Re: Symmetric Algorithm

[Black Unicorn <unicorn@xxxxxxxxxx>]

At 05:54 PM 10/28/97 -0800, you wrote:
>Questions:
>
>There are presently three symmetric algorithms used in PGP. They are IDEA,
>Triple-DES, and CAST5.
>
>Ideally, there would be only one MUST algorithm, and the other two are
>SHOULD algorithms -- because you lose some compatibility with PGP 5 if you
>don't do them, but there are reasons not to do IDEA, for example (it's
>patented, and you need a license).
>
>So here are the questions:
>
>(1) Which algorithm is the MUST algorithm?

3DES.

Well understood.  Well reviewed.  Free.  Timeless.

>(2) Should there be more than one MUST algorithm, and if so, which ones?
>Please note that arguing for IDEA being a MUST algorithm could lead to the
>standard getting bogged down.

No.

>(3) Should any remaining algorithms from the original suite be SHOULD or MAY?
>(4) What other algorithm(s) do you want to see as MAY algorithms?

SHOULD:

IDEA, CAST (Let's define WHICH CAST precisely though, yes?), Blowfish.

MAY:

Others.. (SAFER?)


Now, when are we going to see larger than 1024 DSS keys?