Hacker News new | ask | show | jobs
by holtalanm 1804 days ago
i have never seen anything anywhere advocating for moving away from RSA. i'm curious to see what their sources are for this claim.
2 comments

watched the whole thing. was very informative. Actually havent used RSA in any capacity in years (AES is a lot easier to use), but always viewed RSA as a battle-tested encryption method/alg. I suppose with anything there are ways to misuse it, and RSA appears to be really easy to misuse.
I would say that it’s fairly rare that RSA and AES are really competitors for the same category of uses, as they’re asymmetric and symmetric algorithms respectively.

I would suggest that anyone who doesn’t know about the differences between these things just not use cryptography directly and instead use things like libsodium which has sane defaults and a hard to misuse api.

If you don’t know cryptography fairly well, it’s a massive minefield.

In 2005, The NSA began recommended migrating away from RSA and onto ECC algorithms for its customers' classified use cases. [1]

In 2018, it paused that recommendation, essentially arguing that if you haven't migrated already, wait until the quantum-resistant algorithms are well vetted to avoid a second migration.

1. [https://en.wikipedia.org/wiki/NSA_Suite_B_Cryptography]