Verisign SGC Description

Over a Trillion Times a Trillion Times Stronger

When an SSL handshake occurs between a client and server, a level of encryption is determined by the browser, the client computer operating system, and the SSL Certificate. Low-level encryption, 40 or 56 bits, is acceptable for sites with low-value information. However, a hacker with the time, tools, and motivation can crack the code in a matter of minutes.

High-level encryption, at 128 bits, can calculate 2⁸⁸ times as many combinations as 40-bit encryption. That’s over a trillion times a trillion times stronger. That same hacker with the same tools would require a trillion years to break into a session protected by an SGC-enabled certificate.

Look for True 128-Bit SSL Certificates

Many millions of Internet users worldwide still use browsers that will not connect at 128-bit encryption unless there is an SGC-enabled certificate on the server. Certain Internet Explorer browser versions from 3.02 to 5.23 and Netscape browser versions from 4.02 to 4.72 will fail to use 128-bit encryption unless connecting to SGC-enabled certificates. Internet Explorer browser versions prior to 3.02 and Netscape browser versions prior to 4.02 are not capable of 128-bit encryption with any SSL Certificate. 

Many Windows 2000 systems using Internet Explorer browser will fail to step up to 128 bits regardless of the version of Internet Explorer they're running unless they connect to an SGC-enabled certificate. Other SSL providers claim to offer “128-bit certificates,” but they do not offer 128-bit SSL encryption to the most possible site visitors. VeriSign (including its subsidiaries, resellers, and affiliates) is the only leading SSL provider with SGC-enabled SSL Certificates, which provide 128- or 256-bit encryption to over 99.9% of Web site visitors. 

(Estimates are based on operating system and browser use reports. There are 156.6 million Windows 2000 PCs in use according to "PC Market by Operating System: Worldwide, 2001-2007,” Gartner Dataquest, January 14, 2004. Browser estimates are based on statistics from OneStat, January 19, 2004, http://www.onestat.com/html/aboutus_pressbox26.html)