[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: new second mandatory IPsec cipher - updated choice list

   Date: Wed, 14 Jul 1999 09:57:40 +0200
   From: Rodney Thayer <rodney@ssh.fi>

   Based on discussions so far, the choices list should be redrawn.

   I think this is the list...

   -- CAST-128
   -- BLOWFISH
   -- IDEA
   -- TWOFISH
   -- MARS
   -- (other AES candidates, please feel free to contribute)

Note that intellectual property is an issue; all other things being
equal, an algorithm which does not require (both commercial and
non-commercial) implementors to pay licensing fees.  

Two issues with the AES candidates is that first of all, while the
eventual AES candidate will be free of licensing issues, this is not a
NIST requirement of the AES candidates before one of them is chosen.
Secondly, most of the AES candidates are "young"; while they are
receiving some intense cryptographic review, they haven't had this
attention for a long time, and so I am not sure it would be wise to
select an AES candidate at this time.   As a crypto protocol engineer
(and not a cryptographer), this makes me a bit nervous!

						- Ted
Follow-Ups: References: