News for hackers. Stuff that matters.
Re:Using GPG to Encrypt Your Data by analogist on Thursday January 12, 2017 @09:25PM (#13387944)
The symmetric algorithm aside, if we just look at the key derivation, the --s2k* parameters go up to 65011712 rounds of SHA512. If you maxed out the --s2k* settings, its difference from the 1.4.12 default of 65536 rounds of SHA1 is not staggering, but not trivial either: 10 extra bits from the additional rounds and an additional 3-4 bits from straight SHA1 to straight SHA512, on modern GPUs (https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27...).

An additional 13 bits of safety margin basically gives you an extra Diceware word (log2(7776)), which, I agree, isn't a magical solution at all, but would to me cross the threshold of "it has some actual impact".

Of course, having much better usability for the average user, or just breaking OpenPGP compatibility so there are clean modern robust constructions like NaCl/libsodium running underneath are way better ways to get at good security margins, but here we are.

Re:Using GPG to Encrypt Your Data by acqq on Monday January 16, 2017 @12:04PM (#13411192)
Thanks a lot for the link, it's a wonderful overview of the password cracking capabilities of the modern GPUs.