Re: Cipher Preferences Ignored for Kyber keys?

Werner Koch via Gnupg-users <[email protected]> Mon, 27 Jul 2026 11:06:15 +0200
Newsgroups gmane.comp.encryption.gpg.user
Message-ID <[email protected]>
--===============5204381023922294971==
Content-Type: multipart/signed; boundary="=Bust_AGT._AMME_Riot_Worm_Drug_cartel_corporate_security_Watch_INR=Su";
	micalg=pgp-sha512; protocol="application/pgp-signature"

--=Bust_AGT._AMME_Riot_Worm_Drug_cartel_corporate_security_Watch_INR=Su
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Sun, 26 Jul 2026 15:33, scuffbox said:
> honored where ciphers use a suitable key size though. GnuPG supports at l=
east
> two other ciphers with 256bit keys, TWOFISH and CAMELLIA256, which may be
> used instead of AES256 if all recipients support/prefer them.

We already have way to many algorithms thus if there is an option to
limit them we should take this opportunity.  AES256 is the cipher
algorithm everyone use and it has hardware support.

Twofish was an AES candidate which did not make it.  Camellia was
included for pure political reasons.  Frankly, I am glad that we have
not seen a demand for other national cipher algorithms in the last 20
years (Despite that there are at least a Russian and a Chinese set of
algorithms).

RFC-9980 (the alternative PQC for OpenPGP) actually allows AES-128 with
ML-KEM but uses some wishy-washy language to justify it.


Salam-Shalom,

   Werner

=2D-=20
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein

--=Bust_AGT._AMME_Riot_Worm_Drug_cartel_corporate_security_Watch_INR=Su
Content-Type: application/pgp-signature; name="openpgp-digital-signature.asc"

-----BEGIN PGP SIGNATURE-----

iJ8EARYKAEcWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCamcfhxsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwyLDINHHdrQGdudXBnLm9yZwAKCRAZzByeCFsQekO4AQCU
GC4HVLW8DvHmgnQXy46mMtkgEFDKi4gKIhkLsKIWdwD9H2sX/09IRz/wI5k3Zqkd
TVq28rVdkfzoh8uTFaxuJgw=
=zH4X
-----END PGP SIGNATURE-----
--=Bust_AGT._AMME_Riot_Worm_Drug_cartel_corporate_security_Watch_INR=Su--



--===============5204381023922294971==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

--===============5204381023922294971==--