 32 bits of encryption every second (unreasonable in each case), then it's still going to take you 9 million years before you can crack it. If someone finds a new attack, it'd invalidate that number, but it could just as easily break any RSA based system, and it's not thought that such an attack is on the horizon at the moment (I think), or known by any entity (government or otherwise). Meanwhile the performance difference is measurable and considerable; it's 10% of your loadtime if you're targeting 250ms. I don't get why people set their security levels so high at all; it's like getting alien abduction insurance or downloading a bootlegged film in uncompressed AVI.