Re: [TLS] Comparative cipher suite strengths

[Michael D'Errico <[e-mail]>]

> Furthermore, adapting Eric's calculations below, to brute
> force 112-bit keys, assuming 80-bit keys are brute forcible
> today (let's just say with massive distributed computing for
> the sake of example), feature sizes would need to shrink to
> 50 * 10^{-9} * 2^{-32} =~ 1.16 * 10^{-17}, still smaller than
> a Hydrogen atom....

There is a problem with this math (and the original).  Feature
size is a linear measure; the number of features increases as
the square of the feature size reduction.  If you need 2^32
times as many features, then feature size needs to shrink by
"only" 2^(-16).

Mike