Skip to main content
10 events
when toggle format what by license comment
Jan 23, 2020 at 9:25 comment added schroeder Firefox did the same thing: "it's not Suite B, so it should be removed". bugzilla.mozilla.org/show_bug.cgi?id=1128792
Apr 3, 2018 at 6:11 comment added igor AFAIK P-521 is used for data that should be secret also in a few more years. Imagine some country was able to get nuke data encrypted with p256 in few more years when the computers will be stronger it may become possible, P521 decrease this possibility by many times.
Jan 9, 2018 at 15:54 comment added Christopher Schultz Support for x25519 seems to be fairly good today if you want to avoid using those from NSA Suite B.
Aug 29, 2017 at 8:23 comment added Stefan L @hackajar that paper only seems to recommend using elliptic curves, but I can't find any mention of which curves they would recommend?
Mar 17, 2017 at 13:14 history edited CommunityBot
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
Jan 1, 2016 at 2:04 comment added Smit Johnth Switching from 256 to 384 bit ECC doesn't cost much, so why not use it? It's still faster than non-EC cryptography used today.
Nov 19, 2015 at 23:28 comment added EagleEye208 FIPS 140-2 calls out P-256 and P-384. However, the assertion that P-384 is "useless" is no longer valid see weakdh.org/imperfect-forward-secrecy-ccs15.pdf for details. It is highly recommend at this point to switch from prime256v1 to secp384r1.
Sep 24, 2015 at 7:15 comment added AJAr Thank you for the response. I just wondered about it after looking into the available curves in my OpenSSL installation, curious why this curve saw a revocation of prior support. Answered the question, and I agree that there is no good reason to use P-384 or P-521 vs. P-256 given what is realistic to break as an isolated curve apart from the others.
Sep 24, 2015 at 7:10 vote accept AJAr
Sep 23, 2015 at 20:59 history answered Tom Leek CC BY-SA 3.0