Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
@joep it changes it from about 160 times the age of the universe to about 6 times the age of the universe. An impressive time save! But it doesn't change the core of the answer- 128-bit keys are for all practical purposes not possible to brute force now or any time in the foreseeable future.
@HilderVitorLimaPereira And if nothing else, such a method would clearly require the intervention of the person holding the private key, and allow an attacker to discover the true mean of whatever subset is used. Why, then, would the holder of the private key not just publish the mean periodically?
@HilderVitorLimaPereira Even if you could devise a mathematical method that allows you to calculate the mean of only published values (which seems unlikely), you would have to update it when new values are published. And just viewing how the mean changes as each new value was published would let you figure out the plaintext.
@fgrieu Fair point. I've clarified. My interpretation was that as 80 bits is their best lower bound, you shouldn't use 3DES2 in any setting requiring more than 80 bits of security, but I don't think I made that clear enough. Thanks!
