cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1995-11-08 - Re: Photuris Primality verification needed

Header Data

From: Phil Karn <karn@qualcomm.com>
To: bsimpson@morningstar.com
Message Hash: 189d1fcf21b3896f1cafcf317b0fb3cbe22c2f42040ad94e0584079d10c11c7b
Message ID: <199511080146.RAA22568@servo.qualcomm.com>
Reply To: <1999.bsimpson@morningstar.com>
UTC Datetime: 1995-11-08 02:07:27 UTC
Raw Date: Wed, 8 Nov 1995 10:07:27 +0800

Raw message

From: Phil Karn <karn@qualcomm.com>
Date: Wed, 8 Nov 1995 10:07:27 +0800
To: bsimpson@morningstar.com
Subject: Re: Photuris Primality verification needed
In-Reply-To: <1999.bsimpson@morningstar.com>
Message-ID: <199511080146.RAA22568@servo.qualcomm.com>
MIME-Version: 1.0
Content-Type: text/plain


>Hilarie Orman posted that 512-bits only gives an order of 56-bits
>strength, 1024-bits yeilds 80-bits strength, and 2048 yields 112-bits
>strength.  I do not have the facilities to verify her numbers.

>As most of us agree that 56-bits is not enough (DES), the 512-bit prime
>seems a waste of time and a tempting target.  I'd like to drop it, but
>Phil is inclined to keep it with a disclaimer.

Well, since we already require 56-bit DES in ESP in the interests of
promoting basic interoperability, wouldn't a 512-bit prime be
similarly sufficient?

Again, I'm *not* going to recommend that people use it, only provide it
for those who simply cannot use larger moduli for whatever reason (export
controls or CPU limits).

Phil

Thread