<!DOCTYPE html>
<html>
<head>
<title></title>
</head>
<body><div>Symmetric cryptography (AES et al) key length - the 128, 256 etc bits you are talking about - is not directly comparable to public/private key cryptography, specifically RSA in this case. 1024 bits was considered a good strong RSA key... in 1995.<br></div>
<div> </div>
<div> </div>
<div>On Fri, May 17, 2013, at 08:29 AM, David Vorick wrote:<br></div>
<blockquote type="cite"><div dir="ltr">Why are so many bits necessary? Isn't 128bits technically safe against brute force? At 256 bits you are pretty much safe from any volume of computational power that one could fathom within this century. The only real danger is a new computational model that is nondeterministic or something crazy like that. I feel like what exists currently (from a quantity of bits standpoint) is more than sufficient.
<br></div>
<div><div> </div>
<div> </div>
<div><div>On Fri, May 17, 2013 at 11:09 AM, adrelanos <span dir="ltr"><<a href="mailto:adrelanos@riseup.net" target="_blank">adrelanos@riseup.net</a>></span> wrote:<br></div>
<div> </div>
<blockquote style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>George Kadianakis:<br></div>
<div>
> Thoughts?<br></div>
<div> </div>
<div>
Can you make .onion domains really long and therefor really safe against<br></div>
<div>
brute force?<br></div>
<div> </div>
<div>
Or have an option for maximum key length and a weaker default if common<br></div>
<div>
CPU's are still too slow? I mean, if you want to make 2048 bit keys the<br></div>
<div>
default because you feel most hidden services have CPU's which are too<br></div>
<div>
slow for 4096 bit keys, then use 2048 bit as default with an option to<br></div>
<div>
use the max. of 4096 bit.<br></div>
<div> </div>
<div>
Bonus point: Can you make the new implementation support less painful<br></div>
<div>
updates (anyone or everyone) when the next update will be required?<br></div>
<div>
(forward compatibility)<br></div>
<div>
_______________________________________________<br></div>
<div>
tor-dev mailing list<br></div>
<div>
<a href="mailto:tor-dev@lists.torproject.org">tor-dev@lists.torproject.org</a><br></div>
<div>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev" target="_blank">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev</a><br></div>
<div> </div>
</blockquote></div>
<div> </div>
</div>
<div><u>_______________________________________________</u><br></div>
<div>tor-dev mailing list<br></div>
<div><a href="mailto:tor-dev@lists.torproject.org">tor-dev@lists.torproject.org</a><br></div>
<div><a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev">https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev</a><br></div>
</blockquote><div> </div>
<div id="sig15836573"><div class="signature">Sent from my device</div>
<div class="signature"> </div>
</div>
</body>
</html>