[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Last ditch proposal for crypto suites



> As a practical matter requiring keys to be multiples of 32 bits is
> also a good idea (there is a 1000 bit key in use).

Could you expand on this?  I don't see how this helps either
interoperability or security.  

We've run into interoperability issues when moving private keys
between different RSA implementations due to assumptions made about
the precise modulus size or the precise size of the primes.  

I'd hate to see the same happen for public keys as well, and I'd
prefer to avoid forcing customers to regenerate their long-term keys
to migrate to IKEv2.

					- Bill