[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: AH-MD5

To: ipsec@ans.net
Subject: Re: AH-MD5
From: Ran Atkinson <rja@bodhi.nrl.navy.mil>
Date: Mon, 30 Jan 1995 08:02:03 -0500
In-Reply-To: smb@research.att.com "Re: AH-MD5" (Jan 28, 17:51)
References: <199501282254.AA04430@interlock.ans.net>
Reply-To: atkinson@itd.nrl.navy.mil
Sender: rja@bodhi.itd.nrl.navy.mil

IMNVHO, The long-run algorithm should NOT be our focus now.
Our focus now should be on
	1) algorithm-indendent protocol specs
and	2) a right-now algorithm that is good enough, but not
		necessarily perfect, and has tolerable performance.

The early performance data I'm hearing about for SHA makes me VERY
doubtful that it is practical to deploy SHA universally or to get
it used on very many packets.  We need an authentication-without-
confidentiality mechanism that is practical to use on virtually every
packet with acceptable performance.  SHA does not appear to be
that algorithm at this time with currently available commercial systems
(e.g. 90MHz 586s, SPARCs, Alphas, etc).

Regards,

Ran
atkinson@itd.nrl.navy.mil

References:

Re: AH-MD5

From: smb@research.att.com

Prev by Date: Keyed hash functions, Novell's patent
Next by Date: Re: AH-MD5
Prev by thread: Re: SHA + generic auth specs? (was Re: AH-MD5)
Next by thread: Re: AH-MD5
Index(es):
- Main
- Thread