Re: Encryption Ciphers
Florian Philipp <lists@f_philipp.fastmail.net> Sat, 01 Mar 2008 11:43:28 +0100
| Newsgroups | gmane.linux.gentoo.security |
|---|---|
| Message-ID | <1204368208.5915.2.camel@NOTE_GENTOO64.PHHEIMNETZ> |
On Fri, 2008-02-29 at 22:31 -0500, Mansour Moufid wrote: > On Fri, Feb 29, 2008 at 9:37 PM, Steffen Schulz <[email protected]> wrote: > > 128bit are considered secure for the next several years. > > > > On that subject, the CSEC (Communications Security Establishment > Canada) publishes an updated summary of safe key cryptoperiods for > different algorithms [1] which I like to use a reference. > > Sincerely, > Mansour Moufid > > [1] http://www.cse-cst.gc.ca/services/crypto-services/crypto-algorithms-e.html "The use of HMAC with SHA-1 shall be discontinued by the end of 2010." Sounds like there is work to do for the cryptsetup-luks developers... One last thing: Serpent doesn't seem to loose performance when used with larger keys, still 28MB/s with 256bit keys.
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.7 (GNU/Linux) iD8DBQBHyTNQqs4uOUlOuU8RAlRFAJ4opXAr521NDHx4DUzvLKiwMwf37wCcCiIQ dXEYNpLgObyCr3lhfEBe3ns= =C/Uj -----END PGP SIGNATURE-----