[A83] Re: apps
[Prev][Next][Index][Thread]
[A83] Re: apps
> In most actual uses for secure communication, the public/private key
> cryptography is not the only thing used, but instead is used in
> combination with a regular one-key system (in which both people must know
> the same key to encrypt and decrypt with); the public/private key system
> is only used to transmit the key for this encryption. See the following:
Right. Public-private key encryption is much slower than symetric
encryption.
> Note that the 40, 56, and 128 bit sizes are the sizes of the keys for the
> one-key encryption, while the 1024 and 2048 are for the public/private
> keys. These two sets of keys sizes can't be compared directly, see
> the bottom of this:
Are you sure this is the case for SSL? I believe that would break the
export regulations for encryption of the public/private key part.
> "This means that 512-bit keys no longer provide sufficient security for
> anything more than very short-term security needs."
That's very interesting. I had no idea they were that insecure.
References: