Author

Topic: Private keys, 256 bits? (Read 1070 times)

legendary
Activity: 1428
Merit: 1093
Core Armory Developer
March 30, 2013, 11:32:38 AM
#4
Bitcoin uses ECDSA.

This.

ECDSA was picked for Bitcoin because it has much shorter keylengths than other digital signing scheme/crypto schemes.   For instance, all the following keylengths are approximately equal in terms of mathematical entropy:

--3,072-bit RSA key
--256-bit ECDSA key
--128-bit AES key

There is no doubt that an AES 128 key is sufficient protection, probably for decades, if not longer (protection against well-funded attacker with a billion dollars of computing resources)
legendary
Activity: 1176
Merit: 1280
May Bitcoin be touched by his Noodly Appendage
March 30, 2013, 11:24:04 AM
#3
Oh wow I didn't even check if they were the same... That seemed obvious to me
I feel dumb, but well, thanks!
full member
Activity: 154
Merit: 100
March 30, 2013, 11:22:33 AM
#2
Bitcoin uses ECDSA.
legendary
Activity: 1176
Merit: 1280
May Bitcoin be touched by his Noodly Appendage
March 30, 2013, 11:09:16 AM
#1
Hi all
I just asked Openssl to create a new DSA pkey of 256 bits.
This is what it answers:
Quote
private key length is too short; it needs to be at least 384 bits, not 256
Looks like it comes from here, where (newkey < MIN_KEY_LENGTH) is false because MIN_KEY_LENGTH=384

So what is happening here? Am I doing something wrong? Bitcoin uses a modified version of Openssl?
Jump to: