[Cryptography] [FORGED] Re: ratcheting DH strengths over time

Peter Gutmann pgut001 at cs.auckland.ac.nz
Sun Nov 15 21:25:50 EST 2015


Tony Arcieri <bascule at gmail.com> writes:

>There is no reason to use FFDH anymore save for legacy compatibility or a
>catastrophic failure of ECC. Use ECDH instead.

[Citation needed]

(Specifically, one that doesn't simply defer to numerology).

Peter.


More information about the cryptography mailing list