Bill Frantz writes:
At 1:11 AM 4/25/96 -0700, Bill Stewart wrote: [...why do people continue to promote the RSA method?...]
Sure. Because 1) it's a good algorithm for the job,
And there are other equally good algorithms which can also do the job.
2) we've learned it, and have a PGP base behind our inertia,
A pretty insignificant base actually (at least compared to the internet as a whole) and supposedly PGP 3.0 will support multiple encryption methods so maybe the RSA reliance can die the ignoble death it deserves. One point left out from the original posting is that a Rabin exchange can use a RSA public key provided that the p and q in the public key are Blum integers (which also lets you use the public key for probabalistic PKE, as well as a few other neat tricks), so changing PGP to support Rabin would not be much of an inconvenience...
3) The legalities of RSA are well-defined,
Yes, and the most well-defined point is that until September in the year 2000 you will pay an arm and both legs to use RSA.
4) the Stanford patents mostly run out in 1997, unless Roger's suit succeeds first,
A point in favor of non-RSA public-key methods.
5) the price of RSA is fairly low, once free RSAREF came out
You must be joking. Have you ever tried to deal with RSA lawyers?
6) the price of licensing Cylink patents is high and/or unpredictable
True, but Cylink needs to milk their patents for all they are worth for the remaining 481 days they have left. In a little more than one year they will not be left with much more than a footnote in the crypto history books.
I will add to Bill's list:
7) RSA is the best known and vetted of the Public Key algorithms.
Best known perhaps, but ElGamal and Rabin have also been studied in depth (in fact, Rabin is provably as secure as factoring, RSA has not been proven this secure, it is only assumed that it is.) Most public key methods fall back to only a handful of real trap-doors, so there is only a limited amount of vetting to be done (esp. when compared to symmetric encryption methods.)
Some people say that the millennium comes on Jan 1, 2000. Others say it comes on January 1, 2001. I say it comes on September 20, 2000 when the RSA patent expires.
Nope, it starts on August 19, 1997. After that point it becomes possible to deploy systems using secure public-key crypto worldwide without needing to pay someone royalties... :) jim