[Remops] Generating a stronger PGP key?

[Lance Cottrell]

It is high time for 4096 RSA everywhere in Mixmaster. It has been a very long time since 1993.
Back when I started, I was developing and distributing on a 386 Linux box over a 14.4kbps modem with a static IP.   :) 
It is worth discussing how we might best evangelize the change to all exiting remailer operators. 
After that, we need to work on the end users. 


--
Lance Cottrell
Sent from my iPad

> On Mar 17, 2014, at 5:52 PM, Crypto <crypto at jpunix.net> wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 3/17/2014 7:39 PM, lists at notatla.org.uk wrote:
>>> code has not caught up with the technology. But remember, the 
>>> encryption strength is probably acceptable due to the fact that
>>> we are using it for transient messages rather than long-term file
>>> storage.
>> 
>> I doubt that reasoning.
>> 
>> 15 years ago $250,000 could crack a 56-bit key in about a day. 
>> After 10 Moore's law cycles that's 66 bits today. 1024-bit RSA may
>> be worth about 80 bits of symmetric key. 
>> (http://www.nsa.gov/business/programs/elliptic_curve.shtml) If
>> that's so some tradeoff between budget and time almost certainly 
>> brings keys of this size into range for cracking - e.g. spend
>> $250M and crack a key every 16 days.
>> 
>> One remailer private key reveals many messages.
> 
> The interception of a complete message is still safe IMO. Please
> remember that if a Mixmaster packet is intercepted in route and
> decrypted, it's still just a packet of data. Mixmaster breaks messages
> apart into packets that are sent through various random remailer paths
> and are assembled at the end-node. It's not perfect but it does
> introduce a layer of complexity where the end-node would have to be
> compromised in order to collect the entire message.
> 
> - -- 
> Crypto
> 
> Keywords: terrorism, bombs, jogging, suntan lotion,
> nails, pellets, knives, shoes, underwear, milk, socks,
> hair, toenails, masturbation, gasoline, cooking oil,
> mayonnaise, bananas, Obama, Clinton, EFF, NSA, FBI,
> PGP, USA, pressure cooker, marathon, fertilizer
> 
> Keywords are not necessarily in order of importance
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.21-beta27 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> 
> iQIcBAEBAgAGBQJTJ5jnAAoJENm5+F4XN2I5jDsP/A1aXadNB+SZ1PGeAoc+XyJc
> EKSP2hYuVro9pWCSBhsM/jPEqqvVbAj/EhZcnQsy2OVwkF+/aaQosGI8Y5CZ13kF
> UnsgK7zW9WpyeQZtBVToYvfRXJskoxmgtbsyDn2d+3+2V7gi17YgGDy72oXaOra6
> 3gJC53VIAQuCSj2kjb1iDepS9epuwQqSOwhC6uZT5UUK2P4X/0ryPtTkeQApMpR3
> xEQELxIM6OpnOQwtqJslWxf7/YQ+03Mi4a1ozs8dZb7x9p7+0DyXH6XIb8fBcOvW
> Ugp8d+DkOclBUt06EAP3CRCONnUaI7sP0moNY5u0pf8CieDe8mAskRgj1O4FELNm
> ea1pjo4M6WwIAARM5S20LxBeSoXNnmW+V7ywXblseWRjE/ZnInNOkQKDvZAZE7gO
> +n3y6M6AoP2/UXi8CDBEO8yXI3IhtB8kbogfEqkSnDg6mW/JKht7ovBSBSzacflW
> TCt7Sw6M9/DsJ2rOeU20P98zttbbJb+CkQUiMYZBghPGPIAGk7tAjtdHckcFnaQp
> wntXzGBv6eVOUEQKrnMeLvqfkE6L1iSGS1bDEjxwhPpkaZkZ5jOHObBQ3+izcGjg
> rybARpzg8dGLT2QMivp1ESRQ3/H+g9oDFteh/i4i+DEXy/3z7878zwjIxYBIxn+3
> OmIbqZLVOXN/UyzgjqA1
> =YUya
> -----END PGP SIGNATURE-----
> _______________________________________________
> Remops mailing list
> Remops at lists.mixmin.net
> http://lists.mixmin.net/mailman/listinfo/remops
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2318 bytes
Desc: not available
URL: <http://lists.mixmin.net/pipermail/remops/attachments/20140317/ee3127de/attachment.bin>