News for hackers. Stuff that matters.

A comment on Cryptographic Right Answers. Parent comment

Re:Cryptographic Right Answers by marcosdumay on Sunday May 24, 2015 @09:41AM (#9596199)
Why is it silly? 2048 bits RSA isn't even 128 bits level, and lots of software makes it easier to use 4096 bits keys than 3072 bits ones.
[ Parent | on HN ]
Re:Cryptographic Right Answers by tptacek on Sunday May 24, 2015 @12:40PM (#9596716)
The thing that puts RSA-2048 in reach of attackers is going to eliminate RSA altogether.
[ Parent | on HN ]
Re:Cryptographic Right Answers by marcosdumay on Sunday May 24, 2015 @09:48PM (#9598273)
Fair point, but if I were to use RSA (sure, better avoiding it at all), I'd still go into a 4096 bits key, hoping to outsurvive the algorithm long enough for a safe migration.

Anyway, I don't get your (as in most security experts) aversion to long keys and multiple algorithms. As an engineer, I see cryptography taking a very small amount of the resources, but holding a huge share of the risk of any security application. My guts are always pointing into moving more resources into crypto.

[ Parent | on HN ]