2048 or 4096 for new keys? aka defaults vs. Debian

[Robert J. Hansen]

> But this http://eprint.iacr.org/2009/317 (mentioned by the German Wikipedia
> article for AES) claims that AES-256 was down to 99.5 bits.

If memory serves that's a related-key attack.

(Hmm.  When you've gotten to the point where you can recognize  
academic papers by their URLs, maybe that's a sign you need to get a  
hobby... sigh.  Time to take up needlepoint, I guess.)

Anyway.  Although there's some really neat theoretical cryptanalysis  
against AES-256, in reality AES-256 is as solid as the Rock of  
Gibraltar.