[HN Gopher] Practical bruteforce of AES-1024 military grade encr...
       ___________________________________________________________________
        
       Practical bruteforce of AES-1024 military grade encryption
        
       Author : homarp
       Score  : 22 points
       Date   : 2022-05-12 19:40 UTC (3 hours ago)
        
 (HTM) web link (research.kudelskisecurity.com)
 (TXT) w3m dump (research.kudelskisecurity.com)
        
       | NovemberWhiskey wrote:
       | Discussed recently: https://news.ycombinator.com/item?id=31235427
        
       | LeoPanthera wrote:
       | This was discussed before, but just in case, there's no such
       | thing as "AES-1024". AES has only three specified variants, 128,
       | 192, and 256.
       | 
       | "1024 bit" encryption generally refers to RSA, or similar public-
       | key cryptosystems. The name is misleading. RSA-1024 is not 8x
       | more secure than AES-128. Public key systems need larger keys
       | than symmetric systems, like AES.
       | 
       | However the software described in the article works it is surely
       | proprietary, and probably lying about its strength.
        
       | albntomat0 wrote:
       | Since the headline is a bit click-baity:
       | 
       | "Spoiler alert: I did not break AES, and this work does not
       | concern the security of AES."
        
       | brian_herman wrote:
       | This analysis shows again that it is difficult to roll a custom
       | cryptographic algorithm and also that the level of security of a
       | solution does not depend on the number of encryptions performed.
       | 
       | From the article
        
         | PeterWhittaker wrote:
         | > multiple encryptions
         | 
         | Correct me if I am wrong, but isn't AES a group, like DES? If
         | so, encrypting twice under keys of the same strength is the
         | same as encrypting once, with a different key.
         | 
         | This is why, e.g., 3-DES uses encryption-decryption-encryption,
         | under different keys.
        
           | less_less wrote:
           | AES and DES are not groups. See eg https://www.cs.ucdavis.edu
           | /~rogaway/classes/227/winter09/des....
        
           | lifthrasiir wrote:
           | Technically yes, but that different key might not be computed
           | efficiently (of course no guarantee for that, but no
           | guarantee _against_ that as well). To my knowledge 3DES 's
           | construction is only for seamless upgrading, where putting
           | the original 56-bit key three times gives a 3DES key.
        
       ___________________________________________________________________
       (page generated 2022-05-12 23:01 UTC)