On Wed, Aug 19, 2009 at 6:45 PM, James A. Donald<[email protected]> wrote: > > http://bench.cr.yp.to/results-sign.html > > Looking at those benchmarks, it looks like everything > faster than ecdonaldp160 can be broken in a couple of > months by a single good desktop computer, so > ecdonaldp160 is the fastest public key algorithm left > standing of the algorithms benchmarked. > > Am I reading the benchmarks correctly?
I think so. See also: On the Security of 1024-bit RSA and 160-bit Elliptic Curve Cryptography Joppe W. Bos and Marcelo E. Kaihara and Thorsten Kleinjung and Arjen K. Lenstra and Peter L. Montgomery http://eprint.iacr.org/2009/389 We're currently planning to use 192-bit ECDSA with the Brainpool curve: http://tools.ietf.org/html/draft-lochter-pkix-brainpool-ecc-03 Regards, Zooko _______________________________________________ tahoe-dev mailing list [email protected] http://allmydata.org/cgi-bin/mailman/listinfo/tahoe-dev
