[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IKE entropy issues with long keys
>>>>> On Mon, 05 Feb 2001 18:33:25 -0700, "Hilarie Orman" <HORMAN@novell.com> said:
Hilarie> Beyond that, I think you are trying to conflate two
Hilarie> independent issues. Cryptanalysis can lead to ways to attack
Hilarie> a cipher that are less effort than brute force key search,
Hilarie> but this doesn't mean that it is necessary to add more
Hilarie> entropy to the key.
You're assuming that you could never tie a cryptanalysis attack
together with an attack on the entropy of the key itself. Currently
there aren't known attacks that can take, for example, an attack
against an algorithm using a statistical analysis that is strengthend
by a simultaneous attack against the lack of entropy in the keys. But
I'm sure that something like that could never ever happen and we're
safe and shouldn't need to worry about it, right?
Anyway, this discussion has turned far away from my original point,
that the issue should at least be mentioned somewhere lest people get
the wrong assumption about the algorithms they've selected.
--
Wes Hardaker
NAI Labs
Network Associates
References: