Re: MD5 and AES192 combination

--===============6828183319519121085==
Content-Type: multipart/alternative; boundary="000000000000b79c6c064dfa2d20"

--000000000000b79c6c064dfa2d20
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Wes,

Thank you for the response.   I am using net-snmp-5.9 on my device,
 md5+AES192/AES256 works fine.  However, I have heard that
this combination is invalid. So wanted to check here if anything like
invalid combinations.

Thanks,
Pushpa.T

On Fri, Mar 27, 2026 at 2:59=E2=80=AFAM Wes Hardaker <[email protected]=
forge.net>
wrote:

> Pushpa Thimmaiah <[email protected]> writes:
>
> > I have compiled net-snmp-5.9.4 with blumenthal-aes and need
> clarification for the following.
> > 1.   Does combination  MD5  and AES192/AES256  invalid?
>
> MD5 doesn't generate a long enough key to be used with the longer-key
> AES algorithms.  I honestly forget whether or not the algorithm in 3414
> (which we implement) extends key sizes if the hash algorithm produces
> something too short.  I might go look later, but you could check
> yourself.
>
> (if the tools don't work, then that's the other clue :-/  )
>
> --
> Wes Hardaker
> Please mail all replies to [email protected]
>

--000000000000b79c6c064dfa2d20
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi Wes,<div><br></div><div>Thank you for the response.=C2=
=A0 =C2=A0I am using net-snmp-5.9 on my device,=C2=A0 =C2=A0md5+AES192/AES2=
56 works fine.=C2=A0 However, I have heard that</div><div>this combination =
is invalid. So wanted to check here if anything like invalid combinations.<=
/div><div><br></div><div>Thanks,</div><div>Pushpa.T</div></div><br><div cla=
ss=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" class=3D"gmail_at=
tr">On Fri, Mar 27, 2026 at 2:59=E2=80=AFAM Wes Hardaker &lt;<a href=3D"mai=
lto:[email protected]">[email protected]</a>&gt; =
wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0=
px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Pushpa Th=
immaiah &lt;<a href=3D"mailto:[email protected]" target=3D"_blank"=
>[email protected]</a>&gt; writes:<br>
<br>
&gt; I have compiled net-snmp-5.9.4 with blumenthal-aes and need clarificat=
ion for the following.<br>
&gt; 1. =C2=A0 Does combination=C2=A0 MD5=C2=A0 and AES192/AES256=C2=A0 inv=
alid?<br>
<br>
MD5 doesn&#39;t generate a long enough key to be used with the longer-key<b=
r>
AES algorithms.=C2=A0 I honestly forget whether or not the algorithm in 341=
4<br>
(which we implement) extends key sizes if the hash algorithm produces<br>
something too short.=C2=A0 I might go look later, but you could check<br>
yourself.<br>
<br>
(if the tools don&#39;t work, then that&#39;s the other clue :-/=C2=A0 )<br=
>
<br>
-- <br>
Wes Hardaker<br>
Please mail all replies to <a href=3D"mailto:[email protected]=
rge.net" target=3D"_blank">[email protected]</a><br>
</blockquote></div>

--000000000000b79c6c064dfa2d20--


--===============6828183319519121085==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============6828183319519121085==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Net-snmp-coders mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/net-snmp-coders

--===============6828183319519121085==--