Re: [Cfrg] What crypto algorithm is referenced most in RFCs?

Hi Jon,

On Jun 20, 2011, at 10:51 AM, Jon Callas wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Jun 20, 2011, at 10:38 AM, Marshall Eubanks wrote:
>
>> On this topic, has triple DES been deprecated yet ? I wouldn't feel  
>> comfortable recommending it for something new, but I don't think  
>> it's been shown the door yet.
>
> No. 112-bit crypto of all sorts (another example is 2K RSA keys) is  
> still acceptable.
>
> I agree with you, I wouldn't use 3DES for anything new. But the  
> major reason to avoid it isn't key size, it's block size. You should  
> avoid anything with a smaller block than 128 bits.

+1.   This is a highly relevant security factor, especially for higher  
data rates.  This comment applies also to IDEA, CAST-128, GOST  
28147-89, Blowfish, and most uses of RC5.

To quantify this, I believe that a 128-bit block cipher can process  
2^32 times as much data as a 64-bit block cipher, while having the  
same level of security in the indistinguishability model, assuming  
that neither cipher can be distinguished from a random permutation.

David

>
> 	Jon
>
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Universal 2.10.0 (Build 554)
> Charset: us-ascii
>
> wj8DBQFN/4itsTedWZOD3gYRAtDaAKD+P4sz4cpvr7/s/JeWv6rI31+8uACgzrsX
> H8E9kdTTiJXQPyMYxhZw3I0=
> =5wHj
> -----END PGP SIGNATURE-----
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> http://www.irtf.org/mailman/listinfo/cfrg