Re: I-D Action: draft-ietf-krb-wg-des-die-die-die-02.txt
Tom Yu <[email protected]>
| Newsgroups | gmane.ietf.krb-wg |
|---|---|
| Message-ID | <[email protected]> |
Simon Josefsson <[email protected]> writes: > Removing the references to RC4-HMAC from the DES document seems simpler > to me. RC4-HMAC is an informational document, and there is no IETF > standard that requires its use, therefor it seems unlikely that whatever > a new IETF standard says about it will modify deployments. Especially > given Russ' comments about interop with Windows XP. The logic behind deprecating RC4-HMAC-EXP is that it is of comparable weakness to DES, having the same effective key size. If we are deprecating DES, it makes sense to also deprecate similarly weak ciphers. _______________________________________________ ietf-krb-wg mailing list [email protected] https://lists.anl.gov/mailman/listinfo/ietf-krb-wg