Hacker News new | ask | show | jobs
by mikeash 3316 days ago
It's probably easier to use a standard algorithm in a way that can't be attacked by this machine (e.g. use AES-256 with a properly random key) than it is to create a non-standard algorithm that doesn't have vulnerabilities.
1 comments

Without some secret algorithmic defect, the existence of which would moot the machine and would throw any encryption algorithm into question, no amount of compute that can be assembled under the physical limits of conventional, non-quantum computing can break a 128 bit key.

AES-128 is the norm. No NSA supercomputer should convince you to use AES-256.