[Ipsec] Fw: I-D ACTION:draft-kelly-saag-des-implications-00.txt

Some time ago, Russ Housley asked if someone would write a note for implementers regarding the security implications of using DES. This request derived from a recommendation in 

http://www.ietf.org/internet-drafts/draft-ietf-newtrk-decruft-experiment-03.txt.

Anyway, here's the first cut at the draft. I intend to add an appendix explaining why 3DES is still okay, and someone suggested that maybe DESX should be discussed as well.  If you have suggestions or comments, I'm all ears...

-----Forwarded Message-----
>From: Internet-Drafts@ietf.org
>Sent: Jan 30, 2006 12:50 PM
>To: i-d-announce@ietf.org
>Subject: I-D ACTION:draft-kelly-saag-des-implications-00.txt 
>
>A New Internet-Draft is available from the on-line Internet-Drafts directories.
>
>
>	Title		: draft-kelly-saag-des-implications
>	Author(s)	: S. Kelly
>	Filename	: draft-kelly-saag-des-implications-00.txt
>	Pages		: 24
>	Date		: 2006-1-30
>	
>   The Data Encryption Standard [DES] is susceptible to brute force
>   attacks which are well within the reach of a modestly financed
>   adversary.  As a result, DES has been deprecated, and replaced by the
>   Advanced Encryption Standard [AES].  Nonetheless, many applications
>   continue to rely on DES for security, and designers and implementers
>   continue to provide support for it in new applications.  While this
>   is not always inappropriate, it frequently is.  This note discusses
>   DES security implications, so that designers and implementers can
>   make judicious decisions regarding its use.
>
>A URL for this Internet-Draft is:
>http://www.ietf.org/internet-drafts/draft-kelly-saag-des-implications-00.txt
>
>To remove yourself from the I-D Announcement list, send a message to 
>i-d-announce-request@ietf.org with the word unsubscribe in the body of the message.  
>You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce 
>to change your subscription settings.
>
>
>Internet-Drafts are also available by anonymous FTP. Login with the username
>"anonymous" and a password of your e-mail address. After logging in,
>type "cd internet-drafts" and then
>	"get draft-kelly-saag-des-implications-00.txt".
>
>A list of Internet-Drafts directories can be found in
>http://www.ietf.org/shadow.html 
>or ftp://ftp.ietf.org/ietf/1shadow-sites.txt
>
>
>Internet-Drafts can also be obtained by e-mail.
>
>Send a message to:
>	mailserv@ietf.org.
>In the body type:
>	"FILE /internet-drafts/draft-kelly-saag-des-implications-00.txt".
>	
>NOTE:	The mail server at ietf.org can return the document in
>	MIME-encoded form by using the "mpack" utility.  To use this
>	feature, insert the command "ENCODING mime" before the "FILE"
>	command.  To decode the response(s), you will need "munpack" or
>	a MIME-compliant mail reader.  Different MIME-compliant mail readers
>	exhibit different behavior, especially when dealing with
>	"multipart" MIME messages (i.e. documents which have been split
>	up into multiple messages), so check your local documentation on
>	how to manipulate these messages.
>		
>		
>Below is the data which will enable a MIME compliant mail reader
>implementation to automatically retrieve the ASCII version of the
>Internet-Draft.