Conversation

This Tweet was deleted by the Tweet author. Learn more

Replying to

@h3artbl33d

and

@0xUID

Your new standard should be Ed25519. ;)

This Tweet was deleted by the Tweet author. Learn more

Replying to

and

Size of key isn't directly comparable to RSA. Both kinds of keys are structured rather than fully random values. RSA 3072, P-256 and ed25519 are all offering approximately 128-bit security in terms of random symmetric key size. Key sizes for asymmetric encryption are misleading.

This Tweet was deleted by the Tweet author. Learn more

Replying to

and

Yeah, that's what I said: ed25519 only has a single key size, 256-bit, and offers approximately 128-bit security just like P-256 and RSA 3072. As long as the key is encoded efficiently, there's no reason to expect it to be long. It's 64 bytes as binary, bloated a little as text.

1:12 PM · Apr 6, 2019Twitter Web Client

Replying to

Signatures are 512-bit (128 bytes as binary) so it's really lean. ECDSA P-256 has the same sizes. Bitcoin acts as a massive bug bounty for ECDSA sec256k1 which has the same key size too. Anyway, asymmetric keys are usually used to bootstrap symmetric encryption.