attachment-0001.html\2355ff60\20130128\attachments\pycrypto\pipermail - delta/python-packages/pycrypto.git

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

<tt>
I&nbsp;think&nbsp;you&nbsp;are&nbsp;looking&nbsp;at&nbsp;an&nbsp;older&nbsp;FIPS&nbsp;186&nbsp;spec.&lt;br&gt;The&nbsp;current&nbsp;one&nbsp;allows&nbsp;3072&nbsp;bits&nbsp;for&nbsp;DSA.&lt;br&gt;&lt;br&gt;Besides&nbsp;that,&nbsp;DSA&nbsp;is&nbsp;based&nbsp;on&nbsp;a&nbsp;different&nbsp;hard&nbsp;problem&nbsp;than&nbsp;RSA.&lt;br&gt;A&nbsp;1024&nbsp;bit&nbsp;DSA&nbsp;signature&nbsp;is&nbsp;somewhat&nbsp;more&nbsp;secure&nbsp;than&nbsp;a&nbsp;1024&nbsp;bit&nbsp;RSA&nbsp;signature.&lt;br&gt;<br>
&lt;br&gt;&lt;div&nbsp;class=&quot;gmail_quote&quot;&gt;2012/12/12&nbsp;.&nbsp;&lt;span&nbsp;dir=&quot;ltr&quot;&gt;&lt;&lt;a&nbsp;href=&quot;mailto:dcMhOYBdpZkH@web.de&quot;&nbsp;target=&quot;_blank&quot;&gt;dcMhOYBdpZkH@web.de&lt;/a&gt;&gt;&lt;/span&gt;&lt;br&gt;&lt;blockquote&nbsp;class=&quot;gmail_quote&quot;&nbsp;style=&quot;margin:0&nbsp;0&nbsp;0&nbsp;.8ex;border-left:1px&nbsp;#ccc&nbsp;solid;padding-left:1ex&quot;&gt;<br>
It&nbsp;is&nbsp;important&nbsp;to&nbsp;consider&nbsp;1024bit&nbsp;DSA&nbsp;-&nbsp;NIST&nbsp;says&nbsp;this&nbsp;too&nbsp;-&nbsp;not&lt;br&gt;<br>
secure&nbsp;anymore,&nbsp;or&nbsp;do&nbsp;you&nbsp;want&nbsp;your&nbsp;messages&nbsp;to&nbsp;be&nbsp;readable&nbsp;within&nbsp;your&nbsp;lifetime?.&lt;br&gt;<br>
Since&nbsp;DSA&nbsp;max.&nbsp;key&nbsp;size&nbsp;is&nbsp;1024bit&nbsp;it&#39;s&nbsp;time&nbsp;to&nbsp;think&lt;br&gt;<br>
about&nbsp;removing&nbsp;it&nbsp;completely&nbsp;from&nbsp;pycrypto&nbsp;and&nbsp;use&nbsp;RSA&nbsp;or&nbsp;ECC&nbsp;(with&nbsp;your&lt;br&gt;<br>
own&nbsp;curves,&nbsp;not&nbsp;NIST&#39;s&nbsp;untrustable&nbsp;ones).&lt;br&gt;<br>
&lt;br&gt;<br>
_______________________________________________&lt;br&gt;<br>
pycrypto&nbsp;mailing&nbsp;list&lt;br&gt;<br>
&lt;a&nbsp;href=&quot;mailto:pycrypto@lists.dlitz.net&quot;&gt;pycrypto@lists.dlitz.net&lt;/a&gt;&lt;br&gt;<br>
&lt;a&nbsp;href=&quot;http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto&quot;&nbsp;target=&quot;_blank&quot;&gt;http://lists.dlitz.net/cgi-bin/mailman/listinfo/pycrypto&lt;/a&gt;&lt;br&gt;<br>
&lt;/blockquote&gt;&lt;/div&gt;&lt;br&gt;<br>

</tt>