This post has some claims on AES that seem out of date. For instance, most CPUs nowadays support 256-bit AES without resorting to bitslicing. And most implementations have had plenty of time to address the side-channel timing attacks from djb's paper.
The recommendation for 2048-bit RSA is also a headscratcher. I get why you'd want to prefer ECC, but if you have to use RSA for some reason is there any scenario where you wouldn't also want 4096-bit keys?
Mozilla's TLS and SSH recommendations are pretty solid though.
The recommendation for 2048-bit RSA is also a headscratcher. I get why you'd want to prefer ECC, but if you have to use RSA for some reason is there any scenario where you wouldn't also want 4096-bit keys?
Mozilla's TLS and SSH recommendations are pretty solid though.
https://latacora.micro.blog/2018/04/03/cryptographic-right-a... is an alternate, arguably better, source of information.