Subject: Re: 1024 bit key considered insecure (sshd)
To: Petr Swedock <petr@blade-runner.mit.edu>
From: Perry E. Metzger <perry@piermont.com>
List: tech-security
Date: 08/29/2002 10:29:38
Petr Swedock <petr@blade-runner.mit.edu> writes:
> > I would have thought spending at least hundreds of millions off
> > dollars and (as importantly) at least months of time would have been
> > considered "unattractive" enough to encourage other methods of getting
> > at your data like breaking in to your physical location. Silly me. I
> > guess I missed the concept behind crypto.
> 
> The concept behind crypto is to confuse, scramble and obfuscate.

I'm glad you've explained it to me.

> When it was first designed for and employed in computers the existing 
> mathematical models, computer muscle and modes of analysis were
> thought to assure unbreakability.  Now the use has morphed into
> a race condition where present mathematical models and future 
> computer muscle, coupled with existing modes of analysis are
> thought to assure breakability.

So, this means that because a person with a billion in spare change
lying about might (MIGHT!) be able to break a 1024 bit key every year,
we should all panic?

-- 
Perry E. Metzger		perry@piermont.com
--
"Ask not what your country can force other people to do for you..."