The National Security Agency published this: [image] NSA releases “Eliminating Obsolete Transport Layer Security (TLS) Protocol... The National Security Agency released a cybersecurity product detailing how to detect and fix out-of-date encryption protocol implementations. Networks and s…

"Why is the NSA deprecating p256 ECDHE?" Because governments move very slowly. And I suppose they feel that within a year, or so, CPU power might make that seem... inadequate. Security is a moving target. If you stand still (long enough) you will be insecure.

Why is the NSA deprecating p256 ECDHE?

Issuance Policy

daniejstriata January 7, 2021, 10:42am 5

@rg305 Why specifically are you pointing out section 5.1.1? I guess it is because I've never used custom parameters and do not fully understand the benefit of using that.

1 Like

Topic		Replies	Views
Key size discussion Issuance Policy	6	6568	October 21, 2015
Requesting specific old ciphers for TLS certificates Help	15	1200	November 29, 2023
ECDSA 384 Issuance Issuance Tech	25	3441	September 22, 2023
"EC XXX bits (SHAXXXwithRSA)" versus "EC XXX bits (SHAXXXwithECDSA)"? What's the difference? Does it matter? Issuance Tech	25	4470	September 4, 2022
Support Ed25519 and Ed448 Feature Requests	11	9447	December 29, 2020

Why is the NSA deprecating p256 ECDHE?

Related topics