Photuris 512bit Prime Challenge? (Re: Photuris Primality verification needed)

-----BEGIN PGP SIGNED MESSAGE-----

Hilarie Orman <ho@cs.arizona.edu> wrote:

>>  Well, since we already require 56-bit DES in ESP in the interests of
>>  promoting basic interoperability, wouldn't a 512-bit prime be
>>  similarly sufficient?
>
>If you are willing to accept that in all likelihood, one year from
>now, some group will announce that can "crack" all key exchanges that
>using the published modulus, then sure, call it sufficient.

Sounds like someone just threw down a gauntlet.

Is it even possible to do the precomputations in a distributed manner in
less than a year or two?  Or maybe starting a few years down the road?
It would be nice to give Photuris a chance to get established before the
least common denoninator shared modulus gets taken out, if we even can
take it out.


Richard

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMKDVvfobez3wRbTBAQHpkgP9Fg+MGMz8U6Bisv45PZohoZxWbiEYuxJK
tg8oHD8TZRQsuqCwveWFRTnmPGiGKs2cBs5ZKXkFNU6ot7lZLO8d/1BSSjo0yX2Q
0FSXDSaBjUKIFcjHHGYBWrZZ+gjc/bdab94EqQvmFSUmAp73/mnKZgcyUPGL3Cmt
MW3jZhlVMdw=
=bfsQ
-----END PGP SIGNATURE-----

Richard Johnson writes:
> Hilarie Orman <ho@cs.arizona.edu> wrote:
> >If you are willing to accept that in all likelihood, one year from
> >now, some group will announce that can "crack" all key exchanges that
> >using the published modulus, then sure, call it sufficient.
> 
> Sounds like someone just threw down a gauntlet.
> 
> Is it even possible to do the precomputations in a distributed manner in
> less than a year or two?

I would guess that it probably is. However, there is no point in
trying to do this yet since I suspect that Phil and Bill can be
convinced that its a bad idea to specify a 512 bit modulus.

Perry