[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: 3DES (was: ipsec vs. firewalls)
Date: Fri, 08 May 1998 11:02:21 -0400
From: Steve Bellovin <smb@research.att.com>
A more interesting topic is whether or not 3DES should be mandatory-
to-implement. I suggest that it should be -- DES is obviously doomed
(pick your favorite time constant), and we should take that into
account. We're better off if the IPSEC boxes being deployed now are
ready to switch.
While I agree with you, we might need to have another one of Jeff's
famous straw polls in Chicago (the "Chicago doctrine", anyone?), given
the U.S. Goverment's special hostility to triple-DES. Given that
vendors living behind the cryptographic iron curtain weren't all that
happy about making DES mandatory, I'd suspect that they would howl over
making triple-DES mandatory.
- Ted
Follow-Ups:
References: