Submitted by [deleted] t3_125wf75 in explainlikeimfive
Blueroflmao t1_je8u99j wrote
Reply to comment by Pokinator in ELI5: When a third party app says they offer "end to end encryption," what does that mean? by [deleted]
For what its worth, AES (Advanced Encryption Standard) which is currently applied by default for nearly everything on the internet is the standard for a reason. A brute force attack (trying all combinations to find the right one) is... Impossible, with todays technology. The selection for AES was started in 2001 by the NSA, and in 2003, the Rjindael cipher was selected and it still remains the AES to this day.
As far as I know, several different attacks and methods have been found through cryptanalysis, the best of which was found in 2011. Named the "Biclique"-attack, it was further optimized in 2013.
Now heres the real kicker: there are generally three kinds of AES in use, all with slightly different designs depending on the size of the key used to encrypt (secret key/initial state, the key an attack is trying to find) These are AES-128, 192 and 256.
So using the most efficient attack that is publicly known, how long would it theoretically take to break one single instance of 128 (the simplest one)? Optimally, about 9007 Terabytes of storage is needed (down from the original version of the attack needing 38 TRILLION Terabytes) The time complexity remains the same, despite this improvement, at 2^126. (Simplified, theres some technicality involved here)
What this all means, TL; DR: The simplest form of AES in use (AES-128) would take billions of years to crack, taking ~ 2^126 operations to do so, requiring OVER 9000 terabytes of storage while executing.
As far as we can tell, AES is set to remain the standard until quantum computing comes far enough to actually be useful in Cryptanalysis (meaning we can actually extract the result of our computations, something we are unable to do today)
Viewing a single comment thread. View all comments