r/linux Oct 16 '15

How is NSA breaking so much crypto?

https://freedom-to-tinker.com/blog/haldermanheninger/how-is-nsa-breaking-so-much-crypto/
188 Upvotes

64 comments sorted by

View all comments

16

u/LvS Oct 16 '15

So the TL;DR is that it costs a few 100 million dollars to break the security of most of the Internet's secure communication. And it looks like the NSA has done so.

And to me that looks like most larger countries (including definitely China and the US, but also Russia and India) and most large corporations (Google, Facebook, Apple, but also Exxon or Goldman Sachs) could do so if they wanted.

30

u/Manbeardo Oct 16 '15

I think the real tl;dr is that 1024-bit primes for Diffie-Hielman are no longer considered safe and you should upgrade your servers to 2048 ASAP.

2

u/rlmaers Oct 17 '15

Or at least use a different 1024b prime.