Timeline for DSS security in comparison to ECDSA or RSA
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 20, 2017 at 4:54 | vote | accept | SaAtomic | ||
| Jul 20, 2017 at 2:36 | answer | added | dave_thompson_085 | timeline score: 6 | |
| Jul 20, 2017 at 1:14 | comment | added | dave_thompson_085 | Do NOT use static-DH TLS ciphersuites; they require managing DH certs which is a pain and offer no benefit over plain-RSA. If you want to use DSA=DSS authentication, use DHE-DSS suites (the E is for Ephemeral and is very important). Static-ECDH suites similarly offer no benefit and are inferior to ECDHE but do not have the same difficulty with certs, see my answer at crypto.stackexchange.com/questions/19452/… | |
| Jul 19, 2017 at 19:16 | comment | added | puzzlepalace | Security for DSA and ECDSA is similar, they both rely on the same "hard" problem, albeit in different types of groups. ECDSA has the advantage of having much smaller signatures. | |
| Jul 19, 2017 at 13:35 | comment | added | SaAtomic | @SEJPM In terms of security, how does a DSA/DSS compare to the ECDSA? | |
| Jul 19, 2017 at 13:31 | review | First posts | |||
| Jul 19, 2017 at 16:51 | |||||
| Jul 19, 2017 at 13:29 | comment | added | SEJPM | DSS (Digital Signature Standard) is the name of the NIST standard that defines DSA (Digital Signature Algorithm) and other "approved" signature algorithms. These days I think it is largely synonymous with FIPS 186. If you see "DSS" somewhere it usually means "DSA". | |
| Jul 19, 2017 at 13:27 | history | asked | SaAtomic | CC BY-SA 3.0 |