2048 or 4096 for new keys? aka defaults vs. Debian
Robert J. Hansen
rjh at sixdemonbag.org
Thu Oct 31 22:42:57 CET 2013
> But this http://eprint.iacr.org/2009/317 (mentioned by the German Wikipedia
> article for AES) claims that AES-256 was down to 99.5 bits.
If memory serves that's a related-key attack.
(Hmm. When you've gotten to the point where you can recognize
academic papers by their URLs, maybe that's a sign you need to get a
hobby... sigh. Time to take up needlepoint, I guess.)
Anyway. Although there's some really neat theoretical cryptanalysis
against AES-256, in reality AES-256 is as solid as the Rock of
More information about the Gnupg-users