[GNUnet-SVN] r878 - GNUnet/src/util

[grothoff]

Author: grothoff
Date: 2005-06-06 23:51:29 -0700 (Mon, 06 Jun 2005)
New Revision: 878

Modified:
   GNUnet/src/util/kblockkey.c
Log:
1024

Modified: GNUnet/src/util/kblockkey.c
===================================================================
--- GNUnet/src/util/kblockkey.c 2005-06-06 19:44:09 UTC (rev 877)
+++ GNUnet/src/util/kblockkey.c 2005-06-07 06:51:29 UTC (rev 878)
@@ -439,7 +439,15 @@
 
   hx = *hc;
   generate_kblock_key(&sk,
-                     1024, //2048,
+                     1024, /* at least 10x as fast than 2048 bits
+                              -- we simply cannot afford 2048 bits
+                              even on modern hardware, and especially
+                              not since clearly a dictionary attack
+                              will still be much cheaper 
+                              than breaking a 1024 bit RSA key.
+                              If an adversary can spend the time to
+                              break a 1024 bit RSA key just to forge
+                              a signature -- SO BE IT. [ CG, 6/2005 ] */
                      &hx);
   pkv[0] = &sk.n;
   pkv[1] = &sk.e;