
9/20/2013 · John Graham-Cumming
What this post added
This post explains the fundamental differences between symmetric and asymmetric cryptography, specifically in the context of TLS connections. It clarifies why symmetric keys (like those used in RC4 and AES) can be relatively short (e.g., 128-bit or 256-bit) because their security relies on brute-forcing a large number of random possibilities. In contrast, it details why asymmetric keys (like those used in RSA and ECDHE_RSA) must be much larger (e.g., 2048-bit) due to their reliance on mathematical problems like prime factorization, which have more efficient attack vectors. This understanding is vital for configuring and managing secure web traffic.