Just wondering about this little piece. How did we get to 256-bit
AES as a requirement? Just what threat out there justifies it?
There's no conceivable brute-force attack against 128-bit AES as far
out as we can see, so we're presumably begin paranoid about an
analytic
attack. But is there
| | Just wondering about this little piece. How did we get to 256-bit
| | AES as a requirement? Just what threat out there justifies it? ...
|
| I can see it as useful if some bits of the key got leaked somehow.
| For example, if you're using a HWRNG to generate keys, and it's
| bits are
| On Wed, Nov 08, 2006 at 05:58:41PM -0500, Leichter, Jerry wrote:
| Sorry, that doesn't make any sense. If your HWRNG leaks 64 bits,
| you might as well assume it leaks 256. When it comes to leaks of
| this sort, the only interesting numbers are 0 and all.
|
| Nonsense. I can cite numerous
