Transitioning the Use of Cryptographic Algorithms and Key Lengths

Re:Transitioning the Use of Cryptographic Algorithms and Key... by veggieWHITES on Monday October 21, 2024 @07:48PM (#41909750)

We shouldn't be listening to the NIST for any sort of Cryptographic advice. [1]

[ Parent | on HN ]

Re:Transitioning the Use of Cryptographic Algorithms and Key... by gruez on Monday October 21, 2024 @08:14PM (#41909907)

So we should continue using ECB and RSA < 2048?

[ Parent | on HN ]

Re:Transitioning the Use of Cryptographic Algorithms and Key... by y-curious on Monday October 21, 2024 @08:47PM (#41910109)

Not if you want to get FedRAMP designation at any point.

[ Parent | on HN ]

Re:Transitioning the Use of Cryptographic Algorithms and Key... by archgoon on Tuesday October 22, 2024 @02:50AM (#41911841)

Ah, but that's a beauty of it. If you encrypt with ECB you can't be decrypted by a federally compliant organization!

[ Parent | on HN ]

Re:Transitioning the Use of Cryptographic Algorithms and Key... by kurikuri on Wednesday October 23, 2024 @12:42AM (#41921890)

Unfortunately, a federally compliant organization could still decrypt it because ECB decryption is still allowed for legacy use.

[ Parent | on HN ]

Re:Transitioning the Use of Cryptographic Algorithms and Key... by User23 on Tuesday October 22, 2024 @08:56AM (#41913770)

This looks like spooks did spook stuff, got caught, and NIST fixed it? Is there evidence NIST colluded or is the NSA just good at its job?

[ Parent | on HN ]