I almost cringe to suggest this, but I will.Triple-DES is pretty much obsolete. Yesterday, I saw that NIST announced they're moving to stronger hashes.
Does anyone object to changing the MUST cipher to AES (I'd pick 128) and MUST hash to SHA-256?
Jon