Contents
What can I use instead of RSA?
There are alternatives where something similar is possible. Elliptic curves are the most practical and widely used option. The same curve can be used for encryption (e.g. ECIES) and signatures (e.g. ECDSA).
Can NSA break RSA?
It is not true that the “crypto community” (whoever that is) believes that the NSA can break RSA. In fact, if Snowden taught us anything, it is that the NSA is using many techniques to bypass RSA in TLS and elsewhere (stealing private keys, utilizing implementation bugs, and more), but are not breaking RSA.
Is 2048 bit RSA safe?
Theoretically, RSA keys that are 2048 bits long should be good until 2030. In Table 2 of that document, it says 2048-bit RSA keys are roughly equivalent to a Security Strength of 112. Security strength is simply a number associated with the amount of work required to break a cryptographic algorithm.
Is there any alternative available for RSA encryption?
There is nothing in the “Snowden revelations” which even hints at any special NSA ability at breaking RSA.
Who is the National Security Agency ( NSA )?
The National Security Agency (NSA) oversees/manages the Commercial Solutions for Classified (CSfC) program. 3. Where can additional information be found for CSfC? Additional information about the CSfC program can be found online at: SIRPNet: https://www.iad.nsa.smil.mil/iaservices/csfc 4. Who are the typical CSfC clients?
What does NSA mean by commercial solutions for classified?
Commercial Solutions for Classified (CSfC) is NSA’s commercial Cybersecurity strategy that leverages industry innovation to deliver solutions with efficiency and security. The program is founded on the principle that properly configured and layered solutions can provide adequate protection of classified data in a variety of different applications.
Can a 2048 bit RSA key be used?
For a 2048-bit RSA key, just forget it. According to all the Snowden-powered information, when NSA “breaks SSL”, they do it sensibly, i.e. not by punching through the cryptography upfront. Instead, they bribe the hosting sites to put spying hooks directly on the clear data, SSL notwithstanding.