News for hackers. Stuff that matters.
Re:Mathematician warns US spies may be weakening next-gen en... by tptacek on Friday October 13, 2023 @03:44PM (#37874711)
There's a valid point to be made about selecting key exchange parameters to match bulk encryption parameters, but before you gear up to make a stink about it, bear in mind that it's generally the case in modern cryptosystems (that aren't specifically designed to do that matching) that key exchange security levels are lower than those of block ciphers. The step functions for key exchange security levels are pretty abrupt, and you pay a pretty high price to select the next one up, so aiming for "roughly the vicinity" of 128 bits is pretty normal.

There are no comments on this comment yet.