By: eriko
idn't realize that they are commonly used in astrophysics (thanks dirigibleman!), which makes sense given we're talking about the output of stars and supernovas. I no longer think its silly. Well, he...
View ArticleBy: twoleftfeet
until computers are built from something other than matter and occupy something other than space. Just give away the plans for iPhone 7, why don't you.
View ArticleBy: indubitable
All I can find is someone posting an excerpt from Applied Cryptography, which is well known and has been around forever. Did Schneier write something new on stackexchange and you mis-linked, or was...
View ArticleBy: JHarris
One thing is, for many purposes, it's actually not desirable to have perfect, forever-uncrackable security. Like if you encrypted your files, forgot your password, and need to recover the system, you...
View ArticleBy: Blake
...."A favorite Blake quote".... I'll go ahead and assume I said that at some point.
View ArticleBy: eriko
Note: there is a difference between a properly implemented strong 256 bit crypto system and a poorly implemented one. If you screw up the implementation, 1024 bits won't help you. There's also the...
View ArticleBy: jeffburdges
You should clarify that Schneier only defends 256bit symmetric keys, ala AES keys. I believe Schneier has already advised going beyond 2048bits for public keys that must survive for a prolonged period,...
View ArticleBy: cotterpin
Again humans' inability to fully grasp exponential growth is demonstrated. An increase from 128 bits to 256 doesn't make your key twice as strong. It makes a key that is roughly...
View ArticleBy: kengraham
You should clarify that Schneier only defends 256bit symmetric keys, ala AES keys. I believe Schneier has already advised going beyond 2048bits for public keys that must survive for a prolonged period,...
View ArticleBy: ubernostrum
Expanding on eriko's comment: it's not just that he's only talking about symmetric keys. It's also that he's talking about brute-force attacks. "Brute force" means, basically, that you set your...
View ArticleBy: TheyCallItPeace
This argument works under the assumption that brute-force search over the entire key-space is the most viable attack. No cryptosystem to date, aside from a one-time pad, has been proven to have that...
View ArticleBy: rongorongo
Approaching the notion of strong security from the perspective of Psychology rather than Physics, I liked Hristo Bojinov's proposed countermeasure to rubber hose cryptanalysis: passwords based on...
View ArticleBy: grandsham
TheyCallItPeace: "This argument works under the assumption that brute-force search over the entire key-space is the most viable attack. No cryptosystem to date, aside from a one-time pad, has been...
View ArticleBy: hoyland
So while it is a nice argument, it does not address the main issue with pretty much any cryptosystem aside from a one-time pad: they rely on functions that are easy to compute in one direction, but...
View ArticleBy: grandsham
also, can we talk about how silly it is that Schneier decided to use ergs as his unit of energy for his example? because it's pretty silly.
View ArticleBy: Herodios
until computers are built from something other than matter and occupy something other than space. Just give away the plans for iPhone 7, why don't you. Well more or less, yes. I have it on the best...
View ArticleBy: introp
also, can we talk about how silly it is that Schneier decided to use ergs as his unit of energy for his example? because it's pretty silly. Whatchoo got against ergs? Ergs is just joules for tiny people.
View Article