Re: Comments on draft-blumenthal-aes-usm-03

Wes Hardaker wrote:
> 
> >>>>> On Wed, 23 Oct 2002 16:38:28 -0400, Uri Blumenthal <[email protected]> said:
> 
> Uri> Longer hash output does NOT give you any more bit independence,
> Uri> let alone "true" bit independence.
> 
> A bad choice of words, sorry.  They're very dependent.  What I meant
> to say is that you can't take the first 160 bits (sha1) of a key and
> derive the next 160 bits. 

Correct then.

[Still doesn't make increasing the hash output length the right
solution.]

> I suspect you knew what I meant, but sorry
> for using an incorrect vocabulary choice.

No I didn't - especially since it echoes another discussion in a
different [security] forum.
 
> Uri> Sheesh.
> 
> Heh.  The IETF WGs will never be a place for polite discussions, will they?

Heh. I thought you've been in IETF long enough to firmly realize that?
(:-)