1994-05-21 - Re: D-H key exchange - how does it work?

Header Data

From: wcs@anchor.ho.att.com (bill.stewart@pleasantonca.ncr.com +1-510-484-6204)
To: cypherpunks@toad.com
Message Hash: a64da3938996b9f53230c8edc7c6513bcfdd2384d93c8ee5f8b1984398e97812
Message ID: <9405210110.AA02486@anchor.ho.att.com>
Reply To: N/A
UTC Datetime: 1994-05-21 04:51:11 UTC
Raw Date: Fri, 20 May 94 21:51:11 PDT

Raw message

From: wcs@anchor.ho.att.com (bill.stewart@pleasantonca.ncr.com +1-510-484-6204)
Date: Fri, 20 May 94 21:51:11 PDT
To: cypherpunks@toad.com
Subject: Re:  D-H key exchange - how does it work?
Message-ID: <9405210110.AA02486@anchor.ho.att.com>
MIME-Version: 1.0
Content-Type: text/plain


Eric Hughes, replying to somebody, says:
>    It takes hours and hours of searching to find
>    a 1024 bit strong prime on a workstation.  Granted, you don't need to change
>    very often perhaps, but some people would like to change every day.  

> If they really want to change that often, they can buy a dedicated
> machine.  There's no good cryptographic reason to change that often,
> if the modulus is large enough.  In addition, changing the modulus can
> have unpleasant effects on traffic analysis, if not done properly.

For basic PGP mail, there's no need to change keys that often.
There are other applications, though, that tend to want new keypairs 
on each transaction, and looking for strong primes would make them
much more annoying, if strong primes matter with the current factoring
algorithms...

		Bill
		





Thread