Re: deprecate tripleDES?

Paul Hoffman <[email protected]> Sat, 3 Jan 2015 07:27:08 -0800
Newsgroups gmane.ietf.smime
Message-ID <[email protected]>
On Jan 3, 2015, at 4:32 AM, Michael Ströder <[email protected]> wrote:
> Isn't it the time to deprecate using tripleDES and add a stronger SHOULD for
> using stronger symmetric ciphers?

Why? I have not seen any attacks on TripleDES that make it insecure.

> The text from https://tools.ietf.org/html/rfc5751#section-2.7.1.2 is pretty
> blurry:
> 
>   [..] If the sending agent
>   chooses not to use AES-128 in this step, it SHOULD use tripleDES.

If there are two or more ways to interpret that sentence, we can clarify it. I don't see more than one, but maybe I'm missing something.

--Paul Hoffman
_______________________________________________
smime mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/smime