DJBs point is summarised by the last point from the slides: "Bottom line: 128-bi...

caf on Nov 16, 2016 | parent | context | favorite | on: Announcing SSL Labs Grading Changes for 2017

DJBs point is summarised by the last point from the slides:

"Bottom line: 128-bit AES keys are not comparable in security to 255-bit elliptic-curve keys. Is 2²⁵⁵−19 big enough? Yes. Is 128-bit AES safe? Unclear."