[Remops] mixmaster's 1024-bit RSA is getting old

[aard at mixnym.net]

In the process of revising the mixmaster header spec, is there any way
to eliminate the tagging attack illustrated by Tom at http://crypto.is?
Seems like it should be possible to incorporate something to solve this
problem.

> Mixmaster has long used 1024-bit RSA with a packet format that allows
> a maximum of 20 hops; each encrypted with a different RSA key.  The
> data for each hop occupies 512 bytes.