this post was submitted on 25 Sep 2026
130 points (95.1% liked)

Technology

89005 readers
2656 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
130
There's a new way to break RSA that's faster than anything we've seen before (arstechnica.com)
submitted 4 weeks ago by return2ozma@lemmy.world to c/technology@lemmy.world
54 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] MangoCats@feddit.it 1 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

And I do...

Academically, I trust the more modern algorithms with the shorter keys - not least because all the guidance says to trust them.

Viscerally, looking at the keys, the short ones just feel more vulnerable.

[–] solrize@lemmy.ml 1 points 3 weeks ago (1 children)

Most of us don't have control over the public keys we use. We connect to a web site with a browser, and the server supplies the public key.

If you want public keys for your own purposes, I guess nothing stops you from generating 4096 bit (or whatever) ECC keys. Of course the arithmetic will be slow.

If you're really paranoid about potential math advances affecting ECC and/or RSA, then you may be best off avoiding public key schemes altogether. Just use secret keys, and maybe Merkle tree signatures.

[–] MangoCats@feddit.it 1 points 3 weeks ago (1 children)

Just use secret keys

You mean symmetric keys? They're great, but they aren't terribly practical in MANY application scenarios.

[–] solrize@lemmy.ml 1 points 3 weeks ago (1 children)

They can be less convenient, yes, but a situation where you need truly public keys is probably not that secure to begin with. If you're just trying to talk to your friends from your tree house, symmetric encryption is completely practical, including using something like DUKPT for forward secrecy.

[–] MangoCats@feddit.it 1 points 3 weeks ago

a situation where you need truly public keys is probably not that secure to begin with.

A banking website?