Free VPN Services to Access Blocked Websites

Hi,
I’m writing on behalf of SecurityKISS and I’d like say a word about the Blowfish/AES key length issue.
We already explained it in our FAQ:

http://www.securitykiss.com/sk/index.php?m=FAQ

The question was: “Is 1024-bit RSA key long enough to feel secure? I’ve seen applications using 2048-bit key.”

This is our stance and it also applies for session keys:

“It really doesn’t matter. 1024-bit key is good enough.

Using 2048-bit RSA key is often a publicity stunt made by some companies to promote their products. A key length is one of few parameters in the overall security which is easy to compare for non-experts so some companies use 2048-bit RSA keys and announce it in a flomboyant way although it really does not make sense.

Let’s repeat and highlight:
Using 2048-bit key instead of 1024-bit key does not improve security of a system and it only slows down key negotiation process.

It may be compared to the situation where we are buying a door lock worth $2000 instead of other one worth $1000 to secure our house. They both are high-end top quality locks and no sane burglar would even bother trying to break such a lock. The burglar will simply break the window, smash the door or bribe the key delivery man to get the copy of the key.

In other words breaking RSA key is a last idea the attacker can come up with, regardless it is 1024-bit or 2048-bit key. ”

Don’t hesitate to write to us if you have any questions!

Best Regards
Greg
SecurityKISS Team