RE: Editorial: Use of MAY in draft-ietf-ipsec-ikev2-algorithms

[Paul Koning <pkoning@equallogic.com>]

>>>>> "Yoav" == Yoav Nir <ynir@CheckPoint.com> writes:

 Yoav> It MAY be simple, but it is wrong, so it SHOULD NOT be used.
 Yoav> WEP offers 128-bit keys, but only 24-bit security (or 12,
 Yoav> depending on your definition)

Yes, but the troubles with WEP, as I recall, don't come from its
cipher, but rather from the stuff that was wrapped around it without
any regard to proper cryptographic design.

So are you proposing that the rule should be on the effective strength
of the whole system?  Yes, that's theoretically what you'd want, but
no, I don't see how that's feasible.

    paul