[cryptography] 1280-Bit RSA

Zooko O'Whielacronx zooko at zooko.com
Sun Jul 11 11:26:51 EDT 2010


You didn't mention the option of switching to elliptic curves. A
256-bit elliptic curve is probably stronger than 2048-bit RSA [1]
while also being more efficient in every way except for CPU cost for
verifying signatures or encrypting [2].

I like the Brainpool curves which comes with a better demonstration
that they were generated with any possible "back door" than do the
NIST curves [3].



[1] http://www.keylength.com/
[2] http://bench.cr.yp.to/results-sign.html
[3] http://www.ecc-brainpool.org/download/draft-lochter-pkix-brainpool-ecc-00.txt

More information about the cryptography mailing list