3
$\begingroup$

As stated here Ed448 is different from Ed25519 because of "spinal-tap grade" security. What does this mean?

$\endgroup$
1
  • $\begingroup$ I would not agree with that assessment of the security level, for me, "spinal-tap grade" would be at least 576-bits of security, which would be an 1152-bit elliptic curve $\endgroup$ Jun 13, 2019 at 23:12

1 Answer 1

10
$\begingroup$

It is security on a 0-10 scale that goes to 11.

The cost of cryptanalysis to break a cryptosystem with a 128-bit security level, like Ed25519, is out of reach for humanity already. A higher security level like Ed448's doesn't have any actual meaning with current understanding of cryptanalytic attacks. The only purpose it serves is to hedge against potential modest future advances in cryptanalysis—a radical advance like a cheap quantum computer would devastate Ed25519 and Ed448 alike, of course.

P.S. I see you tagged this and . JWT and JWE, and JOSE generally, provide a different sense of ‘spinal-tap grade’ security, which is that they are a parody of security.

$\endgroup$
1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.