[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: A little social engineering

To: Rich Graveman <rfg@ctt.bellcore.com>
Subject: Re: A little social engineering
From: "Perry E. Metzger" <perry@piermont.com>
Date: Fri, 20 Jun 1997 14:06:52 -0400
cc: ipsec@tis.com
In-reply-to: Your message of "Fri, 20 Jun 1997 13:57:20 EDT." <199706201757.AA24146@shadow.secure.bellcore.com>
Reply-To: perry@piermont.com
Sender: owner-ipsec@ex.tis.com

Rich Graveman writes:
> However, even having read the last two days' comments about performance,
> I think we should take time to consider DESX, which also appears to have
> the advantages above at single DES performance.

If I remember correctly DESX just "whitens" DES with a repeated XOR of
each block against a static key value. My gut instinct is that I don't
trust that much. I think of it as multiple encryption of DES and a
repeated XOR pad, and certainly given that the repeated XOR pad alone
is completely trivial to break, I'm not sure why I would trust the
combination of DES with a trivial algorithm...

Anyway, it doesn't give me comfort.

Perry

References:

Re: A little social engineering

From: Rich Graveman <rfg@ctt.bellcore.com>

Prev by Date: Re: A little social engineering
Next by Date: Re: What price security?
Next by thread: Re: New draft -- IPSEC AH
Index(es):
- Main
- Thread