RE: Two AES encryption modes?

[Henry Spencer <henry@spsystems.net>]

On 29 Jul 2002, Andrew Krywaniuk wrote:
> > Unless I've missed something, the use of suites rather than individual
> > combinations of transforms -- which is precisely what we are
> > debating -- is how that was solved...
> 
> I guess you did miss something. The permutation explosion was solved in
> IKEv2 by making the encoding more compact...

Thanks, I did either miss that or forget about it.  However, I think
"solved" may be too strong a word; I'd say "reduced".

> whereas with assigned ciphersuites you would have:
> xxx: 3DES_SHA or 3DES_MD5 or AES_SHA or AES_MD5

You're assuming that there aren't any "SHOULD support" standard cipher
suites, so it is still necessary to list all supported possibilities.

                                                          Henry Spencer
                                                       henry@spsystems.net