At 2004-02-08 02:04:06 +0530, [EMAIL PROTECTED] wrote:
>
> If even breaking the 128-bit encryption offered by SSL websites is
> non-trivial to break, dont you think 1024 bit keys are going to be
> more difficult to break by orders of magnitude?

Apples and elephants.

SSL/TLS peers use X.509 certificates for authentication, and negotiate
a session key to use with a symmetric cipher for bulk encryption. The
128-bit refers to the length of this session key. With PGP, the 1024
bits refers to the length of the public key.

With some hand-waving, a 128-bit symmetric cipher is approximately the
same strength as (or maybe a little more than) a 1024-bit asymmetric
cipher.

-- ams

_______________________________________________
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd

Reply via email to