[cryptography] Current state of brute-forcing random keys?

Nico Williams nico at cryptonector.com
Thu Jun 9 19:00:10 EDT 2011

On Thu, Jun 9, 2011 at 5:49 PM, Marsh Ray <marsh at extendedsubset.com> wrote:
> A few GB of state would hopefully put it in that size range where it's too
> large to fit on any attacker's ASIC, while at the same time being of a size
> for which a defender's commodity hardware is heavily optimized.

Smartphones don't have that much RAM, yet.  They're only just
approaching 1GB, but don't have all that much to spare to
applications.  But even 10MB will greatly complicate the attacker's
life (certainly, if they wanted to use GPUs, and probably if they are
using ASICs).

More information about the cryptography mailing list