[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Incorporation of AES into IPSec
On Mon, Dec 06, 1999 at 08:48:05PM +0200, Tero Kivinen wrote:
> jerome@psti.com writes:
> > > If you were wanting to protect
> > > data for 50 years, would 3DES be good enough?
> > it's hard to do prediction over so long time, but 3DES has a 168bits key.
> > it is safe against a brute force attack. A cryptanalitic breakthrough
>
> No, 3DES do NOT have 168 bits of strength.
that's why i said a key of 168bits and not a strengh.
> Its effective strength is 112 bits, if you have 2^56 blocks of memory.
Ok, but 2^56 blocks of memory (2^29 GB) is a lot and is unlikely
to be acceed fast enougth to performed 2^112 search in it in a
reasonnable time.
Moreover such amount of memory is harder to paralize than cpu-only
brute force, so it will be shared by several cpus, creating lock
problems and slowing down the overall search.
References: