<div dir="ltr"><div><div>I'm not sure if you folks saw this, but a few weeks ago the NSA updated their Suite B recommendations. They now recommend AES-256, curve P-384, and SHA-384. Here's a before and after of their "Suite B" cryptography recommendations:<div><br></div><div>Before (web archive):</div><div><br></div><div><a href="https://web.archive.org/web/20150403110658/https://www.nsa.gov/ia/programs/suiteb_cryptography/index.shtml" target="_blank">https://web.archive.org/web/20150403110658/https://www.<span class="">nsa</span>.gov/ia/programs/suiteb_cryptography/index.shtml</a><br></div><div><br></div><div>After:</div><div><br></div><div><a href="https://www.nsa.gov/ia/programs/suiteb_cryptography/index.shtml" target="_blank">https://www.<span class="">nsa</span>.gov/ia/programs/suiteb_cryptography/index.shtml</a></div><br></div>Now you need to decide to yourself if this is worth updating your infrastructure configuration. :)<br><br></div>Regards,<br clear="all"><div><div><div><div><div><br>-- <br><div class="gmail_signature"><div dir="ltr">Alan Orth<br><a href="mailto:alan.orth@gmail.com" target="_blank">alan.orth@gmail.com</a><br><a href="https://alaninkenya.org" target="_blank">https://alaninkenya.org</a><br><a href="https://mjanja.ch" target="_blank">https://mjanja.ch</a><br>"In heaven all the interesting people are missing." -Friedrich Nietzsche<div>GPG public key ID: 0x8cb0d0acb5cd81ec209c6cdfbd1a0e09c2f836c0<br></div></div></div>
</div></div></div></div></div></div>