deflating heffalumps

[Jacob Bachmeyer]

On 1/3/25 21:51, Robert J. Hansen wrote:
> [...]
>
>> So a quantum computer able to solve RSA-256/384/512 can also solve 
>> EC- RSA-256/384/512 with the same difficulty?
>
> I answered this.

I was checking my understanding, but see below.

>>> The US government's belief is that RSA-3072 will be sufficient for 
>>> protection of Top Secret/SCI data for the next twenty-five years.
>>>
>>> [...]
>>
>> And what about the various elliptic curve cryptosystems?
>
> I provided you with a link to the NSA's CNSA Suite 2.0. I did this 
> hoping you would read it.
>
> Securing TS/SCI traffic with legacy CNSA 1.0 algorithms such as ECDH, 
> ECDSA, and RSA will be officially approved until 2033 in most roles. 
> After that, it's all PQC.

So that means the US Government also expects the elliptic curve systems 
will be safe until at least 2058 (usable until 2033 plus 25 years to 
declassification).  Interesting.

Thank you.


-- Jacob