Re: What is the standardization status of AES in IPSec?

[Uri Blumenthal <uri@bell-labs.com>]

Mark Winstead wrote:
 > ........... would use of AES 128 without 128 bits of
 > entropy have any FIPS implications? ............ is
 > there another FIPS document that would imply that x bit keys
 > require x bit of entropy?

No to both, IMHO.

 > Additionally, it makes me a bit uneasy to not use 128 bits of
 > entropy here.

Whatever people need...

 > I believe AES with 128 bit keys carries the idea of 128 bits
 > of entropy to the uneducated and lesser educated......

Carries the idea of *up to* 128 bits of entropy. [don't have to
use it all.]
-- 
Regards,
Uri.
-=-=-<>-=-=-
<Disclaimer>