<story><title>Seriously, Stop Using RSA (2019)</title><url>https://blog.trailofbits.com/2019/07/08/fuck-rsa/</url></story><parent_chain></parent_chain><comment><author>danenania</author><text>EnvKey[1] moved from OpenPGP (RSA) to NaCl[2] for its v2, which recently launched.&lt;p&gt;It’s causing a difficult migration for our v1 users. Moving to a new encryption scheme is &lt;i&gt;not fun&lt;/i&gt; for a product with client-side end-to-end encryption.&lt;p&gt;But within a year or so of releasing the v1, it seemed like the writing was on the wall for OpenPGP and RSA. I didn&amp;#x27;t want to go down with a dying standard.&lt;p&gt;NaCl is &lt;i&gt;so much better&lt;/i&gt;. In spite of the migration headaches that will likely cost us some users, I&amp;#x27;m very happy I made this decision. It&amp;#x27;s so much faster, lighter, and more intuitive.&lt;p&gt;It’s legitimately fun to work with, which I never thought I’d say about an encryption library after cutting my teeth on OpenPGP.&lt;p&gt;1 - &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;envkey&amp;#x2F;envkey&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;envkey&amp;#x2F;envkey&lt;/a&gt;&lt;p&gt;2 - &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;nacl.cr.yp.to&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;nacl.cr.yp.to&lt;/a&gt;</text></comment>
<story><title>Seriously, Stop Using RSA (2019)</title><url>https://blog.trailofbits.com/2019/07/08/fuck-rsa/</url></story><parent_chain></parent_chain><comment><author>frostburg</author><text>This is all true, but reads funny to me because I&amp;#x27;ve implemented an intentionally vulnerable version of RSA and still had issues getting timing attacks to work on modern hardware (due to lack of sophistication in my approach, I think).</text></comment>