[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Two AES encryption modes?



> >   I'm pretty sure that we already decided that SOI would treat AES-128 and
> > AES-256 as two entirely different ciphers as well.
> >   No argument about combinatorics.
> 
> WHAT!?!  We already have Blowfish, which is variable key-sized, even though
> 2451 says its default is 128.  We shouldn't need to break existing semantics
> for AES!

"what Dan said".  While it might have been cleaner to define separate
DOI algorithm values for each supported keysize, that's not what was
done in IKEv1.