Re: I-D Action: draft-ietf-krb-wg-des-die-die-die-02.txt
Tom Yu <[email protected]>
| Newsgroups | gmane.ietf.krb-wg |
|---|---|
| Message-ID | <[email protected]> |
Simo Sorce <[email protected]> writes: > I am for narrowing the scope to DES and getting this standard out ASAP. > It has been bounced enough, and adding more discussion to deprecate > other algorithms would only delay it, further. > > Meanwhile DES is really insecure these days and we ought to deprecate it > officially so that all vendors wake up and start moving off of it for > real. RC4-HMAC-EXP is just as insecure as DES (both DES and RC4-HMAC-EXP use 56-bit keys), which is some of the motivation for wanting to do both. _______________________________________________ ietf-krb-wg mailing list [email protected] https://lists.anl.gov/mailman/listinfo/ietf-krb-wg