[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: AES draft query
At 03:54 PM 3/17/00 -0800, John Harleman wrote:
>absolutely correct. but there is also 2 key 3des. as schneier and whiting
>recently pointed out:
>
>http://www.counterpane.com/aes-comparison.html
>
>key size is increased at the cost of performance with all AES canidates.
>So why
>would one use larger strength AES algorithms without using the corresponding
>strength with public-key? cheers - john
There could be many reasons. Some might include:
- due to your hardware accelerator, 128->256 AES might only cost you 50%
more time but the corresponding increase in public key might cost you 200%
- the other party only offered you one AES length but many acceptable
choices for public key lengths
There are probably others. The baseline decision is "are both the symmetric
and asymmetric keys strong enough for what I want?" If the answer is yes,
it does not matter if there is a mismatch in strength.
--Paul Hoffman, Director
--VPN Consortium
Follow-Ups:
References: