Re:Why 256 bit keys are large enough
by marcosdumay on Monday December 17, 2012 @10:28AM
(#4932607)
On RSA, knowing ay of the factors used is enough to break the key. Thus, you brute force 256 bits RSA with the same number of tries that you brute force 128 bits AES.
Or, in other words, when you create a 256 bits RSA key, it's guaranteed that one of the factors will have at most 128 bits. Thus, it's only as strong as a 128 bits AES against brute force.
But anyway, that's a moot point, because criptoanalysis exists, and there are better than brute force attacks against both algorithms.
Or, in other words, when you create a 256 bits RSA key, it's guaranteed that one of the factors will have at most 128 bits. Thus, it's only as strong as a 128 bits AES against brute force.
But anyway, that's a moot point, because criptoanalysis exists, and there are better than brute force attacks against both algorithms.