2
$\begingroup$

Given an AES key, there is a limit (of about $2^{64}$ blocks) of how much plaintext it is safe to encrypt with the key.

Is there a similar limit for how many signatures it is safe to produce with a signing key (such as RSA, DSA, or ECDSA)?

(I would also be interested if there is similar limit for asymmetric encryptions.)

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.