Given an AES key, there is a limit (of about $2^{64}$ blocks) of how much plaintext it is safe to encrypt with the key.

Is there a similar limit for how many signatures it is safe to produce with a signing key (such as RSA, DSA, or ECDSA)?

(I would also be interested if there is similar limit for asymmetric encryptions.)



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Browse other questions tagged or ask your own question.