1280-Bit RSA

[Dan Kaminsky]

All,

   I've got a "perfect vs. good" question.

   NIST is pushing RSA-2048.  And I think we all agree that's probably a
good thing.

   However, performance on RSA-2048 is too low for a number of real world
uses.

   Assuming RSA-2048 is unavailable, is it worth taking the intermediate
step of using RSA-1280?  Or should we stick to RSA-1024?

--Dan

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com