Website Security & Threat Management
Why some cryptographic keys are much smaller than others

Why some cryptographic keys are much smaller than others

9/20/2013 · John Graham-Cumming

What this post added

This post explains the fundamental differences between symmetric and asymmetric cryptography, specifically in the context of TLS connections. It clarifies why symmetric keys (like those used in RC4 and AES) can be relatively short (e.g., 128-bit or 256-bit) because their security relies on brute-forcing a large number of random possibilities. In contrast, it details why asymmetric keys (like those used in RSA and ECDHE_RSA) must be much larger (e.g., 2048-bit) due to their reliance on mathematical problems like prime factorization, which have more efficient attack vectors. This understanding is vital for configuring and managing secure web traffic.

Read the original post ↗