Re: [dnsext] Adopting draft: draft-hoffman-dnssec-ecdsa-04.txt

[Basil Dolmatov <[e-mail]>]

05.01.2011 20:42, Paul Hoffman пишет:
>
> > The obvious reason for implementor to require something is to ensure
> > that all elements in this chain are equally reliable. Unfortunately,
> > "bits of strength" are not the obvious characteristics of reliability
> > which are good for comparison in all cases.
>
> We disagree here. I understand that, given the tight limitations of 
> GOST, that might be true in your market. However, in a future world 
> where there are multiple hash algorithms (thinking ahead to SHA-3), 
> some of which will have the same effective strengths, effective 
> strength is a reasonable measurement.
>
> > So, the demand of equality of some bits figures looks somewhat 
> artificial.
>
> In the GOST world, yes; in the less-restricted space of open 
> standards, no.
I did not make any GOST references, moreover I did not imply any GOST 
peculiarities in my comment, it is true for _any_ algorithm (the fact 
that GOST belongs to "space of open standards" too is worth mentioning, 
but irrelevant).

In any space of cryptographic standards the strength of algorithm is 
measured not by "bits of strength" or "bits of key or hash length" but 
by the number of operations which should be performed for given attack.
If one bothers to compare the algorithm strength more accurately then 
the product of (operations)*(memory required) is used.

Other figures have mostly marketing meaning rather than technical one.

dol@