Inconsistent requirements about number of bits of security

[randomstuff]

We have this requirement:

#	Description	Level	CWE
6.2.9	[ADDED] Verify that all cryptographic primitives utilize a minimum of 128-bits of security based on the algorithm, key size, and configuration. For example, a 256-bit ECC key provides roughly 128 bits of security where RSA requires a 3072-bit key to achieve 128 bits of security.	1	311

At the same time, we have this wording in the appendix:

A security strength of 112 bits or above MUST be ensured for all Key Exchange schemes, and their implementation MUST follow the parameter choices in the next table.

Scheme	Domain Parameters
RSA	k >= 2048
Diffie-Hellman (DH)	L >= 2048 & N >= 224
Elliptic Curve Diffie-Hellman (ECDH)	f >= 224

[tghosth]

@danielcuthbert @unprovable any thoughts on this?