Re: [Mixmaster-devel] Mixmaster v3: A call for action

[Bram C. <br...@bi...>]

Len Sassaman wrote:

> One of the things I'm discussing right now is whether or not we should
> switch from RSA to a DH encryption scheme. This isn't on the table because
> of security problems with RSA, but since we're breaking backwards
> compatability, we might was well consider it for engineering reasons.
> 
> Does anyone have strong opinions on this, either way?

I'm a strong supporter of DH (as Len already knows :-) ) the main reasons
are -

* it's much easier to make protocol design mistakes in RSA, it has a lot
more 'gotchas'

* implementation of DH is somewhat simpler

* Key generation is *glacial* in RSA

-Bram