Greetings again. I am helping someone design a system that will involve giving 
someone a randomly-generated key that they have to type in order to unlock data 
that is private but not terribly valuable. Thus, we want to keep the key as 
short as practical to reduce typing and mis-typing, but long enough to prevent 
trivial brute-force attacks. The encryption will be AES-128 in CBC mode.

What is the current state of brute-force attacks on AES-128 blobs? Are there 
recent results where we can estimate the cost of brute-forcing 64-bit and 
80-bit keys?

--Paul Hoffman

_______________________________________________
cryptography mailing list
cryptography@randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography

Reply via email to