News for hackers. Stuff that matters.

A comment on New Elliptic Curve Breaks 18-Year-Old Record. Parent comment

Re:New Elliptic Curve Breaks 18-Year-Old Record by UI_at_80x24 on Wednesday November 13, 2024 @04:49PM (#42130413) 

  As a professional and expert I would love to hear your thoughts and opinions on the use of elliptic curve crypto with SSH.  There was a concern (unsure of the validity) that NSA/NIST had compromised the algorithm used and ECC was unfit for 'secure' communication.
2048bit RSA has been deprecated since that declaration and while 4096bit is still viable, the smaller key-size of ed25519 is appealing.
[ Parent | on HN ]
Re:New Elliptic Curve Breaks 18-Year-Old Record by CarpaDorada on Wednesday November 13, 2024 @07:10PM (#42131690)
2048bit RSA is not deprecated...
[ Parent | on HN ]
Re:New Elliptic Curve Breaks 18-Year-Old Record by AlotOfReading on Wednesday November 13, 2024 @08:03PM (#42132042)
NIST has deprecated it for government use after 2030, just not today.
[ Parent | on HN ]
Re:New Elliptic Curve Breaks 18-Year-Old Record by fsckboy on Wednesday November 13, 2024 @10:43PM (#42132968)
well, deprecated does not mean it stops, just that it comes with warnings, so not 2030 either.
[ Parent | on HN ]
Re:New Elliptic Curve Breaks 18-Year-Old Record by AlotOfReading on Thursday November 14, 2024 @08:29AM (#42135976)
It puts it in the same category as triple DES.
[ Parent | on HN ]
Re:New Elliptic Curve Breaks 18-Year-Old Record by 41599799 on Thursday November 14, 2024 @01:11AM (#42133535)
Ever since the DUAL_EC_DBRG backdoor[1], trust in cryptographic algorithms set by NIST has been reduced.

In the case of ECC curves, the NIST curves rely on a number of highly specific but unexplained constants. More info about the safety and security of curves can be found at https://safecurves.cr.yp.to/

For now, Curve25519 is considered a good bet.

[1] https://en.wikipedia.org/wiki/NIST_SP_800-90A#Backdoor_in_Du...

[ Parent | on HN ]