mSparks

26 ms·

181.
by mSparks 10y ago
technically its around ln(n)ln(ln(n)) stronger "best case" thats a lot closer to 2 than 10 million million million whoever taught you integer factorisation and the dlp are order c^n was either lying to you or had been lied to.
182.
by mSparks 10y ago
112 bit effective strength has been the required MINIMUM for FIPS/NIST since 2014. ->and that is just to protect you from NON nation state actors. http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecial
183.
by mSparks 10y ago
All the public sources I've found say it is secure. Except for the ones recommending 512bit EC's Perhaps you can find the parameters for a 512bit,non NIST EC and we can both be happy? Otherwise I'll stick with 8000 and 15424
184.
by mSparks 10y ago
->similar difficulty to breaking NIST P-256 which takes our comp sci lab 35 seconds on a cluster of 8 machines. so still no.
185.
by mSparks 10y ago
total nonsense. 25519 is an asymetric key using eliptic curves
186.
by mSparks 10y ago
even if that is true. its still not enough to protect anything of value.
187.
by mSparks 10y ago
Well. OP says ->Generate your new sexy Ed25519 key I too, say, No f'ing thanks https://en.wikipedia.org/wiki/Curve25519 In cryptography, Curve25519 is an elliptic curve offering 128 bits of security - The curve
188.
by mSparks 10y ago
not true - the public blockchain means that cracking the encryption is only a very small part of such problem. You also need to convince all the other peers that you cracked it first Because Bitcoin IS cracking encryption - bitcoins are ass
189.
by mSparks 10y ago
->You were insinuating that basically there's no safe way to establish secrets (using some form of ecdh). While there absolutely is. I'm complaining there is no STANDARD & SECURE way to establish secrets (unlike say AES or
190.
by mSparks 10y ago
Nice. I've found openpgp to be fit for purpose, there's even a js version for apps now: https://openpgpjs.org/ But still run into US import/export control problems with decent encryption. IMHO we can never ha
191.
by mSparks 10y ago
Confused.. Safecurves exists because all the standard curves appear to be backdoored. Curve25519 is not a standard curve. How is this FUD? Curve25519 was first released by Daniel J. Bernstein in 2005,[7] but interest increased considerably
192.
by mSparks 10y ago
im mobile and traveling. tried to find my links to research but not in my mobile bookmarks. there is a great page somewhere that lists each curve --- edit you found it: https://safecurves.cr.yp.to for reference google (pdfs so c
193.
by mSparks 10y ago
they are creating a secret key by sending chunks of secret keys (with a mention of a blockchain database - not sure why). Or at least thats what i saw in the code comments. secret in cryptography has a very special meaning - it refers to th
194.
by mSparks 10y ago
Exactly. its a password limited to 4 digits. And why? That gives you no more than 14 bit security even using a decent system like PBKDF2. Which i see no mention of. secrets are just that - secret. The only reason I know of that secrets need
195.
by mSparks 10y ago
:( sounds terrible. I went from eurphoria, to cynicism, to total foil hat in less than an hour. This sounds incredibly like having multiple points of failure (what happens if one of the DTAs is unavailable?) and no public key cryptography (
196.
by mSparks 10y ago
Wild Guess: Distributed Trust Authority Its not the code, its the description of how the code should work in the comments. ->Their version of a CA tells both the client and the server the secret to use....
197.
by mSparks 10y ago
I see a lot of talk and little substance. "You can have 128bit security with a 4 digit pin".... No, No you can't. A 4 digit pin is 14 bit security. Any system is only as secure as its weakest link. It's not a password it
198.
by mSparks 10y ago
->ssh daemon doesn't know anything about user password And neither should it. auth system creates a one time usable "ticket" which is a one way function of the user password and a nonce. The server gives the nonce to the u
199.
by mSparks 10y ago
wow. im not sure i believe this... there is no need to send the password to the server to authenticate a password in this day and age. i thought ssh was one of the first protocols to not do this.
200.
by mSparks 10y ago
whats annoying to me is this nonsense while the us employs people to hack into other government systems - including the uk, with impunity. (nsa hacking tools leak). UK should be giving lauri love a new identity and a fat paycheck. Not pande
201.
by mSparks 10y ago
only "stupid" if you are opposed to this: http://techrights.org/2015/01/02/snowden-leaks-on-spying/ Otherwise, dropping peer to peer is the only way to achieve the projects goals.
202.
by mSparks 10y ago
Its not even a real article. Just some mindless repetition of some braindead cia propoganda against foreign governments being used to promote a new crypto currency called shadowcash. Yawn.
203.
by mSparks 10y ago
You sound like you expect something different from reversed Microsoft code.
204.
by mSparks 10y ago
You seem to have this the wrong way round. ->There comes a time when the software exceeds the capabilities of the hardware, and this is no exception. This is not "new software on old hardware". OK, It's happened before wit
205.
by mSparks 10y ago
nuclear: msr projects and their fusion reactors. various space based warfare kit (shooting down satellites for example) that quantum communication satellite. Im sure there is more.
206.
by mSparks 10y ago
->They are not already the leader in next-gen technology because it is next-gen, is is in the formative stages. It is the leader in manufacturing, the current generation. Erm. They are the leaders in everything from manufacturing to sup
207.
by mSparks 10y ago
The article does not in any way address the fact that China has the very low cost base (massive numbers of highly trained human capital and substantial investment in physical capital and R&D) to guarantee pretty much no other country ca
208.
by mSparks 10y ago
is this a cause and effect thing you are struggling with? didn't they teach you in school the effect (lower growth) has to come after the cause (raising the reserve ratio)? Or is it just that because US policy has had all policy levers
209.
by mSparks 10y ago
->If government loans were ineligible, most of these institutions would close over night instead of trying to continue with poor friendly community college rates. Isn't that true of any education system based on tuition fees? So I f
210.
by mSparks 10y ago
Not sure what you mean by "out of date" in 2011 they launched a policy of reducing growth by raising the reserve ratio massively, they are targeting "high single digit growth". That growth is all mostly coming from the u

More ›