[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: How to negotiate key length with ISAKMP?

>>>>> "Perry" == Perry E Metzger <perry@piermont.com> writes:
    Perry> Not to say that you aren't right about needing to negotiate
    Perry> key lengths in general, and certainly with RC4 and RC5, but
    Perry> I believe CAST-64 and CAST-128 are really different
    Perry> algorithms, not a single algorithm with a variable sized
    Perry> key length.

  But, are we really going to want 76 bit and 72 bit rc4? I think
there might be three, maybe four key sizes, and that is it. I know
that there are two: 40 bit and 128 bit. Are there really more?
  I think that algorithms of differing key sizes are as different from
a policy point of view as different algorithms.

   :!mcr!:            |  Network security programming, currently
   Michael Richardson | on contract with DataFellows F-Secure IPSec
 WWW: <A HREF="http://www.sandelman.ottawa.on.ca/People/Michael_Richardson/Bio.html">mcr@sandelman.ottawa.on.ca</A>. PGP key available.


Follow-Ups: References: