Security Basics mailing list archives
RE: 40-bit VS 128-bit Encryption
From: "Allan Schon" <allanschon () mckinleymachinery com>
Date: Fri, 20 Jun 2003 12:16:23 -0400
Well, it depends which algorithm is used for the encryption. The 'bit' value isn't as important as you might think, compared to the specific algorithm used. If you're refering to RSA public key encryption, most online businesses use a 1024 bit key; 128 bit keys not very secure, given the speed of today's computers. Some private key encryption algorithms can be secure with a much smaller key, but then you run into the problem of key distribution.... It really depends what exactly can be accessed based on a cracked password... You may be fine with minimal encryption, and you may have to go ahead and use the best you can get... It's up to you, in the end. -----Original Message----- From: Stephen Bock [mailto:sbock () smchcn net] Sent: Thursday, June 19, 2003 1:22 PM To: security-basics () securityfocus com Subject: 40-bit VS 128-bit Encryption I am setting up a secure website and i was wondering which would be better to use, 40-bit or 128-bit? Obviously, 128-bit would be stronger and not easily crackable, but it is also more expensive. Does anybody know if 40 or 128-bit has been cracked yet? I'm not going to be transmitting any credit card info over the net, but i will be sending username, password, etc. What are your thoughts? ---------------------------------- Stephen Bock Information Technology/Webmaster Samaritan Ministries International --------------------------------------------------------------------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm ---------------------------------------------------------------------------- --------------------------------------------------------------------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm ----------------------------------------------------------------------------
Current thread:
- 40-bit VS 128-bit Encryption Stephen Bock (Jun 20)
- RE: 40-bit VS 128-bit Encryption Richard Parry (Jun 21)
- Re: 40-bit VS 128-bit Encryption Adam Newhard (Jun 21)
- RE: 40-bit VS 128-bit Encryption Paul Benedek (Jun 21)
- Re: 40-bit VS 128-bit Encryption phil baskers (Jun 23)
- <Possible follow-ups>
- RE: 40-bit VS 128-bit Encryption DeGennaro, Gregory (Jun 21)
- RE: 40-bit VS 128-bit Encryption Allan Schon (Jun 21)
- RE: 40-bit VS 128-bit Encryption Jonathan Grotegut (Jun 24)
- RE: 40-bit VS 128-bit Encryption Joseph Mathews (Jun 25)
- Re: 40-bit VS 128-bit Encryption Olivier DEBRE (Jun 25)
- RE: 40-bit VS 128-bit Encryption Joseph Mathews (Jun 25)
- RE: 40-bit VS 128-bit Encryption Cushing, David (Jun 25)
- RE: 40-bit VS 128-bit Encryption Alexandre . Steinberg (Jun 25)