RE: Two AES encryption modes?

[Henry Spencer <henry@spsystems.net>]

On 29 Jul 2002, Andrew Krywaniuk wrote:
> The bits on the wire issue is a red herring, unless you are also advocating
> using group 1 and preshared keys to save bandwidth.

Bits on the wire may be worth the cost in some contexts, but the cost
cannot be ignored entirely, so long as IKE/SOI negotiations use UDP and
thus can be crippled by fragmentation problems.

"The cost is acceptable" is a legitimate position; "the cost is not
important" is not.

                                                          Henry Spencer
                                                       henry@spsystems.net