Why Cryptographic Key Length Matters

In cryptography, the security parameter lambda represents the targeted level of security. It determines key lengths, hash output sizes, and other parameters throughout a cryptographic system. A system with lambda = 128 means an attacker needs roughly 2^128 operations to break it. All parameters are chosen consistently so the weakest component provides at least this level of security.

80-bit security was once considered sufficient for non-sensitive applications. It requires approximately 2^80, or about 10^24, operations to break. With modern GPU clusters and optimised algorithms this is approaching feasibility for well-funded adversaries. NIST deprecated 80-bit security in 2010 and it is no longer recommended for any new cryptographic deployment. Legacy systems using 80-bit parameters should be upgraded.