[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IPsec and TCP



> From: andrade@netcom.com (Andrade Software Andrade Networking)
>
> DES was designed a long time ago to optimize memory over speed.  This
> made a lot of economic sense at the time.  Today it doesn't and we are
> now struggling with it trying to retrofit it into modern high-speed
> networks.


NIST has begun the process of selecting a replacement for DES which
would be more suited to today's environment.  They are now looking for
public comments on the criteria by which the Advanced Encryption
Standard (AES) will be selected; comments are due by April 2, and will
be followed by a public selection criteria workshop on April 15.
Here's an excerpt from the announcement, more info can be found at
http://www.nist.gov/public_affairs/current.htm.


> PROPOSED DRAFT MINIMUM ACCEPTABILITY REQUIREMENTS AND EVALUATION
> CRITERIA
> 
> The draft minimum acceptability requirements and evaluation criteria
> are:
> 
> A.1  AES shall be publicly defined.
> 
> A.2  AES shall be a symmetric block cipher.
> 
> A.3  AES shall be designed so that the key length may be increased as
> needed.
> 
> A.4  AES shall be implementable in both hardware and software.
> 
> A.5  AES shall either be a) freely available or b) available under
> terms consistent with the American National Standards Institute (ANSI)
> patent policy.
> 
> A.6  Algorithms which meet the above requirements will be judged based
> on the following factors:
> 
> a)  security (i.e., the effort required to cryptanalyze),
> b)  computational efficiency,
> c)  memory requirements,
> d)  hardware and software suitability,
> e)  simplicity,
> f)  flexibility, and
> g)  licensing requirements.
> 
> Comments are being sought on these draft minimum acceptability criteria
> and evaluation criteria, suggestions for other criteria, and relative
> importance of each individual criterion in the evaluation process.
> Criteria will be finalized by NIST following the criteria workshop.