Re: Cipher Preferences Ignored for Kyber keys?
Werner Koch via Gnupg-users <[email protected]> Mon, 27 Jul 2026 11:06:15 +0200
| Newsgroups | gmane.comp.encryption.gpg.user |
|---|---|
| Message-ID | <[email protected]> |
--===============5204381023922294971== Content-Type: multipart/signed; boundary="=Bust_AGT._AMME_Riot_Worm_Drug_cartel_corporate_security_Watch_INR=Su"; micalg=pgp-sha512; protocol="application/pgp-signature" --=Bust_AGT._AMME_Riot_Worm_Drug_cartel_corporate_security_Watch_INR=Su Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Sun, 26 Jul 2026 15:33, scuffbox said: > honored where ciphers use a suitable key size though. GnuPG supports at l= east > two other ciphers with 256bit keys, TWOFISH and CAMELLIA256, which may be > used instead of AES256 if all recipients support/prefer them. We already have way to many algorithms thus if there is an option to limit them we should take this opportunity. AES256 is the cipher algorithm everyone use and it has hardware support. Twofish was an AES candidate which did not make it. Camellia was included for pure political reasons. Frankly, I am glad that we have not seen a demand for other national cipher algorithms in the last 20 years (Despite that there are at least a Russian and a Chinese set of algorithms). RFC-9980 (the alternative PQC for OpenPGP) actually allows AES-128 with ML-KEM but uses some wishy-washy language to justify it. Salam-Shalom, Werner =2D-=20 The pioneers of a warless world are the youth that refuse military service. - A. Einstein --=Bust_AGT._AMME_Riot_Worm_Drug_cartel_corporate_security_Watch_INR=Su Content-Type: application/pgp-signature; name="openpgp-digital-signature.asc" -----BEGIN PGP SIGNATURE----- iJ8EARYKAEcWIQSHd0YfKgdOvEgNNZQZzByeCFsQegUCamcfhxsUgAAAAAAEAA5t YW51MiwyLjUrMS4xMiwyLDINHHdrQGdudXBnLm9yZwAKCRAZzByeCFsQekO4AQCU GC4HVLW8DvHmgnQXy46mMtkgEFDKi4gKIhkLsKIWdwD9H2sX/09IRz/wI5k3Zqkd TVq28rVdkfzoh8uTFaxuJgw= =zH4X -----END PGP SIGNATURE----- --=Bust_AGT._AMME_Riot_Worm_Drug_cartel_corporate_security_Watch_INR=Su-- --===============5204381023922294971== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Gnupg-users mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-users --===============5204381023922294971==--