121 reputation
3
bio website
location
age
visits member for 1 year, 9 months
seen Apr 3 '13 at 0:36

Jan
6
awarded  Citizen Patrol
Dec
14
awarded  Teacher
Dec
13
comment Why not use larger cipher keys?
But when you bear in mind that Browsers are already resorting to dirty tricks like DNS prefetching and just-in-time compiling javascript, you'll realize that the cost of going from 4096-bit keys to 65536-bit keys matters. And also, since the best known attacks on 2048-bit RSA is more work than brute-forcing the AES-256 key, there's no cryptographic benefit to doing it either.
Dec
13
answered How to perform a security audit for a PHP application?
Dec
13
comment Why not use larger cipher keys?
+1. Using big key lengths for "offline" asymmetric crypto (like PGP) is often applied, but for "online" key-exchanges, a 2048-bit key for 30-year security is sufficient for most applications, and doesn't annoy the user with a 2-minute wait during the SSL handshake.
Dec
13
awarded  Supporter