1DES (was Re: IPSec in 2.5 Kernel?)

On Wed, 19 Mar 2003, Paul Wouters wrote:
> Perhaps it is time to give people the tools to cut themselves. There
> will always be 1DES patches out there. Perhaps it is better to warn
> loudly and support it, then to drive people away. 

John was always pretty adamant about this, and I doubt he's changed his
mind since I left the project:  1DES offers no real security any more, and
offering fake security, even as an option, is a major sin.  Why not offer
rot13 as a cipher as well?

I must say that even though I opposed him on this originally, I've come to
largely agree with him.  Dumping 1DES didn't cause a tenth of the trouble
that I'd expected. 

                                                          Henry Spencer
                                                       [email protected]